last executing test programs: 8.379730882s ago: executing program 3 (id=2913): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x9867, 0xfffffffffffffffd, 0x0, 0x7, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x534, @loopback, 0x62}}, 0x0, 0x0, 0x400, 0x7, 0x32, 0x9}, 0x9c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="074660615815e24c0a0fb3d29b4da435a4bdc8289c8375fb19c7492e000416c7eab1a4726bee6f2ba6ee46f8dad49e12948da5dc1985dde58a6069826c06173254", 0x41, 0x0, &(0x7f000005ffe4)={0xa, 0x4e27, 0x10, @loopback, 0x6}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.959380884s ago: executing program 3 (id=2919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="010000000200060000071a80010061cc", 0x10) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000240)={@remote, @dev={0xac, 0x14, 0x14, 0xc}}, 0x8) accept4(r4, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x800) socket$inet(0x2, 0x0, 0xf) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000140)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000003c0)={r1, &(0x7f0000000440)="23edd53a179f4f9872658d56816d23e3d99da29c046b90d5b872465c42cabf0bc85d97b17c07934cb06de3d173974919ad92e0fd5ecf0000006dce8b3550eba01bbab9b92e2ecbd28b56af4bac78feff89b9a1210f1c20234f16884dc3b2bc290e15a5c230984ba7f323304e8304dac22b2eb8e4d7764d691ef75da02d08be0d4f4b168d74a81ee02475d8ef71501e6ee7af604e0a08832bcd9dd9874124ca6a5e0694653ec6a8115723a17fa6babce334f5550bce64355ded55e99bf309ee0a0d34136ac7a43a7ef1bc0e2b2a", &(0x7f0000000340)=""/78}, 0xfdf2) 6.623917645s ago: executing program 3 (id=2920): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x3f2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x404c000}, 0xc000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bind$bt_hci(r1, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x4018, 0x4) connect$inet(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4c800) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 5.754988811s ago: executing program 3 (id=2930): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fb}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x805}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc859}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fb}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x805}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc859}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r8, 0xd0b, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}}, 0x80) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}}, 0x80) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) 5.633937042s ago: executing program 3 (id=2934): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48010}, 0x55) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3, 0x1, 0x3, 0x0, 0x0, {0xd632f0044754652e, 0x0, 0x5}, [@CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004802000390017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES32=r6], 0xb8}}, 0x2) 5.330892252s ago: executing program 3 (id=2939): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/114, 0x72}, {&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000780)=""/22, 0x16}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/130, 0x82}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000000b00)=""/229, 0xe5}], 0x8}, 0x4}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d00)=""/87, 0x57}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f0000000d80)=""/30, 0x1e}], 0x3, &(0x7f0000000e00)=""/179, 0xb3}, 0x4ca}, {{&(0x7f0000000ec0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000fc0)=""/198, 0xc6}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/38, 0x26}], 0x3, &(0x7f0000002140)=""/237, 0xed}, 0x90000000}, {{&(0x7f0000002240)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002500)=[{&(0x7f00000022c0)=""/49, 0x31}, {&(0x7f0000002300)=""/196, 0xc4}, {&(0x7f0000002400)=""/6, 0x6}, {&(0x7f0000002440)=""/101, 0x65}, {&(0x7f00000024c0)=""/54, 0x36}], 0x5, &(0x7f0000002580)=""/132, 0x84}, 0x7}], 0x4, 0x10000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x2, 0x5, 0x1, 0xfffffffe, 0x2, [0x8, 0x9c, 0x62, 0xb]}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002640)={0x0, 0x8, 0x4, [0x0, 0x1, 0x2, 0x0]}, &(0x7f0000002680)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000026c0)=@sack_info={r6, 0x5, 0x4}, 0xc) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="4c0000001500977059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000061e00140608ad2f72b433af5c27e077120835d726d39e7cf5f3c554af0e37d47e885bf7570eeda6d025", 0x73}, {&(0x7f0000000140)="7ff7baaa6bf1ce7f38b16cad3a68997f6a45ab377482c5669470ba360a1643140f73da09c3d545d5396129b3dae31ed5cc953f137cd64d65a6a56ea419796e587658aad1e9353a87ae1d2470adf8d850fbd8541d4bfff4cba153740f48a6c3de9d49a10a4411f5", 0x67}, {&(0x7f0000000240)="3d07850e024ca4b7e06de3a393d2df824c395322b8e3b0180baf19276d69a54b806ba9b27436dd39c1597348557e1a90abdc74df717a2df1b14cc4300ef2325303719d6b9aff7cec1838fb82d0c6836aeb83ceb06773961aa1ea5863a602daae9e3f52d6f4f58bff98c6bd0187043be1bb850d85f6ef2ed37cdf96eb2909642ae1a9dde62940319e68d1cc23df4821b50000000000000000000000000055000000000000", 0xa4}, {&(0x7f0000000300)="f6832d487429c285f48bc20d84c9472a18ccb70379d865402dbee94bfc8cbd4a7ddc25ce44fc35506d6f911e638fd747504b9fbe8a6a9972fa8624361373e8fb0f65b77cbf3e5330987a886f31d3a8f7f30ff5f7944423389a73481511c026a99ae8f127d024e4bace769f277aa6305d4f29b382a384a72a1c2c655e52c3a8afd7331a23b47dbdad8149b2102fe132e423e7e82058951c2ecfee10d17a6e7f7d69ccdbcde6bc2643c73428170e7898834d791a1281b1f9b278088aeae9933eba19dcad1dcc2fc76d8bae861c444a00dd61513bc9feb5d9c212b89c5d288d", 0xde}, {&(0x7f00000001c0)="7c1d8a8caf47b5495885a8593869e2e31ca181de9ac2f316b21d413b7d24e53eb294eb3d49a7f9ad6a0e2e00b6e759220878e3c0543e69d7caf22273dbcceb682051c605c5791d209aa28ddfce6c4096b62f488672ad4e5c1d88b88ccc3423c8bbf45133c148d33353", 0x69}, {&(0x7f0000000400)="928d79a7ebda96ed3a6b45e2e43eb97e2406fbfb64ac6191ccc01051d36fcae5d84490951eb2a28e44baff5cb9ce02cd7de187677c5ffb4f3c3ca84f5170c671299e574d1686f018487c477c77d5b2a9f69f336b2823cadbdea3a124be1ce34d59046aa7723006af909a0c6d0865c780df44bb62969bcf470e22d38ffbcdf17f5a4e75c53020c9210725f6", 0x8b}], 0x6}, 0x4008845) 3.527368467s ago: executing program 1 (id=2958): socket$nl_route(0x10, 0x3, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@rose, @default, @default, @remote, @netrom, @netrom, @null, @rose]}, &(0x7f0000000240)=0x48) connect$netrom(r0, &(0x7f0000000600)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x40045) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) getsockopt$ax25_int(r5, 0x101, 0x2, 0x0, &(0x7f0000000040)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) shutdown(r3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000680)=@gcm_256={{0x303}, "4c29b31c80116a54", "b5bd662e80fb6e00da6d22f347b28dc6078a5c2c817cdc9cb664906f6d88f666", "6775134e", "69801dfb817d5e52"}, 0x38) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x2004}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 3.110205327s ago: executing program 0 (id=2963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="000000000000000000c7ffffff00000000000000948d7127af843d0a5deb46aaa4add041a74b4c445d524486aa2c234d7fcf14dac4f7e85dc7a0f41734afb8cc712f6ddc60c359090b8efd9873d1b98e72642a6dc0fcada670de7eb23d23dfa299834c87405e8444acf8c99b8d36733d8849b3326bf71ac3b9423c29f415e756e306872e886659b66e96270c6ca78b41212a62d4e5b07ef2baa851a05cab2e181373bc3517c2077fb905c0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="09000100a008000014000300"], 0x34}}, 0x4084) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000800)="00214705c4e7b3591fe6b7c1f36099a9268140fbf39f", 0x16}], 0x1, 0x8, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500230800003c0012800b000100697036746e6c00002c0002801400030000000000000000000000ff1de100000214000200fe80"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 2.44817275s ago: executing program 0 (id=2966): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async, rerun: 32) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="500401a06483a2b460515c"], 0x7) (rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=0x0, @ANYRES16=r5, @ANYRES32=r5], 0x4c}}, 0x0) 2.276023017s ago: executing program 1 (id=2968): r0 = socket$kcm(0x10, 0x2, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) (async) recvmmsg(r4, &(0x7f0000003bc0)=[{{0x0, 0x3, 0x0}, 0x80000001}], 0x400000000000034, 0x10000, 0x0) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000300)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async) write$tun(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="000000020304000e00008007008c5d673ef774cea39aa376aaaaaaaaaaaa08004519001c00e4000008119078ac1414297f000001c72975ea5f954511"], 0x38) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004b0013000000f2c1dd814d5122262948d29e27319591299acf1b3350f39d5eb792c004ee97886fd8ac3fe5a6832518dbbd61ffcfb515a1387a18f6807d394159d1dfae879976b5b9e58fbce3f0728486d757e5921a154aec63c57808a402c84b40460742111a724d906ca49e01fc5e2d2019b9452b3c"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 2.216633748s ago: executing program 0 (id=2969): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xbc7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f00000000c0)="3f0d8d5242cec9e21ae0c47ebee8f83edeca46f686a842b41551805fda7944c5160b0a13b076e07f8e02898b3b7f35d1772befa52630248ba9033db722565bea95bfe4", &(0x7f0000000140)=""/167, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x99b}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @snprintf, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1000}, @exit, @alu={0x7, 0x0, 0x6, 0x6, 0xc, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x72, &(0x7f0000000380)=""/114, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xe, 0x5, 0x5b05}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r0, r0, r0, r0, r0, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0x2, 0xc}]}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x37, 0x0, @val=@perf_event={0x1}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000640)) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000680)=0x1) r4 = socket(0x10, 0x800, 0x1) splice(r4, &(0x7f00000006c0)=0x17, 0xffffffffffffffff, &(0x7f0000000700)=0x95, 0x8, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x6b}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3f45d376b4"}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x4000084) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000001040)={&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/45, 0x2d}, {&(0x7f0000000980)=""/15, 0xf}, {&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/140, 0x8c}], 0x9, &(0x7f0000000f80)=""/172, 0xac}, 0x20) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000001080)=0x80000001) recvmsg(r4, &(0x7f0000001680)={&(0x7f00000010c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001140)=""/101, 0x65}, {&(0x7f00000011c0)=""/10, 0xa}, {&(0x7f0000001200)=""/85, 0x55}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/241, 0xf1}, {&(0x7f0000001480)=""/192, 0xc0}], 0x6, &(0x7f00000015c0)=""/153, 0x99}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x286, 0x3d}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x80084) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee01) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r2, &(0x7f0000001800)={[{0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}, {0x2b, 'blkio'}, {0x2b, 'net_prio'}]}, 0x33) bind$bt_hci(r4, &(0x7f0000001840)={0x1f, 0x0, 0x3}, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r2, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0], 0x0, 0x52, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001b80)={0x0, 0x6d, "766d23b5928fe501a70e53d34293b80523f8105ac5e030651eba7a4f7bc08d36129164f908fbc9a59a4a20e2ffdc0810ecc58519f51d769e70a6b5041e67c202dc213e0296fca4c47311d60f33feaa37ee9cbe3daeb1fd14b8c563b12442f90a57db74dbed292247787b0d9fd7"}, &(0x7f0000001c00)=0x75) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001c40)={r8, @in6={{0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x2}}, 0x1, 0x764, 0x427, 0x5, 0x40, 0x1, 0xfb}, 0x9c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000001d40)=0x1) 2.07415987s ago: executing program 0 (id=2970): unshare(0x2c060000) unshare(0x400) unshare(0x24020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'devices'}]}, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1f030}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x54}}, 0x1020) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r0, 0x0, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x30, r2, 0x35f000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020702500000000002020209c1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000001c00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x23) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 1.999822244s ago: executing program 1 (id=2971): r0 = socket$inet6(0xa, 0x2, 0x88) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000003c0)="e98e3e7afa164fdf1faa77ab83da48e6f1dc45a2d54976d926bc4db53b72267c26741514547ac13aed04fffb17b7c26c6d9da5508c41036804e3b93b530f5b6d897b1f5a49d852016c525482d5199f479d410ff44b9ba98a6820e8806fdc9cdbf07a550056045b1abf67ff887573ce9624261e8864bfbe0d633cf31d1c22363e524b5fd1a0f31a8eb1bd8f94a3e4f5265eb45fcb9351ea4755c9a455b9218ca7ddf714f8f7a139ef830b48e768483976c07e60f462fea74b54bda596e0631aec5318ddd4e43a8ea104a5e303ecea9f18e9b2ce3a576e7b094b07f35b5071e7", &(0x7f0000000140)=""/5, 0x4}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x50}}}}, ["", "", "", "", ""]}, 0x28}}, 0x4008800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x829c}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x54593, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70300001e000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket(0x28, 0x4, 0x7ad) bind$vsock_stream(r8, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) listen(r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r9, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x200, 0x6, 0x7fff}}], 0x38, 0x20000800}, 0x4000041) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) 1.963300421s ago: executing program 0 (id=2973): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x800, 0x0, {{0x27, 0x4, 0x1, 0x9, 0x9c, 0x64, 0x0, 0xd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@rr={0x7, 0x1f, 0x26, [@remote, @local, @empty, @private=0xa010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}, @cipso={0x86, 0x4b, 0x3, [{0x2, 0x3, '6'}, {0x1, 0x12, "edc0d1660667a31c72ec83caee41e395"}, {0x5, 0x7, "93118093c4"}, {0x7, 0x10, "99ba31816553cfd21d716dc8c644"}, {0x1, 0x8, "42fba5cd5141"}, {0x1, 0x2}, {0x2, 0xf, "e80ca5c78d3feaf3ffe2b78ecc"}]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x7, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x1}, {@multicast1, 0x51a}]}]}}}}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x101, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 1.947585958s ago: executing program 1 (id=2974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x7, 0x6, 0x1, 0x0, "43b201"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x29, 0x2b, 0x6, 0x3feb, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8, 0x10, 0x907, 0x7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x9f}, @generic={0xe1, 0x5, 0x9}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0xe0, &(0x7f0000000580)=""/224, 0x41000, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x4, 0xe, 0x4}, {0x5, 0x2, 0xc, 0x8}, {0x1, 0x1, 0x3, 0xb}]}, 0x94) r7 = accept4(r5, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x208, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5748262b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ID={0x61, 0x3, "ad17a83e7234ff8079d32c307f1df23aa93bd1a4fc7986cee6c6ae0b55d1d525fd5d172bc953ef32880b04d8327a002e469464bb107e967ea55c060caa5f12967052d673b76515cfb77b4a5c6d1f901a00280d9cff584b842c4e080ce0"}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x44000}, 0x0) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440020000000900010073797a30000000000800034000000004140000001100010000000000000000000000000a8106a1b384661fe59340aa3e0a28c59deb07f304f7ae79daf94d28c148a91634378739a3c1ca80c667aa54d3129294f55a046a14ac6ada12a5dbff9bdf117ca9d6d06624f7719fd6b6eb85e8b3fd0e8a0d2b6c828de372f49c32879901b9dfbf50d5696ec216a12e8b3fd82b5495c60a0d93ad53629db272dd4ca9e632e30bdde9bd05"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32, @ANYBLOB="080002"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.670927967s ago: executing program 4 (id=2976): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x4000000) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0xfffffffc, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r8, 0x403, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_DEL_PMKSA(r10, 0x0, 0x4004) 1.493147689s ago: executing program 2 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r6, &(0x7f0000000300)="d79b4a16a5fdd18f20e72eee395d1ec6f448ba1e587beafe789720778a93c511a33d3383a049f4f69fa73fd185ed42181e896415856555210e55cce5d36b927b310cf2fd4c0809592e7144e63ba172844c", 0x51, 0x800, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setsockopt$inet_buf(r6, 0x0, 0x0, &(0x7f0000000380)="3293b58b4146cd453925f202aab853f3776a2fc3aee9071c7c3fd0aeea70051b120eeb1e96554d800f0d30df014d9b4a009cf9ab97061cfdb3f73173b62ddd8a1fafb94e651401b3c02119996a9254706f182b7304b6ac286f98", 0x5a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x64, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_FLOW={0x8, 0xb, 0x1f34}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.349713385s ago: executing program 4 (id=2978): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x2) sendmsg$kcm(r0, &(0x7f0000002940)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="9c82609fe3e509e0c074eae792470abb6265d7518d6ec4a2a3d9e081ffed27331b75b9a1fcd9a170b504108c2ade53d19f03ce1fe51b454f45a0052a288a2acfe6d7b296a3", 0x45}, {&(0x7f0000000100)="866ec67a6c2163663cc9cc99c79d4c1b78f4b847f37fe7ebca041d3972d2c068c2625cabdcba2d6ab692bec0695d1e0cac85b0c7619f8baa522b6ebfbe066b01fe0a608bcddaa6705b65a8d7995b02db161c59f8dd0b2a2ec1105bcecc681e55f6d7f0317aa7af", 0x67}, {&(0x7f0000000180)="437acb5ef87cdba7e50e346a5f3ba6569cff474a0a59ce6c2cf2c6ccc624c3416e023a7471f4114a2ae26842a18440ac7460d54347b22d330432004716aea0d378c565984108c60b82d2e0aee603d7fb6cd56a0047b3b7f7801a4be8dfd285236617090e03a90d36390fa78830ea69a7591fd49432ce0053185bfea8d1ad8d89e59790ce16d8601a378cfffc385042748c860408820de46debc22d55b9f10aa964ae988341fdb5d2df46f2c782e157fd", 0xb0}, {&(0x7f0000000240)="282c95", 0x3}, {&(0x7f0000000280)="36d8b3cd00df0289e5", 0x9}], 0x5, &(0x7f0000000340)=[{0x108, 0x10f, 0xe14, "f015ccd6217462fe496824a227fcbb43c3ad28e87bdbb64f422256ade31b0c00fb350893ddb990b56239452ef6b015421c240765d652ddc91abe7368f606351706aeb7ed355c7e29eecf6276351050e2b8f4c594d88a87def70a764c517533c2f1b670fa1d1e8e1a8f8a934bb227d497404444aad965a9ba4e2671216478454ac664d8a62b2e12e8dc6d51bb50e82b40acedd7c2e28441413d67183a767a42229426f3d83b44163f644bf8c0e19203b84d6e4c013e08205fba5980d5030b54ae4024ebfe5f88a7de2ec7a8dc64258b80e4717d92e257bf4579f79a55736b494793a16401719fba728efd82e5462f4fe443c8cad06ec7db"}, {0x100, 0x29, 0x3ff, "7ceff173a0b4b399cd7ffd24ef1336651177279f8a8873380a79d9935fbb1514ae5641552270a6899277b0b4d49e48518088950084354a25103213ea8715dc8ccac733feba8448282afab4c79f7525ba6372e523e0c97a79b5a2a4cf0ee924f6c49f391654b99e7ad2b1f94dcd1ef492861777176b25b9b8545c0ef6a0005f9a3a81ca962362fd66a9d2a7f210a9bfe1b34d103c47533ca8f711ece7728ab647a62e0f77070d038cdb7be47c7c96051a042366277f8105cf386d55f3d8fb94207a35433a20a7d10720a87bd1b946812cb209e25b888d15ca80d7d0fbf6802c24358963710a2d58c92078d983"}, {0x1010, 0x112, 0x6, "bfe7ec8c9f4e23797596cb238722d9b1f5ad73715b303354d4b34d96267e729cec03dc410b8329f79643497e62eacddf416442b4dd882ce2fd12c981368848eaf388e190ce84b8fccadd37da91ccd837024a0512bcf92302dcc76db03d095d82b2c3583004acb7b442fbdcd8d4e36c48ed1ca1b15ee793bc110c719f558858760f4b5eedbdfa480326876f3fa82d79a56be8af04715112c508c4708d5f93b1e2d6655caf07bff8be60ac1610cc3a2b16b5b2de0862cea067504a2030b6ee6e118450dd51afa66e3306003822b180b6091451826041ed341d3f3ffae0defd884718f26b98eec6981e1f2758e01bca37f5ded01a680310a7e458ee07bacaa4ae7146933f9abafb1779486f86b64eea13adf27fc87e8f589b91c577d4d344e7dd3231cbb17fc60971583fd213d53e04ac3a45c86802cd8c689b752826a03da863c47997d7adfd251ccd46ff83693ba816466dd8cf10dfb2c780c69a4cffb59af0d91eeac09eb541b7ffef58b65f24debe101c7f425555f3c0ed19547204775e6ce080f8957b45bda3a9d0bf62b2f578f9ff00a2c30ea191989154a71005402c63c4cb7b1bc3eef866ef52d28ca48b1918f90b005f1176a7351d79c41ffb34ac03a5906a5583d871b7c55d14e95a460aa70d8c5701d79e7dc462c58d17b03a1ca670c269ad9056e1ed93b77ac1c477026085adc2c4138bff6f5700d375691d631e749dd5e20750769b5d2bfe1d1731d2b2b2fe210e241737921c934d92ecddce6b197c2bec1d72685330b240ac180d648eae3a52742d518050f285f1dcf630c691c105c6a038fdc30d94c0abb1891248d6bc8d9a0fb130507ab318b8372e189da2d52d59656e5e032b3d1692bed3228f4be686915c1ccfe9958cb33defdcdd977baa14f9c04ed97eea563163d3d5ee443eae44c3ac7303719fa0bb9a41983b3d62ec87e13391935a8e626f8c81a1d21864650fd18dd7bc12fb43b6c082c9aee89ccabc633064bd2e5c7719569df4dfa0f5f1c1321cb36b6c2dc8d1ceb43fe29f81b659eb44bfd1e780ebea34cdbfdeb3c21158726d1ee269a7f5572707215828e436eb0972ccd384bed00316e342a44879d3277cde45d5f1ddeba84b2fd305a0e43602db73becb856a991ccc70446d94d8806aff8b2e0aa6859370ac208b1595aca7a1a6ea62f3e99f6f1aded2f7c168bb6f92202fa349a5a76582c7657c2dc1ba1c4fcd34caac47c9c3229f6f86182b4a9555f6d8f5c7fa95f1b4eb6502baffc27cb1381123264042d55fc6132de189d1c1737cfb8ddb411a607e5704117d5108b7451b70aa981f3fe6a03f037c405183d0c556f112435bda55fdbb8c373bc2f28250d07043197412ea9b6c1fa6a86cf9b949ffb986577e1c76cc8c5a14534c8076ea57ad62700e15fe883381a9b7dc9e81591cf9e6516978d593fa3a0deb41788e8d73355c164858f9c7e3cc923a7021ef364b1ae87408a23795231217efa8ee0a3e7c00b6b68db63b0092a575ddacad708d04b3113b90e72f27347daa6114049ae91790e210f8393c0e3170978d761b596a66ba766162409f439047f05bdfdd594575277f1ae402d2649fde964ee073b83e5df24b023f645d10b58b4d548445c7c042144b5d1b2a47316003726749aefcce256562a37633c7c63bbc44f3724bd68713b4f950e9d5da0b30e01759530d965155cca0fb12d2579fd76d1c1ae326b1292ac550166f98f1e7bc8eaec687a97814adec3f2caf00c5288b49fc3d23160db2094e920542d44dda9f61485991fbc53996cab1d310afd098caccbce71ac926638cad8d40dfcce762159c0c2650a6875f1a4bf16f118c0eb94aad7b7bd73add5267afd817d180bc8d3217f2b8e499af3c5a2f6b22e4558809b4d188155f63065bd2c384f8bc7bd164f4f35b5e23265c0c5735724bb7ed91641552c8bf71ac0763dc338dfa1f3344b526d2ec39d5b204d623bafc71f7cfab1e9373e43732177694b11cbdd06cd8802a81faf9e12d04afc74c701ff1e3af9af352ec190813f150a3b988584b42e64ea599337dacafe2def6b6b7fe9ef84f58a271ac0ed8136f5c64862079e8c5d6f5f60e5d854865787ca8021f8c4bab614ddd4dbe49ae89035bb125d012806f845f8b3bb82b860fe48a8aae972ad41fa253a5dfb0de99624941e1aa4162d013f64f0f9b470d0e6bea8e7c549ff1e81b35c9a2ee4cd7cf18d3f757cf5d646681fc277bd8f155e7749083dd0ced065733484c48e7476b3e395a8407e9bc9f7a37e2debc8b5d8965b3e0bd2355b815ee70910fcc9e02df9cd6b1b3d042b44cbba3b0b57531a88d38e161e2527ec5a8969d57c867c83dc19427dff180d6da71892832cf3ec4095091e4a3a57b47c2574db89cffb4a72b5b0de6c7edc6572e80172b1fbdcc63e9798f246d5bb65d2fe9bb8be129deed898e5d8a0828541d35d1e2a1cab3f88108fbef4cccadba56d122b94c22e7ab825bb20a8d2d39bebc4d7da775f292aee1bf26935c85d28016887389b4364b9a487fac9dd2e56b9d3fa8e713aaf9ad8485f60931a7f89a97ad4b3c75a36a95277db861f0351c14b841a5b561810d1d85319c135e7891e8a4430f8a13664625b3c5d52f79fe82438d2b9ef2482b8122ecaa30a0fc3afe941ad19b90b02a087aa8884844a42eda4349d1e2f9f5ba58f42468aa292f425d10ce1b34235e47b26aff22ac246572beb44a0157dc791759e5fa7fbaf6a62ed71c4bb041fc56dfb03c84104c1eb0f4ebfe773fcbbb14c98a00f4a8028a7e3343d445fcca793705bc84d31f2ba9eb3b2bd038eaeb2a09eed0974fb1d9c2630f8ede4c0f1aa7c9b24de9476b653f2d06c2605fd713a28f91cd4d68a67b3ddf0e3cf4852edc3f605610e5e59afbc83a84ad288b086fd3b56f02dce4cdc62c5b80b0dc21553d46df62029b1f3194ce1da1045c20b82733014b9961a4850300c768b1c517d8cef061c2ceeb6a447a4b9c62d3420e755690fa97c5d2606bf05b3e5d880cf224567312eb7f26019c88c902457bdf3e5c346ba3a67a1816ef9556af8ebc5698e9c3cb152a84fbe271407a42033ab5e02c7f9aa55b6f2d43f0789498f6f69cc03808ae10c263a1cd41eaf92f01b2de060850bc3438be6cc7e199b2d291b10f543054ba2ca6d8569ff7879e6130e61316f949851de8ba31b57cad648a4d1e7e4ffe9281c761b637608d736ee942010eb42681a3cffb818bad50bbf624d0ab3ea8222e605a2c9182f494018823a7fc034cb3aef46a8014dd49ce138beca7e06386bbf22a5f9799e1c96d5b23b663a805f957261fe8aa16fa1d272c831aea4fbfb2f2dbe080243345e300380d8df5a16f816555756653557ccc296b0da82235545996e8df4430e3601bdf188e2e23c9264b9a0c691d0c9903acf8a6ba71fbe0138d8999a90f0e3ca195ce51858bcca375983e9f244c2347092c7e859ff2d3ebdef8efb79300ec8022f3181ff1921a3a84c85f2b51d991e4504bfde2e7332d96cdb0a19900e63db367f50f263ee0acd5fbe0362a4974849afdbe4a20b7e1bf41b42e4b1da7cccf53ba5461a012d74901697fa6db0c982046b1b71a831a9cc15e4cbff623d7838038069bfa6f6ceb10cf237d74dd432ae52c862af71f80bb667c41ff162de6f92704e7fc7478ffc61878194e71e6fc192f2fe993a330bf334442f51413feefd135945d6582665a89dd4bae96c6946a724d719ceb5f3e181bc9ea269d5ea4b6cc77393a16c7f2a592554bc05dc86a9e4f470cc72ee10b730edfffea7b88e1ebcb20a7b83440c6c45c765701cbb5bd9bf5a96fe02799ce19ee3c91ba4e662e00e71a0eb24ea7c92201c616fa534e80b12ac6bfe08ee3745e4f1b272ca81ed23d3c59b7e6ecd4c7e42caf0dd429e40d3da66055c9578a66d6cc9d036de4a4023f74f87f7c6effc462bb1b7421e1aee5c3033cfd96aaccf53808cde6c2a28854ebcefcc213f2a213b31b4e9f65550fb2570f41ec00e735ac41fd9c1f2353d12e09e9023ccc7db29580b0a27a923b489b4acfb459ba63a9d9034ce596c817e0f3ad5dcf678f77061119013453f61b95b7ceeb53c042ad21788a2b351bf3d0c526ef9604d06631ece762bf18cc36da4c520f36e05482092a52df4d73b8d27c50f3c936e829d6358904c1d7b7e4f942a2a8c996e11bc5df61c4e1aeab350af3a6953dc028ee53e15fa65c0e90ab1320a4dc95543c96dadcb9b57144361a70903c2ec5e10d27dabfa771a382184172c7b487f049d55c63de928f38e00cc29b5ec38d1c4be301eb98a910f1a270139bac83c84e62bc02acfbf39eb736a6fa6d119841e6af835ff0afcabe88534252ae21cdd92e7cb34c0e11d48947e1b11c4f06ee0f9895c2a8e1100e738deed297005a7d1ba38e83fffa169e6a773ff157a9de58f0681a226fad1c03bcb04d4e4f166ef2ec8bcea4801fa9fa21addb608112ed3e6c3a4e24595b3c1c8d649afa589867ad0850d5c38bfa5d506ca3c93b59cc4c08324c363bc751f7812919f7c68c0743624c0cf965d2bc7a654838061aacf80d409279ff2a3f814745bb4ebff959ccd08810088a31c5dab21f77c125f8b74871c45aa90c8e76ada2ce5f47c690f77838fbdb7d0ceed555bccb1a80828103bdfba8a05311f18d91a4a556ecaf370d8e501b5e83c6bbc4288466c2ff2d342b6102db83af68706e5153c5159f7d4da14ebb91496cac6f64edd324280da37a6ffaccf40b1587349939e3d8b9b5f7ee864534132bb6f8eb8c006c76e4402af13f7ca45cbc8f9c0e006efadb012592b4133857c31bf4a517b81a79123cc57e3310f19ec2ddbb8891b873c1bdad3cfc7ac5d6219f967c7c3a244191e95e8a00ba1eab6a95b7f253119009adf3d11d4643ce9415e85301008ff62bfbd08576ff8d8ea3e73610aadb61f549c38b7f4a6c5910c78ec40f7dcdbf6deca3c0d0e683daec2a91f778a70c5a98f6c79a8136d9f22f9195c4d4918961117fd7f5adacba7f6274c82bc4116536c50adfc08df238667b455fa37237352cb66cf269860597e4420134e5581eacb50ea5882ac2d18fd9474b05df70d8ebff4b4a0a08365ad698bd328ae9562a7ad349249445c7aa25e5ed36af54e455ebe49878cb731199c2ba89e409c12f7799fad624a97c6787b03d8decff6cab1f4c9ebafb62989237cc8d2124d099a9cb77040768e4389a8f07d0e132bf78f15a6ed5a0c9484a058eee18cacbc431372b3e251c344f04764d5c98ba792985384576530ca7a7176a100e9decaced06516d236f3d122eb881d2c54fa4fc96d4c2df4f5c809f44e4395aabed6cfe06faff5da2261ba90931246be1dc7353d79a474d6b9755f546343d4a7233bf7c9ac7100bcd51b30801010ea4734686a6d61538be7737f33f7028f9930ce55f8886f11d726274aefeb2aeb745fef1b0128945ede250718fc1c5ffece8ca4622b91060887d6662aced186950fdebce10f62d65676319502906efafc64a2c28a2e8df50a8f54778763d1e225fc0d1d048d9ff6845f6325e235b8a6b7c95bbdb9f8fc7831c1390baef0ec0783810846ddbddb61906563adcf2db8c0d453e0976cbae26cb8e788f080e84a10200fc7d755efedff0e73016ca2588aa3444a13f9c145ed6e615d45376c20682a83cfdc521d6447008faf684dc89b7246a7dff06d54043bf738f4b7007d0415df12135d571c38e9d9c767b98c667ad9368bb25250088dde98f8c9b5efba003e91751838e41c8d565edc8119bc37dafd986770e3201ea6edce7bf141f6c81b7cbef7265ec1daced"}, {0x50, 0x112, 0x1ff, "20eb1b420901edfa3de967575b4636c6dbf9d8b77de4f212df77e183e2c6160a7d4d43d822f277cc99de5a08c67ca2feb0a86e018b5287dd22fee5"}, {0x98, 0x19e, 0x4, "4d3d0b6f0327a56f375b0813db05fa17f7d20ea8429f66c70d4480298400862154b86b24f6ad7a030b21795d2781daf7b39cc2b7075967c00f68812bedeece0512bbf5decd8914cb810561730d72249e15e0088be646a7de19d472fa8b446eefbffa84cfe80800bbb0cefe2011d0188c6280104ea03d88bfd5c7b5a0b5fab7b109b618bee07a"}, {0x30, 0x1, 0x5, "532860217aedb5dbb65aec81d8d5ab675a593c5dd6fe80429fc6"}, {0xf8, 0x107, 0x771, "4cf311104e796b82e3ed7618943ef3dc514f589293dfae8b9991a9fa9a76727e8defbf639280e384f16b895104f319ed5ab0ee048d1ecb30c010aee31030f4f3a9c4ea52d0fc97175eea26e855265ac2ad3ad7633a03c9ab7336085191bc3705f7b5c26abfc91e6367f5bdddb938cdcc2e705ed1538af036e89ee594c6df8dcaab0068f2d3649ffd57736d92ffe059cf05059adf4e49793a81a876d17e5d5097e895951b631b339cd625657666c3fcc1e46f0e4eed67d17c34fe03fb9a962ecb49295e062f95721b8c5ffe85ad9e1c79a705dd80c63da5ebf6aaf6b5d23f509878f6277ab07125f1"}, {0x1010, 0x119, 0x4, "dfc80a8ffa16e45a5f129e19bef4d2ea371640e169b7bd3a1f8f16e7b94f5fc78bd778fb0cd33e081377a071288269edae543396c8c5dd1d1feac270db5f479f8a82e0425a6afc009d8b3b73d001ad6ed05b8544e9bba325fccc90fe7e896293f6b9b321bb1aac990b110498305cafa878c0ca915f10e13a110129493a1cf80994394c43ace47a72720b20915bbf43fb0a3d2c5b516dd8e64f8d02c86bdf52892367d73c0a43244e1881637ca0b156f7b0dce3facfc7788c1779f823cc88f3f1a871215d332a6fe5cea715cd8a09066599934f73882534a022faa9159a39edc3868587098c26b74f1605df145f2be12831cb6e9443b7a6eb89c33ee70bd19ed96a35ecd50f3ad160dcd3c99f9d779148a86b0d797eb9106929471a9ed56fc3d00b48e7596dcb38cd88bfcd9fa78e16156840d22fac168a57c6f3f152d449576ddc19f67cb01cee3d3f9ad8774b92ba342063588ca9b4c3395d7489bcb66fc8bcdf6f674ae0ed05c17856e744e7ca7d73a444321ea39f0823b19f50f87582ab083a0b9f791df8a18a34ac789bc8c80cb76d27b92fc89d4f03c377fe3a7fb57032ff975bf78b117d87ca5fbef6bb14a43cdbf3646f53682e4b376ea8be3f4dec2e5aeadfaca543fd80dea9363029c33db55c673a3fc19a1f2cc387e0e299b97a6436ec1e40aa70c41934e8da36df453a55b55aea2607e39925e116e639e465307c078014e8cfc5601dbd07208f7ff36633f5cd511f71e66036d64397c66082e6a09795d2def5b3b81465c4de496a1f9821d73bde5a74f92b3653355ee9194e94f4952e7e771aa3c0800c993342ea4d407ee78d8a1c6d086ddbc037593635213f9afd2bf252a38d0f234cfb8e48b0885affd22051d0029d2725518f3da0934692084b1c3f3ef2e2a81b9b5211787bdf6f595c6ea1683efa16c175f61c53fb0f67963a4e69139ac49eed8effeacf3b2d24408e85dc45b22e377a535b5d3c801da79af58e15208900023a5c3b06d81beff565ef257c3ebc877d0f8207f2704c21cdd2eea9aae6233b0c9238e4193ba2ddb485a2624770ae825713a736b1451632ce5dbc8c96f56a2c32b2a7459387eb3b5de058eb7ae4af47527797b52bec1772e50fa5162b8449e0cc2edeeb1022d066e78034e7095b042a53da0f0ed9788357e21fa65f456a802c49423c334abe15fa76c5bf03c3c22fc18f4a434b813e148826aab4d3629a573e684aaf89d6f7adc76ae8050aa4710cb3f6386b669a63b773596648b979be9c3a6bb0e51e2fe42eaa5cfb491e4cec557c396f0f8ca4e6c2d24c4b7253ea52842d37555b4d6e68e6b64487fa93db13c85dfefb6118bba03e04e903b0f5d0bc32b8f0afd03a9f4506fd914bdf28acb9bf9223b4d9ad347b5ac7f730708f9e99375e12b2bbfaa3ba3858d93afaa8d87284733fcf09361e99f1120fb31cfd5ad3812b092273652d6c59ba6eaa5121fbea5e997769204f04d2d4d86ab7cb38972027acc83021cde554b054274176df56ed1e690d8fb5becea9db4acb1e6c5227b3ccc84488c3e945b9bebdad977991854c4e1a512b58226c2f2346777e45d3eb938790de4c5264da00327bbc1c7805f3d480b7753e8d474f37799467017dd7e89a25c5c85bfd4ab00582509531a12613eeb8c770bfe644084833c39ef12ac896678f15fc460843cf8f33025133d9fd6f575bf108f88cb583a38a255041b2ece67ea0d7814af7ef606c299903bc2401c6d2595ade413f0edb338b9906dd681f679f9b67aebf06ea25b05aca21549f12f7dd934d1f87a8d84e9fcaa0ef148963bc73372260cecff4065ac616539d39f8420d01b9a65c7ed1a2ad8a01556438664185eb60d3d4a5262820c2ca3d59dd477754a7a5bb4a38133e32757d2716ea21c57a292bfb4573cefa70878fcf6d81b4c2d53623dcebbe742f5beb8d1b6a241086f07880ccf970eca9586b8026d06ac0b79bdbda0875027d50f272178a6133a4893db54ce5532a9d691f9e61159ce88633edc5789fd76ad6c3335c646f3b90e691941b0109adf231021d43aa885ef5ee8bc6281f6040928a81e3175aad05073b97c696c33cb88163ad316af50d564b575df3329710edb1925318e083004b769ebf620cc40bc4606ef30adde89450fbb40cbc1bd4d6be4babd0e782a71694a889657b0acba27bd4164134550e27e9a7647685d0351ec2e68b95445eb01a039309b475c5f26877971e16a8ab1b4d358de51f00170e15ad81d9a283e7bafbade87ce1afb2b9577744dbce778b4fb721bfc3944aed69fb057c9268ec839643ec6bdb87440140464f51ece189155a376c8b1ffbe489efeaec4875bf7e30d538f20902e0df47a30b2943e8d100479a5900408991a8a6c3dc9b11f84744696a8081ee103affb6090163c1af8f82f00afce9cd1533dfae6c2c62d05f602563ba28cd32e1811256076bb2a46c8ab45ed476250bfb10187e0b01c9ffd09b27c6d2f68b2e34f283b8faf30d376197d56875b4a172898d782a7d83f10868b626cd7cd9be19911b9cd2171adf011b3a04ead4daef9117e1c06d13c32f3058bacc5aa64fdad68ee2175d528015b247f7bede626d3e0559dc0ed0a433a7867351a242b2f9b554f484ba68c5ce1c98a689fc4d080e9ac0df5a74fcd2410050937b98177a6340857c36cb6c4e37cafa82ec2e02d6347ce5aee889fda89dc520f3996b8a6abf70d2cca5e6455dc38f13719581496d2f153a8056888403ed433d811a477d6eb143220604bbd3a2094f6a0c69ced439d70136b1e6702292f4bfd7f00a7b0f0b7420fa5306ab607a669d4e7ab7cca68a8b938dea7c5ced5e7d6d30f45ffdcbe936aac99538c565645e2b6768ef3989db6edf126121b7fb58d25de4fa94f43ad7b14488031da879342a76230a85fad056daceaca45844bb3358ac6983fe525e97dae22b29de7783a9cc4492de8924c168fc9b31348114ae6d3f31a70560d742deaee3dcc5bbe9d3dc689316797e2f8ad603f46a61b1a08e3e8319c7688e0ca3639cb624255b643f9f4d151792c7d1a73f640ba4fb0107018a111e558fc74bdf1cd9c8869a24ae7b661f34e3379c4586d89f4c56f2cdbdf55a0a4569b5f47c3b451b17921b2f0942db7b321f0bf8a596358f7007b650f224cea885e1d2f8ec65172543ddbef5e7b069e246abb87920d64778003ff5388f9b4b67ae120df8e8a2de7c94956ec9c400f887c05501f5a69725e977345b3ddf8841ff7024afad59a3095d5cf04c60d8c0fdbb930c747c85fe36c17e5abbe3cc15a696fad58430e9b4f9240db02eb7ae4b26e5fc19f4375d27d4bce5de3b415d828573cb152d054ff7b8f32bcf23b73a0ea27b76923fdbc84cf680206c693de66657cd70fbcca04bab64951c8686fd84b8a91e8535016d78e17e532dce05e5c87803cf7e6dd15e2277f7193a9987135e5a81a0c3664c4ea6ad4c5bde2162a8f552af0ea5a835d9def8808ef441dbac3583c376a2ecf3b241854ae0dbf7ec8f2cdb83dccbc69aa41020fa7614ed3d81bd405c99a208ce01fbc29a940bf2c648f38f4d2e03394524048a96b84bcde5db7ded5fda7a1fa88f4255d1f4b614ebf64dc7ed3cc4417049731449680c7d3817118291916a7d8d7e81937b0a930ed6bd836ab5bc938317ef8c917356bbd1606644467b43e5748d50d674408cb2f72c8aa40cc89415f078f103465d7f867a1600a7c1e1b1da3404678f2a6598068cf1dab292e1ff5f71263316a0fe3a09248a11b71a91cef17b81c671a2863242c0decab8b7105587083354cb0fbc617e57ad7d69724448625cf7f61f8a74924b6e1b9cc2cc99b248c9c62490855c2f37a3dd4c7cd1bb42241f266463b5fb75f855f37b3b7307dd3e0b7a0056a5210104005251cfcc2898f35e8d6b4b4f84051b10ee458347527aee32d01ae1189c621aa51674c359af82123ad58babdc2ae30e3d9aa2d1d8f7a444301424ca8771e986d244f4382943205bd03a15dfa9a4ba6fc2ce2a3bdf2b17733d7579e398b9bfe85104be6eec4dfb684cfd37c6d4097496b009f0028fae2956f36d76f2b5f1d42120c0f18a9c9489e917e61f892830d4b3e2b8f689e9c151d589e15e0b9888c28852ecc99bb04d740cd3eeac324c617c94c40756265db08ca375ab6b7b6bc693e370778d16df9d0c6f7b3f917ba0cca13fb9980affeee5105d906247edd87e9f626f2555ab6447104587a58e7186067c9ca1e1c3b3d39f2b3ef1c07210c74a17fc7f537734e4918c124078f2e1d5f94fd00ae61bcad29ba606c4bcb0e34268be9fa2234d9f04e816e03b8077c72d737b847d4e0bc77368552b4714b4832b6b1f24eae9cf26944f9a9037e356aa15674ce0736171cfbc050fe6f6744a35da1fb8a7ad448b6b9779cd20423e713c7e2cc4b1ae99f74ebc1b5034ae7002c25c8c54417c8c87dd616a2949ff82b0cbc4a9a8e90d170eb878d859cb59605933d2913c52ebf9c9791a7b2bce620763f186a31bd05f107034506ce0f823c37a3da5a31c4ef52b4c9da2a1960131c582dfbbf8788b0ffb1c9adf73b2fde86d42d7d81f531c56ba40cbe0a0c04462f7f1715270842c5449d8e78c64a7826cbabb2e6fc10fa127b298dd44a190a7c0b7321497fa8cd8db490b2e443a1994469443029d3777a67d87508d0e1bfe03fdbadc3a58d5b32cbb3ee51a38b730dfa75f11fc245daa1f62c9cadc83b58c7451ac78697fa06375186525432d718da50a373afccb166c4d33c5313ef855f86d7462bf9abae03bc996f2c7d3bd126700f05c2089d9e04769c7235d51fd3f2d8b0a3a1bdeed3f9b91dc1f5d60d405ae595d244d373cad307a2d015038fc993429066f4003d88c01fe201535a9a432ee6844dcebfcaa468b6dd41d7e5d824bd52df65b894f461a3acd58e52edb4bccf88a6ea7b837d08f19984b0085b92e685dcae307f66b07acd235d54d44298d32754a26c00289f914f9d7191ee5883500707a7018ec0890eb56d4a87ed9f68ed14505532b339dda2bddfc506860ebcb51aa95d4d710e3ce3f76313f88863e731f788e6544a7b4b9f837225111e94a6249fcb78535d19702a0fa4b00257c9e7baff47d35c3bc40b4979ce2c88f9909d5b983cd1efd190ff51ae676334e8f04da9e5cbd2a244602027880ddede392ccbcd3f3a38067244efc5465c4b7d3ebd0b9526a749fbebe464a0c64857bab45f2af6f95e63db4ce629f898da4db9fd10c3e0b7f2a9d51a51a229133ae42ac80cd22725231a7b51969296ef73a07cc6b3b78d280849df81de6db9b5bb65adfc28f467515f70c1f737ce1797827af5ab9fe928834b72b3d3bc8fc44febd2f9ec65ea5b800d85189b2892d15e558e7895235f516f9943deb5592abac394b00f41c7b9825d277cbd50bef9552b6edf76c02405e7e4e920216aee802225ccdec7f5467df3363da8557b6fa253d248b6c29f976ae09cb697240644059124222fe9903c1400b56b53567d7543b406f772cd4bede44ef4dc96262ffb7466cc064fd83dc9e1fd8a25a78065f9ed7b6a53b1cd3feca84ecb39a03916448aba774c78e82b06e8645c7bb2117273de7ad817deba0ef72633d14a01e77b099790cd6c1690cddca613679f38d5deb5ffb5d5ac9a10a803ddf8a72438dc73ff24a70d8bf5d651d697aa65d8abeb9d70a26762d38d5b8409794f5cf731b5a56b02911f3a6290092b697c6b13a266b411355fd421fd264486a91942145b53d865ccfb982ba7566e6d481ca43efefc73a9cade57a91302ed0684791af411f840ddc7fafeb01"}, {0xc8, 0x10c, 0x2, "95d557311a30a9e199547d8a9a88e1b00f1e143ea952b22e761f843c815f49f42cafe6eaa0d89092928611a9e16905b27f193dbfe08dbf8a2fee8422a17246cef6bd9e00ec84c24fbd9766089f20bb18970ed9f64d061d601481a439d0d42967e9a6f375ed0b212b1d7bc3fc7fdd57dbd484904a0c85aac42ce70b339d3886a5b45f82090ff811b768bdf4a318d35feed87b3b47ad33d63c11d22df3abb2153b47b03590934835d6bce41afd497cff21178afca8e31a"}, {0xc8, 0x3a, 0xf4c, "ce46fb0cd0c117f14f8bcc8663a488ac85cc53316bdde3c5c9fbcea7afcbc7f38a86e1a15fa7024ee0e70cae1637099cd571f2bd16dd5d88bc609200ee55f8d79b5ca87cb7b9dd737470d5c17ffa949286d0e08f4e9a9a2ccf134d110ec6f476fcc7fc87a7456fb3c228d6f2f4a166fbe7dfbc5429b764fedd7fec589a043506352ce2cd1e097d8186394f5b48f0528b8a7f40eca1822071eb5f551ae055bc9a4620467ccb69e0ea1679341583792bc8f20ef1cc61"}], 0x25c8}, 0x4040) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a06fef8ffffff71a400fe0000000071108800000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c3"], 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x2) (async) sendmsg$kcm(r0, &(0x7f0000002940)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="9c82609fe3e509e0c074eae792470abb6265d7518d6ec4a2a3d9e081ffed27331b75b9a1fcd9a170b504108c2ade53d19f03ce1fe51b454f45a0052a288a2acfe6d7b296a3", 0x45}, {&(0x7f0000000100)="866ec67a6c2163663cc9cc99c79d4c1b78f4b847f37fe7ebca041d3972d2c068c2625cabdcba2d6ab692bec0695d1e0cac85b0c7619f8baa522b6ebfbe066b01fe0a608bcddaa6705b65a8d7995b02db161c59f8dd0b2a2ec1105bcecc681e55f6d7f0317aa7af", 0x67}, {&(0x7f0000000180)="437acb5ef87cdba7e50e346a5f3ba6569cff474a0a59ce6c2cf2c6ccc624c3416e023a7471f4114a2ae26842a18440ac7460d54347b22d330432004716aea0d378c565984108c60b82d2e0aee603d7fb6cd56a0047b3b7f7801a4be8dfd285236617090e03a90d36390fa78830ea69a7591fd49432ce0053185bfea8d1ad8d89e59790ce16d8601a378cfffc385042748c860408820de46debc22d55b9f10aa964ae988341fdb5d2df46f2c782e157fd", 0xb0}, {&(0x7f0000000240)="282c95", 0x3}, {&(0x7f0000000280)="36d8b3cd00df0289e5", 0x9}], 0x5, &(0x7f0000000340)=[{0x108, 0x10f, 0xe14, "f015ccd6217462fe496824a227fcbb43c3ad28e87bdbb64f422256ade31b0c00fb350893ddb990b56239452ef6b015421c240765d652ddc91abe7368f606351706aeb7ed355c7e29eecf6276351050e2b8f4c594d88a87def70a764c517533c2f1b670fa1d1e8e1a8f8a934bb227d497404444aad965a9ba4e2671216478454ac664d8a62b2e12e8dc6d51bb50e82b40acedd7c2e28441413d67183a767a42229426f3d83b44163f644bf8c0e19203b84d6e4c013e08205fba5980d5030b54ae4024ebfe5f88a7de2ec7a8dc64258b80e4717d92e257bf4579f79a55736b494793a16401719fba728efd82e5462f4fe443c8cad06ec7db"}, {0x100, 0x29, 0x3ff, "7ceff173a0b4b399cd7ffd24ef1336651177279f8a8873380a79d9935fbb1514ae5641552270a6899277b0b4d49e48518088950084354a25103213ea8715dc8ccac733feba8448282afab4c79f7525ba6372e523e0c97a79b5a2a4cf0ee924f6c49f391654b99e7ad2b1f94dcd1ef492861777176b25b9b8545c0ef6a0005f9a3a81ca962362fd66a9d2a7f210a9bfe1b34d103c47533ca8f711ece7728ab647a62e0f77070d038cdb7be47c7c96051a042366277f8105cf386d55f3d8fb94207a35433a20a7d10720a87bd1b946812cb209e25b888d15ca80d7d0fbf6802c24358963710a2d58c92078d983"}, {0x1010, 0x112, 0x6, "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"}, {0x50, 0x112, 0x1ff, "20eb1b420901edfa3de967575b4636c6dbf9d8b77de4f212df77e183e2c6160a7d4d43d822f277cc99de5a08c67ca2feb0a86e018b5287dd22fee5"}, {0x98, 0x19e, 0x4, "4d3d0b6f0327a56f375b0813db05fa17f7d20ea8429f66c70d4480298400862154b86b24f6ad7a030b21795d2781daf7b39cc2b7075967c00f68812bedeece0512bbf5decd8914cb810561730d72249e15e0088be646a7de19d472fa8b446eefbffa84cfe80800bbb0cefe2011d0188c6280104ea03d88bfd5c7b5a0b5fab7b109b618bee07a"}, {0x30, 0x1, 0x5, "532860217aedb5dbb65aec81d8d5ab675a593c5dd6fe80429fc6"}, {0xf8, 0x107, 0x771, "4cf311104e796b82e3ed7618943ef3dc514f589293dfae8b9991a9fa9a76727e8defbf639280e384f16b895104f319ed5ab0ee048d1ecb30c010aee31030f4f3a9c4ea52d0fc97175eea26e855265ac2ad3ad7633a03c9ab7336085191bc3705f7b5c26abfc91e6367f5bdddb938cdcc2e705ed1538af036e89ee594c6df8dcaab0068f2d3649ffd57736d92ffe059cf05059adf4e49793a81a876d17e5d5097e895951b631b339cd625657666c3fcc1e46f0e4eed67d17c34fe03fb9a962ecb49295e062f95721b8c5ffe85ad9e1c79a705dd80c63da5ebf6aaf6b5d23f509878f6277ab07125f1"}, {0x1010, 0x119, 0x4, "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"}, {0xc8, 0x10c, 0x2, "95d557311a30a9e199547d8a9a88e1b00f1e143ea952b22e761f843c815f49f42cafe6eaa0d89092928611a9e16905b27f193dbfe08dbf8a2fee8422a17246cef6bd9e00ec84c24fbd9766089f20bb18970ed9f64d061d601481a439d0d42967e9a6f375ed0b212b1d7bc3fc7fdd57dbd484904a0c85aac42ce70b339d3886a5b45f82090ff811b768bdf4a318d35feed87b3b47ad33d63c11d22df3abb2153b47b03590934835d6bce41afd497cff21178afca8e31a"}, {0xc8, 0x3a, 0xf4c, "ce46fb0cd0c117f14f8bcc8663a488ac85cc53316bdde3c5c9fbcea7afcbc7f38a86e1a15fa7024ee0e70cae1637099cd571f2bd16dd5d88bc609200ee55f8d79b5ca87cb7b9dd737470d5c17ffa949286d0e08f4e9a9a2ccf134d110ec6f476fcc7fc87a7456fb3c228d6f2f4a166fbe7dfbc5429b764fedd7fec589a043506352ce2cd1e097d8186394f5b48f0528b8a7f40eca1822071eb5f551ae055bc9a4620467ccb69e0ea1679341583792bc8f20ef1cc61"}], 0x25c8}, 0x4040) (async) 1.223211639s ago: executing program 0 (id=2979): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYBLOB, @ANYBLOB="936603e8e0", @ANYBLOB="ea53f6f121860b8a1e74f7d783f238d67215132c1da4ecb7219dfee7392cd8e2fb18fcc5046a567314fc395bf972b883f667edb07d0f8f6a541d85d43dfc1816c2145ad019c7180a2c47328a0776bac02532de1bd94d6d930bff6a509df8b3a0c96cf0e2a0cdf50cf3fae667d5f02c674abb24461eb9e3386cc215"], 0x48) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 1.14794687s ago: executing program 2 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000afc010000060a0904000000000000000002000000d0010480cc0101800a00010072616e6765000000bc0102800800014000000008080002400000000304000480a40103800500010043000000830001009b0e5ed3cb8c760690d5a0db50ddbf7624b76ef10f3ac373a05b7f15099d0b22a1c43fd6ceebefb8f3aa1db4d4d7d3b0a7c3ad9f08e008000e95e5c21314dcfe4472bf165d33f67d5fb82f532f921314ea42c164e075d25b48771e73991e7e1c125f1a8595f7c0a32d3596734866f80def9d5537f6bfb3de45a6c7e4682fd400ce000100b3830ea47e2bc095201d826e7226fe811f3b6f89f3e7a494de0c561e3527608df84e7e95a1cdec5419cffda1ab525193847728abc4d9697b65652c49a1a7579c9eabe00a9afa8ff859e9f0c1ccdd8709a8d097f6d43f6668be5707325abd4ae113f8c123a2cf35470b959cee87abfdf58f3492efba79b1e98fd791d0ead7f1cafb05f2589c66029ad90d642be901cdace4672ecb951e50573133bd2247173df4419a4a9c8fa674ea229e5d51c0e2aa614d5ea42bf45d7fd00a47dccd486691f63a2357670beb9aea20bc00002000028008000180fffffffc0900020073797a32000000000800034000000001240002800900020073797a310000000008000340000000010900020073797a32000000000900010073797a30000000000900020073797a32"], 0x224}}, 0x0) 1.145577292s ago: executing program 4 (id=2981): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0xffeb}], 0x1, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}, 0x4840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYRESDEC=r2], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYRESDEC=r2], 0x4c}}, 0x0) 1.029710208s ago: executing program 2 (id=2982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x8, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x0) (async) tee(r2, r7, 0x8f5, 0x0) write(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690", 0x8e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="40136925b6ee0dc52d25d192b18a79d70888f7381bb55d41c63923cce3af99f4a4da7019429ee1c2581ef707a37ce258347a5596bcc61021e3a6c5427e3a1717e605ae3ecfb29f6df6608b10dcd4e1748110b4f7478bf4d879bbb335deea484d6030d0bc35a292e1b9b2c0be72492b76c01017aeae7903ac83dc9573c10d8a402fed7a73d38f94c91cb0632615a81556eedd3209cc3a45b37cdade008be38c3d2a37c0c24f9a10cd4c9732dc9ad1e7a14a3b94a789200acdc0a4902398aa30101f37f72ea3372ace8f2bc4c3b34f19d08f7893fe781ee4a5e9999e8d", @ANYRES16=r1, @ANYRESOCT, @ANYRESDEC=r4, @ANYRESHEX=r7, @ANYRESHEX=r5], 0x7c}, 0x1, 0x0, 0x0, 0xc00c001}, 0x380440c1) write$cgroup_freezer_state(r7, &(0x7f00000005c0)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r7, &(0x7f00000005c0)='THAWED\x00', 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a31000000000800054000000002200011800e000100636f6e6e6c696d69740000000c19028008000140fffff274140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a0000040900010073797a31000000000800054000000002200011800e000100636f6e6e6c696d69740000000c19028008000140fffff274140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) accept$nfc_llcp(r6, &(0x7f0000000500), &(0x7f0000000580)=0x60) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x11, 0x0, 0x3, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000080000000000000f0500000000000000000000030000000002000000010000000000000000000000000000030000000004000000040000000000000000003000000000002e"], &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000380)={'vlan0\x00', 0x1}) 1.013386068s ago: executing program 4 (id=2983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x541cba502412d0af, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000001418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08002600901500000800570080", @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYRES16=r1, @ANYRES16=r4], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08002600901500000800570080", @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYRES16=r1, @ANYRES16=r4], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b000600650040000000481c54a5fc5bcc74e79e3056c738e6c1b4e36c2e2c62f1f65d45513e35f8b91df13bf7a3b42d2a68"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b000600650040000000481c54a5fc5bcc74e79e3056c738e6c1b4e36c2e2c62f1f65d45513e35f8b91df13bf7a3b42d2a68"], 0x28}}, 0x0) r9 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 940.782852ms ago: executing program 1 (id=2984): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0xa, [@var={0x10, 0x0, 0x0, 0xe, 0x4, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x7}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @func={0xd, 0x0, 0x0, 0xc, 0x2}, @datasec={0x6, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x9, 0xfb5}, {0x3, 0x1, 0xfffffffc}], '&'}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x39}, @fwd={0xa}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}]}, {0x0, [0x6f, 0x30, 0x2e, 0x2e, 0x5f, 0x30, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/167, 0xbe, 0xa7, 0x1, 0x4}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, r0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='rpc_call_rpcerror\x00', r1, 0x0, 0x2}, 0xffffffffffffff05) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macsec0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r2], 0x33) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1826bd70e9f5c4b149440b463d2bfcd0f300000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendfile(r4, r3, 0x0, 0x10000) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r6) r7 = socket(0x2, 0x80805, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r12 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r12, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r12, r11}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9, r8}) r13 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2c, 0x0, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) close(r10) sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0x10, 0x84, 0x2}], 0x10}}], 0x1, 0x40001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000580)=0x2, 0x4) 828.106273ms ago: executing program 2 (id=2985): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast1=0xac1414bb, 0x0, 0x0, 0x0, 0xfffe}, {@in=@remote, 0x0, 0x33}, @in=@remote, {}, {0xffffffffffffffff}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x49, 0x1, {{'sha256\x00'}, 0x8, "ca"}}]}, 0x13c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042cbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="2387040000000000300012800b000100697036746e6c000020000280140003000000000000000000d5", @ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 827.530696ms ago: executing program 4 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, &(0x7f0000000840)) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x0, 0x3, r4}, @void}}}, 0x5d}, 0x1, 0x6c00}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x240088c4}, 0x40c0805) 559.977846ms ago: executing program 4 (id=2987): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0x60}}, 0x4000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r2) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async, rerun: 32) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000000)=0x402, 0x4) (async, rerun: 32) recvmmsg(r6, &(0x7f0000008100)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8000) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01ef600b3f516bde0018000000040000004800000048000000070000000500000000000007000000000400000000000001000000001e002406030000000400000604000000040000007f00000010000000000001000e000005e10000"], &(0x7f0000000140)=""/135, 0x67, 0x87, 0x1, 0x2000200, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r7, 0x5, 0x5, 0x3}, 0x50) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe03c5dc0}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x60}}, 0x0) 558.098002ms ago: executing program 2 (id=2988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000040a0000fcffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000010000e03d020000893c4a07f752ac0360a3d2c6d30c66138c20424fc5fe757234d06c4dc575b7f4c9e6161d900eae371d2766ec006a345dc51579000000fea8d6f82fcf4a65fd2e1550c4f8493b43e9beb700673256868da58f8849f894ab5c07b8b1f642388efc4709b58b60f5d1ad2d4aca3280400ae747332cc7317551d4ea2a0b75f3ef21c22d"], 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb29, 0xffffffff, {}, {}, {}, 0x1, @canfd={{}, 0x25, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 435.232763ms ago: executing program 2 (id=2989): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c410) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "c2bde0c1b0312a6660ef08a24f5da06d51d2abd8ee8c97cc11a8f4c569919c15", "e824c2ec111699113c34f139fd8b572f", {"ea42da3782b40e7a4e5384277c052484", "04049eb53f6dfcabf98b82fada2f03b4"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x174}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x72, 0x0, &(0x7f0000000580)="3131ec26e125a9a74662534bd090250b1da3961f6d28a71f26cd0c4ebd2f64de77cf124a1924863c179b8d2200e8d9a621defeda147231fd016d05560566cfb1148e9e09dd3892b2ad3e452e111cfa42472b8254166a582bd518287f479dcce8cf30a7ee6cfe68a0dbf1c03c8892959de7d7", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r2, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000200)={r5, 0x55, "31965b97fc35298672b2d3466c9676f7bd1c90269883a52499406160799b566a939dd2bcd5248008e0bb6477614d15dd3be35a03e5f946f3ed8364d54ce061c37cec0b81256db279b9371263854d3dddbd08b38601"}, &(0x7f00000001c0)=0x5d) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb474e02000000", 0x3e}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e9", 0x43}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r6, 0x0, 0x0, 0x800) recvmsg$can_j1939(r9, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40000000) 0s ago: executing program 1 (id=2990): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_getnexthop={0x20, 0x6a, 0x101, 0x70bd28, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044000}, 0x40) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003780)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001040)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0xe0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042b24afe8f014622330000000080003004d6979b4f377ebc107e703ec9f3b12aa9ffe745a56434300000000000000", @ANYRES32=r4, @ANYBLOB="0c00990005000000520000000a0018000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x1}, 0xe) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) kernel console output (not intermixed with test programs): cks suppressed [ 150.605705][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1338'. [ 150.774017][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 150.784222][T10586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 150.809694][T10589] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 150.820843][T10589] team0: Device hsr_slave_0 failed to register rx_handler [ 150.857933][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1345'. [ 150.869817][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 151.011476][T10551] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 151.125731][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 151.462355][T10644] FAULT_INJECTION: forcing a failure. [ 151.462355][T10644] name failslab, interval 1, probability 0, space 0, times 0 [ 151.496978][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.3.1359 Not tainted syzkaller #0 PREEMPT(full) [ 151.497010][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.497019][T10644] Call Trace: [ 151.497025][T10644] [ 151.497032][T10644] dump_stack_lvl+0x189/0x250 [ 151.497058][T10644] ? __pfx____ratelimit+0x10/0x10 [ 151.497081][T10644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.497099][T10644] ? __pfx__printk+0x10/0x10 [ 151.497118][T10644] ? stack_trace_save+0x9c/0xe0 [ 151.497138][T10644] ? __pfx___might_resched+0x10/0x10 [ 151.497152][T10644] ? lock_acquire+0x5f/0x360 [ 151.497178][T10644] should_fail_ex+0x414/0x560 [ 151.497201][T10644] should_failslab+0xa8/0x100 [ 151.497224][T10644] __kmalloc_noprof+0xcb/0x4f0 [ 151.497242][T10644] ? __nla_parse+0x40/0x60 [ 151.497262][T10644] ? ethnl_update_bitset32+0x87d/0x1960 [ 151.497282][T10644] ethnl_update_bitset32+0x87d/0x1960 [ 151.497306][T10644] ? __pfx_ethnl_update_bitset32+0x10/0x10 [ 151.497329][T10644] ethnl_set_debug+0x196/0x270 [ 151.497350][T10644] ? __pfx_ethnl_set_debug+0x10/0x10 [ 151.497369][T10644] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 151.497393][T10644] ? ethnl_ops_begin+0x31f/0x3e0 [ 151.497417][T10644] ethnl_default_set_doit+0x453/0x890 [ 151.497436][T10644] genl_family_rcv_msg_doit+0x212/0x300 [ 151.497457][T10644] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 151.497476][T10644] ? bpf_lsm_capable+0x9/0x20 [ 151.497495][T10644] ? security_capable+0x7e/0x2e0 [ 151.497518][T10644] genl_rcv_msg+0x60e/0x790 [ 151.497539][T10644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.497556][T10644] ? __kasan_slab_alloc+0x6c/0x80 [ 151.497576][T10644] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 151.497593][T10644] ? __netlink_lookup+0xbd/0x810 [ 151.497607][T10644] ? rcu_is_watching+0x15/0xb0 [ 151.497626][T10644] netlink_rcv_skb+0x208/0x470 [ 151.497649][T10644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.497668][T10644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.497694][T10644] ? lock_release+0x4b/0x3e0 [ 151.497717][T10644] ? down_read+0x1ad/0x2e0 [ 151.497733][T10644] genl_rcv+0x28/0x40 [ 151.497749][T10644] netlink_unicast+0x82f/0x9e0 [ 151.497774][T10644] ? __pfx_netlink_unicast+0x10/0x10 [ 151.497795][T10644] ? netlink_sendmsg+0x642/0xb30 [ 151.497809][T10644] ? skb_put+0x11b/0x210 [ 151.497826][T10644] netlink_sendmsg+0x805/0xb30 [ 151.497843][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.497868][T10644] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.497885][T10644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.497902][T10644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.497917][T10644] __sock_sendmsg+0x219/0x270 [ 151.497940][T10644] ____sys_sendmsg+0x505/0x830 [ 151.497960][T10644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.497981][T10644] ? import_iovec+0x74/0xa0 [ 151.498000][T10644] ___sys_sendmsg+0x21f/0x2a0 [ 151.498017][T10644] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.498048][T10644] ? __fget_files+0x2a/0x420 [ 151.498062][T10644] ? __fget_files+0x3a0/0x420 [ 151.498081][T10644] __x64_sys_sendmsg+0x19b/0x260 [ 151.498099][T10644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.498121][T10644] ? __pfx_ksys_write+0x10/0x10 [ 151.498141][T10644] ? rcu_is_watching+0x15/0xb0 [ 151.498156][T10644] ? rcu_is_watching+0x15/0xb0 [ 151.498172][T10644] do_syscall_64+0xfa/0x3b0 [ 151.498187][T10644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.498203][T10644] ? clear_bhb_loop+0x60/0xb0 [ 151.498219][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.498236][T10644] RIP: 0033:0x7f03b9f8ebe9 [ 151.498252][T10644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.498267][T10644] RSP: 002b:00007f03baec2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.498286][T10644] RAX: ffffffffffffffda RBX: 00007f03ba1b5fa0 RCX: 00007f03b9f8ebe9 [ 151.498298][T10644] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 151.498308][T10644] RBP: 00007f03baec2090 R08: 0000000000000000 R09: 0000000000000000 [ 151.498319][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.498329][T10644] R13: 00007f03ba1b6038 R14: 00007f03ba1b5fa0 R15: 00007ffdb2017168 [ 151.498349][T10644] [ 152.252702][T10664] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 152.448142][T10675] vlan0: left promiscuous mode [ 152.456442][T10675] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 152.463787][T10675] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 152.473355][T10675] geneve2: left promiscuous mode [ 152.480640][T10675] bond4: left promiscuous mode [ 152.509938][T10675] ip6erspan0: left allmulticast mode [ 152.522214][T10680] FAULT_INJECTION: forcing a failure. [ 152.522214][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 152.546898][T10680] CPU: 1 UID: 0 PID: 10680 Comm: syz.4.1373 Not tainted syzkaller #0 PREEMPT(full) [ 152.546925][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.546936][T10680] Call Trace: [ 152.546942][T10680] [ 152.546950][T10680] dump_stack_lvl+0x189/0x250 [ 152.546974][T10680] ? __pfx____ratelimit+0x10/0x10 [ 152.546997][T10680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.547016][T10680] ? __pfx__printk+0x10/0x10 [ 152.547043][T10680] ? stack_trace_save+0x9c/0xe0 [ 152.547064][T10680] ? __pfx___might_resched+0x10/0x10 [ 152.547080][T10680] ? lock_acquire+0x5f/0x360 [ 152.547105][T10680] should_fail_ex+0x414/0x560 [ 152.547128][T10680] should_failslab+0xa8/0x100 [ 152.547152][T10680] __kmalloc_noprof+0xcb/0x4f0 [ 152.547174][T10680] ? __nla_parse+0x40/0x60 [ 152.547196][T10680] ? ethnl_update_bitset32+0x87d/0x1960 [ 152.547218][T10680] ethnl_update_bitset32+0x87d/0x1960 [ 152.547242][T10680] ? __pfx_ethnl_update_bitset32+0x10/0x10 [ 152.547267][T10680] ethnl_set_debug+0x196/0x270 [ 152.547290][T10680] ? __pfx_ethnl_set_debug+0x10/0x10 [ 152.547308][T10680] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 152.547334][T10680] ? ethnl_ops_begin+0x31f/0x3e0 [ 152.547358][T10680] ethnl_default_set_doit+0x453/0x890 [ 152.547380][T10680] genl_family_rcv_msg_doit+0x212/0x300 [ 152.547402][T10680] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.547428][T10680] ? bpf_lsm_capable+0x9/0x20 [ 152.547449][T10680] ? security_capable+0x7e/0x2e0 [ 152.547475][T10680] genl_rcv_msg+0x60e/0x790 [ 152.547506][T10680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.547524][T10680] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 152.547540][T10680] ? __asan_memcpy+0x40/0x70 [ 152.547558][T10680] ? __pfx_ref_tracker_free+0x10/0x10 [ 152.547579][T10680] ? __skb_clone+0x63/0x7a0 [ 152.547599][T10680] netlink_rcv_skb+0x208/0x470 [ 152.547621][T10680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.547639][T10680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.547665][T10680] ? lock_release+0x4b/0x3e0 [ 152.547688][T10680] ? down_read+0x1ad/0x2e0 [ 152.547705][T10680] genl_rcv+0x28/0x40 [ 152.547723][T10680] netlink_unicast+0x82f/0x9e0 [ 152.547747][T10680] ? __pfx_netlink_unicast+0x10/0x10 [ 152.547769][T10680] ? netlink_sendmsg+0x642/0xb30 [ 152.547782][T10680] ? skb_put+0x11b/0x210 [ 152.547799][T10680] netlink_sendmsg+0x805/0xb30 [ 152.547818][T10680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.547835][T10680] ? aa_sock_msg_perm+0xf1/0x1d0 [ 152.547852][T10680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.547870][T10680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.547886][T10680] __sock_sendmsg+0x219/0x270 [ 152.547908][T10680] ____sys_sendmsg+0x505/0x830 [ 152.547932][T10680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.547953][T10680] ? import_iovec+0x74/0xa0 [ 152.547972][T10680] ___sys_sendmsg+0x21f/0x2a0 [ 152.547990][T10680] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.548023][T10680] ? __fget_files+0x2a/0x420 [ 152.548036][T10680] ? __fget_files+0x3a0/0x420 [ 152.548053][T10680] __x64_sys_sendmsg+0x19b/0x260 [ 152.548071][T10680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.548092][T10680] ? __pfx_ksys_write+0x10/0x10 [ 152.548114][T10680] ? rcu_is_watching+0x15/0xb0 [ 152.548130][T10680] do_syscall_64+0xfa/0x3b0 [ 152.548145][T10680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.548160][T10680] ? clear_bhb_loop+0x60/0xb0 [ 152.548177][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.548194][T10680] RIP: 0033:0x7f6ba478ebe9 [ 152.548209][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.548224][T10680] RSP: 002b:00007f6ba55ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.548245][T10680] RAX: ffffffffffffffda RBX: 00007f6ba49b5fa0 RCX: 00007f6ba478ebe9 [ 152.548259][T10680] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 152.548270][T10680] RBP: 00007f6ba55ca090 R08: 0000000000000000 R09: 0000000000000000 [ 152.548281][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.548292][T10680] R13: 00007f6ba49b6038 R14: 00007f6ba49b5fa0 R15: 00007ffff85ff968 [ 152.548312][T10680] [ 152.548450][ T5144] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.995119][ T5144] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.004916][ T5144] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.014078][T10686] @: renamed from veth0_vlan [ 153.031254][T10687] pimreg: entered allmulticast mode [ 153.047063][ T5144] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.172114][T10711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1384'. [ 153.184154][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 153.207619][T10711] macvtap1: entered promiscuous mode [ 153.214137][T10711] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 153.496984][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 153.603478][T10741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1393'. [ 153.610767][T10739] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 154.252266][T10793] net veth1_virt_wifi : renamed from virt_wifi0 [ 154.514979][T10816] syzkaller1: entered allmulticast mode [ 154.716734][T10837] tipc: Enabling of bearer rejected, failed to enable media [ 154.729425][T10826] sctp: [Deprecated]: syz.0.1424 (pid 10826) Use of int in max_burst socket option. [ 154.729425][T10826] Use struct sctp_assoc_value instead [ 154.767809][T10826] netlink: 'syz.0.1424': attribute type 28 has an invalid length. [ 155.165054][T10875] netlink: 'syz.2.1441': attribute type 29 has an invalid length. [ 155.212572][T10878] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 155.342516][T10878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.356106][T10878] bond2: (slave bond3): making interface the new active one [ 155.376023][T10878] bond2: (slave bond3): Enslaving as an active interface with an up link [ 155.377315][T10882] netlink: 'syz.4.1444': attribute type 1 has an invalid length. [ 155.391997][T10885] bridge0: Device is already in use. [ 155.545673][T10899] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 155.651220][T10907] __nla_validate_parse: 12 callbacks suppressed [ 155.651278][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1453'. [ 155.671238][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1453'. [ 155.681431][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 155.770733][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1454'. [ 155.852806][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 156.119396][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 156.705832][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 156.894778][T10982] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1477'. [ 156.949387][T10988] lo speed is unknown, defaulting to 1000 [ 156.954619][T10977] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1477'. [ 156.984715][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1477'. [ 157.439609][T11010] lo speed is unknown, defaulting to 1000 [ 157.461815][T11019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.876882][T11041] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 157.893332][T11041] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 157.907104][T11041] bond0 (unregistering): Released all slaves [ 158.028903][T11055] netlink: 'syz.2.1495': attribute type 2 has an invalid length. [ 158.058667][T11055] k*]: entered promiscuous mode [ 158.090632][T11055] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 158.109943][T11056] lo speed is unknown, defaulting to 1000 [ 158.137869][T11055] veth0_to_team: entered promiscuous mode [ 158.144884][T11055] veth0_to_team: entered allmulticast mode [ 158.422335][T11086] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.449564][T11089] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 158.553163][T11093] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 158.610366][T11093] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 158.671719][T11104] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.726143][T11105] bridge7: entered promiscuous mode [ 158.805758][T11115] tipc: Enabling of bearer rejected, failed to enable media [ 158.857462][T11123] netlink: 'syz.3.1516': attribute type 1 has an invalid length. [ 158.881401][T11123] bond0: entered promiscuous mode [ 158.888142][T11123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.350726][T11198] tipc: Enabled bearer , priority 0 [ 159.359781][T11198] syzkaller0: entered promiscuous mode [ 159.383388][T11198] syzkaller0: entered allmulticast mode [ 159.416123][T11197] tipc: Resetting bearer [ 159.425908][T11197] tipc: Disabling bearer [ 159.467970][T11207] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 159.506491][T11207] bond1: entered promiscuous mode [ 159.517908][T11207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.537164][T11207] bond1: (slave bridge5): making interface the new active one [ 159.545594][T11207] bridge5: entered promiscuous mode [ 159.553669][T11207] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 159.840071][T11226] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 159.855557][T11226] dummy0: entered promiscuous mode [ 159.878459][T11226] team0: Port device dummy0 removed [ 159.910753][T11226] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 159.978472][T11238] tipc: Enabled bearer , priority 0 [ 160.005721][T11238] syzkaller0: entered promiscuous mode [ 160.027493][T11238] syzkaller0: entered allmulticast mode [ 160.045768][T11252] bridge_slave_0: default FDB implementation only supports local addresses [ 160.069282][T11238] tipc: Resetting bearer [ 160.085859][T11237] tipc: Resetting bearer [ 160.104894][T11237] tipc: Disabling bearer [ 160.131457][T11257] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 160.233624][T11269] netlink: 'syz.2.1553': attribute type 15 has an invalid length. [ 160.265031][T11275] netlink: 'syz.4.1554': attribute type 13 has an invalid length. [ 160.285996][T11275] netlink: 'syz.4.1554': attribute type 17 has an invalid length. [ 160.361682][T11275] erspan0: left allmulticast mode [ 160.497496][T11275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.647777][T11299] syzkaller0: entered promiscuous mode [ 160.654713][T11314] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 160.667960][T11299] syzkaller0: entered allmulticast mode [ 160.672032][T11314] __nla_validate_parse: 15 callbacks suppressed [ 160.672057][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 160.696689][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1564'. [ 160.712113][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 160.794646][T11320] lo speed is unknown, defaulting to 1000 [ 161.332573][T11351] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 161.433215][T11356] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1579'. [ 161.443360][T11356] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 161.451923][T11356] openvswitch: netlink: Key 0 has unexpected len 7 expected 0 [ 161.566449][T11360] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1580'. [ 161.606876][T11365] openvswitch: netlink: Message has 4 unknown bytes. [ 161.648562][T11367] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1583'. [ 161.887752][T11380] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1586'. [ 162.267114][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 162.291149][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1594'. [ 162.367804][T11413] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1595'. [ 162.519266][T11431] batman_adv: batadv0: Removing interface: [ 162.554407][T11431] bond1: (slave bridge1): Releasing active interface [ 162.609256][T11442] netlink: 'syz.4.1603': attribute type 11 has an invalid length. [ 162.618351][T11442] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 162.639658][T11442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.151748][T11470] lo speed is unknown, defaulting to 1000 [ 163.500001][T11498] netlink: 'syz.0.1620': attribute type 1 has an invalid length. [ 163.637585][T11508] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.689115][T11504] lo speed is unknown, defaulting to 1000 [ 163.741368][T11498] tipc: Enabled bearer , priority 0 [ 163.749108][T11498] syzkaller0: entered promiscuous mode [ 163.757541][T11498] syzkaller0: entered allmulticast mode [ 163.770502][T11495] tipc: Resetting bearer [ 163.793581][T11495] tipc: Disabling bearer [ 163.950957][T11522] bridge0: entered promiscuous mode [ 163.961501][T11522] vlan1: entered promiscuous mode [ 163.969900][T11522] bridge0: port 1(vlan1) entered blocking state [ 163.976721][T11522] bridge0: port 1(vlan1) entered disabled state [ 163.985454][T11522] vlan1: entered allmulticast mode [ 163.990889][T11522] bridge0: entered allmulticast mode [ 164.003437][T11522] vlan1: left allmulticast mode [ 164.009111][T11522] bridge0: left allmulticast mode [ 164.147801][T11536] lo speed is unknown, defaulting to 1000 [ 164.207287][T11538] validate_nla: 1 callbacks suppressed [ 164.207303][T11538] netlink: 'syz.1.1631': attribute type 1 has an invalid length. [ 164.391452][T11555] netlink: 'syz.2.1636': attribute type 1 has an invalid length. [ 164.435013][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.541771][T11556] bond0: (slave gretap1): making interface the new active one [ 164.559597][T11556] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 164.676071][T11566] 8021q: VLANs not supported on caif0 [ 164.790634][T11577] bridge4: entered allmulticast mode [ 165.077380][T11602] syzkaller1: entered promiscuous mode [ 165.083560][T11602] syzkaller1: entered allmulticast mode [ 165.352517][T11623] dvmrp1: entered allmulticast mode [ 165.642457][T11647] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.651345][T11647] team0: Port device bond4 added [ 165.680593][T11650] lo speed is unknown, defaulting to 1000 [ 165.806535][T11661] __nla_validate_parse: 18 callbacks suppressed [ 165.806555][T11661] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1676'. [ 165.807248][T11664] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1666'. [ 165.845690][T11661] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 165.885733][T11653] netlink: 'syz.3.1666': attribute type 1 has an invalid length. [ 165.900319][T11666] bond0: entered promiscuous mode [ 165.909838][T11666] gretap1: entered promiscuous mode [ 165.917500][T11666] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 165.929998][T11666] hsr1: entered allmulticast mode [ 165.937640][T11666] dummy0: entered allmulticast mode [ 165.944527][T11666] bond0: entered allmulticast mode [ 165.952370][T11666] gretap1: entered allmulticast mode [ 166.071217][T11675] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1669'. [ 166.137212][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 166.151124][T11670] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 166.160712][T11670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.284192][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 166.303078][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 166.315133][T11696] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 166.348648][T11696] netlink: 'syz.0.1677': attribute type 49 has an invalid length. [ 166.382463][T11703] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 166.404881][T11703] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1677'. [ 166.416971][T11703] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 166.591289][T11711] tipc: New replicast peer: 255.255.255.255 [ 166.612641][T11711] tipc: Enabled bearer , priority 10 [ 166.839002][T11720] wg1 speed is unknown, defaulting to 1000 [ 166.863157][T11720] wg1 speed is unknown, defaulting to 1000 [ 166.876552][T11720] wg1 speed is unknown, defaulting to 1000 [ 166.895231][T11720] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.931619][T11720] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 166.954435][T11720] wg1 speed is unknown, defaulting to 1000 [ 166.977137][T11720] wg1 speed is unknown, defaulting to 1000 [ 166.991081][T11720] wg1 speed is unknown, defaulting to 1000 [ 167.004237][T11720] wg1 speed is unknown, defaulting to 1000 [ 167.019321][T11720] wg1 speed is unknown, defaulting to 1000 [ 167.093282][T11725] netlink: 'syz.2.1686': attribute type 13 has an invalid length. [ 167.119182][T11725] netlink: 'syz.2.1686': attribute type 17 has an invalid length. [ 167.291308][T11725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.311500][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 167.330012][T11736] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 167.358718][T11736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.481766][T11745] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1691'. [ 167.491627][T11745] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1691'. [ 167.535312][T11747] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 167.728465][T11151] tipc: Node number set to 2470746040 [ 167.999442][T11755] netlink: 'syz.4.1693': attribute type 12 has an invalid length. [ 168.019740][T11174] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.029092][T11174] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.039672][T11174] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.050221][T11174] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.338948][T11772] bond2: entered promiscuous mode [ 168.848320][T11789] geneve2: left promiscuous mode [ 168.855428][T11789] vlan3: left allmulticast mode [ 168.860945][T11789] bond0: left allmulticast mode [ 168.870186][T11789] team0: left allmulticast mode [ 168.877868][T11789] veth3: left promiscuous mode [ 168.894923][T11182] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.914477][T11182] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.932141][T11794] IPv6: sit1: Disabled Multicast RS [ 168.984867][T11182] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.994098][T11182] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.332993][T11819] validate_nla: 5 callbacks suppressed [ 169.333014][T11819] netlink: 'syz.1.1712': attribute type 39 has an invalid length. [ 170.035941][T11853] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 170.179969][T11859] vxcan1: entered promiscuous mode [ 170.975458][T11903] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 170.995325][T11903] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 171.146857][T11917] openvswitch: netlink: IPv4 tun info is not correct [ 171.202632][T11926] FAULT_INJECTION: forcing a failure. [ 171.202632][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 171.217355][T11926] CPU: 1 UID: 0 PID: 11926 Comm: syz.3.1749 Not tainted syzkaller #0 PREEMPT(full) [ 171.217378][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.217390][T11926] Call Trace: [ 171.217396][T11926] [ 171.217403][T11926] dump_stack_lvl+0x189/0x250 [ 171.217429][T11926] ? __pfx____ratelimit+0x10/0x10 [ 171.217452][T11926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.217471][T11926] ? __pfx__printk+0x10/0x10 [ 171.217494][T11926] ? __pfx___might_resched+0x10/0x10 [ 171.217510][T11926] ? lock_acquire+0x5f/0x360 [ 171.217534][T11926] should_fail_ex+0x414/0x560 [ 171.217558][T11926] should_failslab+0xa8/0x100 [ 171.217582][T11926] __kmalloc_noprof+0xcb/0x4f0 [ 171.217603][T11926] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 171.217623][T11926] ? lock_release+0x4b/0x3e0 [ 171.217647][T11926] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 171.217671][T11926] genl_family_rcv_msg_doit+0xb8/0x300 [ 171.217695][T11926] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 171.217718][T11926] ? apparmor_capable+0x137/0x1b0 [ 171.217738][T11926] ? bpf_lsm_capable+0x9/0x20 [ 171.217760][T11926] ? security_capable+0x7e/0x2e0 [ 171.217785][T11926] genl_rcv_msg+0x60e/0x790 [ 171.217807][T11926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.217825][T11926] ? __kasan_slab_alloc+0x6c/0x80 [ 171.217846][T11926] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 171.217873][T11926] ? __netlink_lookup+0xbd/0x810 [ 171.217888][T11926] ? rcu_is_watching+0x15/0xb0 [ 171.217909][T11926] netlink_rcv_skb+0x208/0x470 [ 171.217933][T11926] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.217953][T11926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.217982][T11926] ? lock_release+0x4b/0x3e0 [ 171.218005][T11926] ? down_read+0x1ad/0x2e0 [ 171.218023][T11926] genl_rcv+0x28/0x40 [ 171.218040][T11926] netlink_unicast+0x82f/0x9e0 [ 171.218064][T11926] ? __pfx_netlink_unicast+0x10/0x10 [ 171.218085][T11926] ? netlink_sendmsg+0x642/0xb30 [ 171.218099][T11926] ? skb_put+0x11b/0x210 [ 171.218115][T11926] netlink_sendmsg+0x805/0xb30 [ 171.218134][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.218151][T11926] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.218168][T11926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.218186][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.218201][T11926] __sock_sendmsg+0x219/0x270 [ 171.218225][T11926] ____sys_sendmsg+0x505/0x830 [ 171.218244][T11926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.218266][T11926] ? import_iovec+0x74/0xa0 [ 171.218287][T11926] ___sys_sendmsg+0x21f/0x2a0 [ 171.218305][T11926] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.218343][T11926] ? __fget_files+0x2a/0x420 [ 171.218357][T11926] ? __fget_files+0x3a0/0x420 [ 171.218377][T11926] __x64_sys_sendmsg+0x19b/0x260 [ 171.218396][T11926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.218418][T11926] ? __pfx_ksys_write+0x10/0x10 [ 171.218438][T11926] ? rcu_is_watching+0x15/0xb0 [ 171.218457][T11926] ? rcu_is_watching+0x15/0xb0 [ 171.218474][T11926] do_syscall_64+0xfa/0x3b0 [ 171.218491][T11926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.218508][T11926] ? clear_bhb_loop+0x60/0xb0 [ 171.218527][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.218544][T11926] RIP: 0033:0x7f03b9f8ebe9 [ 171.218560][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.218576][T11926] RSP: 002b:00007f03baec2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.218596][T11926] RAX: ffffffffffffffda RBX: 00007f03ba1b5fa0 RCX: 00007f03b9f8ebe9 [ 171.218610][T11926] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 171.218622][T11926] RBP: 00007f03baec2090 R08: 0000000000000000 R09: 0000000000000000 [ 171.218633][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.218644][T11926] R13: 00007f03ba1b6038 R14: 00007f03ba1b5fa0 R15: 00007ffdb2017168 [ 171.218664][T11926] [ 172.164201][T11940] lo speed is unknown, defaulting to 1000 [ 172.319480][T11964] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 172.343680][T11964] netlink: 'syz.2.1761': attribute type 1 has an invalid length. [ 172.408054][T11940] wg1 speed is unknown, defaulting to 1000 [ 172.408054][T11960] lo speed is unknown, defaulting to 1000 [ 172.497638][T11973] __nla_validate_parse: 15 callbacks suppressed [ 172.497657][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 172.504360][T11960] wg1 speed is unknown, defaulting to 1000 [ 172.530508][T11973] lo speed is unknown, defaulting to 1000 [ 172.618628][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 172.739985][T11988] netlink: 'syz.3.1766': attribute type 13 has an invalid length. [ 172.782505][T11988] netlink: 'syz.3.1766': attribute type 17 has an invalid length. [ 172.851157][T11994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1767'. [ 172.887744][T11988] ip6_vti0: left promiscuous mode [ 172.896710][T11988] ip6_vti0: left allmulticast mode [ 172.938068][T11988] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.952276][T11988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.976148][ T7161] lo speed is unknown, defaulting to 1000 [ 172.982595][ T7161] s: Port: 1 Link ACTIVE [ 172.998602][ T5857] lo speed is unknown, defaulting to 1000 [ 173.024487][T11991] bridge6: entered allmulticast mode [ 173.049646][T11995] lo speed is unknown, defaulting to 1000 [ 173.199675][T12004] bridge7: entered allmulticast mode [ 173.227412][T11995] wg1 speed is unknown, defaulting to 1000 [ 173.276958][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1771'. [ 173.312311][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 173.327999][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1772'. [ 173.340948][T12011] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 173.352193][T12011] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1772'. [ 173.497637][T12032] netlink: 'syz.2.1780': attribute type 3 has an invalid length. [ 173.510041][T12023] syzkaller1: entered promiscuous mode [ 173.518274][T12023] syzkaller1: entered allmulticast mode [ 173.696420][T12040] sctp: [Deprecated]: syz.0.1783 (pid 12040) Use of int in max_burst socket option deprecated. [ 173.696420][T12040] Use struct sctp_assoc_value instead [ 173.817079][T12048] tipc: Enabled bearer , priority 0 [ 173.827531][T12048] syzkaller0: entered promiscuous mode [ 173.873485][T12048] syzkaller0: entered allmulticast mode [ 173.894715][T12048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1785'. [ 173.915002][T12055] syzkaller0: entered promiscuous mode [ 173.920956][T12055] syzkaller0: entered allmulticast mode [ 173.932034][T12047] tipc: Resetting bearer [ 173.946041][T12047] tipc: Disabling bearer [ 173.981021][T12059] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1790'. [ 174.088038][T12053] delete_channel: no stack [ 174.547042][T12100] tipc: Enabled bearer , priority 0 [ 174.606716][T12100] syzkaller0: entered promiscuous mode [ 174.615409][T12100] syzkaller0: entered allmulticast mode [ 174.616548][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 174.622144][T12100] tipc: Resetting bearer [ 174.643997][T12108] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 174.749010][ T12] tipc: Resetting bearer [ 174.756880][T12121] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 174.815822][T12122] lo speed is unknown, defaulting to 1000 [ 174.822582][T12130] veth0_to_batadv: mtu less than device minimum [ 174.926103][T12126] lo speed is unknown, defaulting to 1000 [ 174.932915][T12122] wg1 speed is unknown, defaulting to 1000 [ 175.120502][T12126] wg1 speed is unknown, defaulting to 1000 [ 175.211099][T12144] netlink: 'syz.3.1816': attribute type 4 has an invalid length. [ 175.280823][ T6025] lo speed is unknown, defaulting to 1000 [ 175.319541][ T6025] s: Port: 1 Link DOWN [ 175.341881][T12153] FAULT_INJECTION: forcing a failure. [ 175.341881][T12153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.343196][ T6025] lo speed is unknown, defaulting to 1000 [ 175.355441][T12153] CPU: 1 UID: 0 PID: 12153 Comm: syz.0.1818 Not tainted syzkaller #0 PREEMPT(full) [ 175.355464][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.355474][T12153] Call Trace: [ 175.355481][T12153] [ 175.355490][T12153] dump_stack_lvl+0x189/0x250 [ 175.355515][T12153] ? __pfx____ratelimit+0x10/0x10 [ 175.355551][T12153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.355571][T12153] ? __pfx__printk+0x10/0x10 [ 175.355592][T12153] ? __might_fault+0xb0/0x130 [ 175.355617][T12153] ? rcu_is_watching+0x15/0xb0 [ 175.355635][T12153] should_fail_ex+0x414/0x560 [ 175.355657][T12153] _copy_from_user+0x2d/0xb0 [ 175.355674][T12153] ___sys_sendmsg+0x158/0x2a0 [ 175.355693][T12153] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.355713][T12153] ? kstrtouint+0x6e/0xe0 [ 175.355747][T12153] ? __fget_files+0x2a/0x420 [ 175.355762][T12153] ? __fget_files+0x3a0/0x420 [ 175.355780][T12153] __sys_sendmmsg+0x227/0x430 [ 175.355799][T12153] ? __pfx___sys_sendmmsg+0x10/0x10 [ 175.355816][T12153] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 175.355853][T12153] ? ksys_write+0x22a/0x250 [ 175.355874][T12153] ? __pfx_ksys_write+0x10/0x10 [ 175.355893][T12153] ? rcu_is_watching+0x15/0xb0 [ 175.355912][T12153] __x64_sys_sendmmsg+0xa0/0xc0 [ 175.355930][T12153] do_syscall_64+0xfa/0x3b0 [ 175.355946][T12153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.355963][T12153] ? clear_bhb_loop+0x60/0xb0 [ 175.355981][T12153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.355998][T12153] RIP: 0033:0x7f81d218ebe9 [ 175.356013][T12153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.356028][T12153] RSP: 002b:00007f81d3032038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 175.356047][T12153] RAX: ffffffffffffffda RBX: 00007f81d23b5fa0 RCX: 00007f81d218ebe9 [ 175.356059][T12153] RDX: 0000000000000001 RSI: 0000200000002000 RDI: 0000000000000003 [ 175.356070][T12153] RBP: 00007f81d3032090 R08: 0000000000000000 R09: 0000000000000000 [ 175.356081][T12153] R10: 000000002400c040 R11: 0000000000000246 R12: 0000000000000001 [ 175.356091][T12153] R13: 00007f81d23b6038 R14: 00007f81d23b5fa0 R15: 00007fff38c9bbc8 [ 175.356110][T12153] [ 175.596561][ T7161] tipc: Node number set to 4084667812 [ 175.617450][T12091] tipc: Resetting bearer [ 175.674559][T12091] tipc: Disabling bearer [ 175.809926][T12178] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 175.908528][T12181] netlink: 'syz.0.1828': attribute type 58 has an invalid length. [ 176.159668][T12195] vxcan1: left promiscuous mode [ 176.197720][T12203] netlink: 'syz.3.1834': attribute type 21 has an invalid length. [ 176.340327][T12207] lo speed is unknown, defaulting to 1000 [ 176.455553][T12222] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 176.523532][T12218] lo speed is unknown, defaulting to 1000 [ 176.531820][T12207] wg1 speed is unknown, defaulting to 1000 [ 176.718100][T12218] wg1 speed is unknown, defaulting to 1000 [ 177.462036][T12285] lo speed is unknown, defaulting to 1000 [ 177.633607][T12296] lo speed is unknown, defaulting to 1000 [ 177.644296][T12285] wg1 speed is unknown, defaulting to 1000 [ 177.649749][T12300] __nla_validate_parse: 11 callbacks suppressed [ 177.649769][T12300] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1862'. [ 177.735224][T12304] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1863'. [ 177.828416][T12289] lo speed is unknown, defaulting to 1000 [ 177.832610][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1866'. [ 177.847168][T12296] wg1 speed is unknown, defaulting to 1000 [ 177.854502][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1866'. [ 177.868433][T12311] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1866'. [ 178.088216][T12289] wg1 speed is unknown, defaulting to 1000 [ 178.779851][T12352] lo speed is unknown, defaulting to 1000 [ 178.984404][T12352] wg1 speed is unknown, defaulting to 1000 [ 179.065250][T12391] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1890'. [ 179.074690][T12391] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1890'. [ 179.099545][T12391] netlink: 'syz.1.1890': attribute type 6 has an invalid length. [ 179.108630][T12391] netlink: 'syz.1.1890': attribute type 5 has an invalid length. [ 179.117594][T12391] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1890'. [ 179.303946][T12397] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1892'. [ 179.389264][T12405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.628267][T12413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1898'. [ 179.931971][T12423] veth0: entered promiscuous mode [ 179.994347][T12423] veth0 (unregistering): left promiscuous mode [ 180.053869][T12427] blkio.reset_stats is deprecated [ 180.233698][T12440] lo speed is unknown, defaulting to 1000 [ 180.432156][T12440] wg1 speed is unknown, defaulting to 1000 [ 180.446261][T12460] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 180.544344][T12473] netlink: 'syz.2.1918': attribute type 8 has an invalid length. [ 180.829103][T12500] bpq0: entered promiscuous mode [ 180.886770][T12504] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 180.902630][T12501] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 181.158154][T12526] lo speed is unknown, defaulting to 1000 [ 181.181645][T12531] netlink: 'syz.4.1932': attribute type 6 has an invalid length. [ 181.336336][T12526] wg1 speed is unknown, defaulting to 1000 [ 181.469234][T12543] lo speed is unknown, defaulting to 1000 [ 181.866511][T12543] wg1 speed is unknown, defaulting to 1000 [ 181.953008][T12554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.054947][T12554] bond5: (slave bond6): Enslaving as an active interface with an up link [ 182.108716][T12554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.576388][T12588] tipc: Enabled bearer , priority 0 [ 182.642272][T12588] tipc: Disabling bearer [ 182.660758][T12600] __nla_validate_parse: 18 callbacks suppressed [ 182.660777][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'. [ 182.681365][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1960'. [ 182.693989][T12602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1960'. [ 182.742628][T12609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.745168][T12607] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1961'. [ 182.826830][T11182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.831272][T12613] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1965'. [ 182.848510][T11182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.873608][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 182.910443][T12618] netlink: 'syz.3.1967': attribute type 7 has an invalid length. [ 182.919505][T12618] netlink: 'syz.3.1967': attribute type 8 has an invalid length. [ 182.966109][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1966'. [ 182.998748][T12607] syz.0.1961 (12607) used greatest stack depth: 16304 bytes left [ 183.072493][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 183.194627][T12641] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1974'. [ 183.210112][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 183.390385][T12662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.414215][T12662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.481275][T12661] lo speed is unknown, defaulting to 1000 [ 183.629270][T12661] wg1 speed is unknown, defaulting to 1000 [ 183.761579][T12693] syzkaller1: entered promiscuous mode [ 183.767657][T12693] syzkaller1: entered allmulticast mode [ 183.783813][T12695] macvtap0: entered allmulticast mode [ 183.790750][T12695] batman_adv: batadv0: Adding interface: macvtap0 [ 183.798057][T12695] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.828019][T12695] batman_adv: batadv0: Interface activated: macvtap0 [ 184.113731][T12720] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 184.160001][T12723] FAULT_INJECTION: forcing a failure. [ 184.160001][T12723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.175853][T12723] CPU: 1 UID: 0 PID: 12723 Comm: syz.2.2003 Not tainted syzkaller #0 PREEMPT(full) [ 184.175878][T12723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.175889][T12723] Call Trace: [ 184.175895][T12723] [ 184.175902][T12723] dump_stack_lvl+0x189/0x250 [ 184.175928][T12723] ? __pfx____ratelimit+0x10/0x10 [ 184.175951][T12723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.175970][T12723] ? __pfx__printk+0x10/0x10 [ 184.175994][T12723] ? __might_fault+0xb0/0x130 [ 184.176017][T12723] ? ima_match_policy+0x10b/0x2150 [ 184.176038][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176057][T12723] should_fail_ex+0x414/0x560 [ 184.176080][T12723] _copy_from_iter+0x3f5/0x16f0 [ 184.176101][T12723] ? __pfx__copy_from_iter+0x10/0x10 [ 184.176116][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176130][T12723] ? dev_get_by_index+0x22/0x2e0 [ 184.176150][T12723] ? lock_release+0x4b/0x3e0 [ 184.176173][T12723] ? dev_get_by_index+0x22/0x2e0 [ 184.176195][T12723] packet_sendmsg+0x3072/0x5080 [ 184.176220][T12723] ? audit_mount+0xd0/0x610 [ 184.176246][T12723] ? mntput_no_expire+0xb9/0x9d0 [ 184.176265][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176278][T12723] ? mntput_no_expire+0xb9/0x9d0 [ 184.176295][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176310][T12723] ? __pfx___might_resched+0x10/0x10 [ 184.176325][T12723] ? unwind_next_frame+0xa5/0x2390 [ 184.176344][T12723] ? unwind_next_frame+0xa5/0x2390 [ 184.176359][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176374][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176391][T12723] ? __pfx_packet_sendmsg+0x10/0x10 [ 184.176409][T12723] ? aa_sk_perm+0x81e/0x950 [ 184.176432][T12723] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 184.176451][T12723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 184.176466][T12723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.176483][T12723] ? __pfx_packet_sendmsg+0x10/0x10 [ 184.176510][T12723] __sock_sendmsg+0x219/0x270 [ 184.176532][T12723] ____sys_sendmsg+0x505/0x830 [ 184.176551][T12723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.176571][T12723] ? import_iovec+0x74/0xa0 [ 184.176595][T12723] ___sys_sendmsg+0x21f/0x2a0 [ 184.176613][T12723] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.176645][T12723] ? __fget_files+0x2a/0x420 [ 184.176659][T12723] ? __fget_files+0x3a0/0x420 [ 184.176677][T12723] __x64_sys_sendmsg+0x19b/0x260 [ 184.176695][T12723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.176717][T12723] ? __pfx_ksys_write+0x10/0x10 [ 184.176737][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176753][T12723] ? rcu_is_watching+0x15/0xb0 [ 184.176771][T12723] do_syscall_64+0xfa/0x3b0 [ 184.176794][T12723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.176811][T12723] ? clear_bhb_loop+0x60/0xb0 [ 184.176829][T12723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.176846][T12723] RIP: 0033:0x7fd6b418ebe9 [ 184.176862][T12723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.176877][T12723] RSP: 002b:00007fd6b4ffb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.176896][T12723] RAX: ffffffffffffffda RBX: 00007fd6b43b5fa0 RCX: 00007fd6b418ebe9 [ 184.176909][T12723] RDX: 0000000020048005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 184.176921][T12723] RBP: 00007fd6b4ffb090 R08: 0000000000000000 R09: 0000000000000000 [ 184.176932][T12723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.176942][T12723] R13: 00007fd6b43b6038 R14: 00007fd6b43b5fa0 R15: 00007ffc57181b38 [ 184.176964][T12723] [ 184.839500][T12752] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 185.019648][T12756] lo speed is unknown, defaulting to 1000 [ 185.029933][T12761] netlink: 'syz.2.2015': attribute type 4 has an invalid length. [ 185.065316][T12761] netlink: 'syz.2.2015': attribute type 4 has an invalid length. [ 185.302088][T12760] netlink: 'syz.1.2013': attribute type 13 has an invalid length. [ 185.331256][T12760] netlink: 'syz.1.2013': attribute type 17 has an invalid length. [ 185.398663][T12769] lo speed is unknown, defaulting to 1000 [ 185.507269][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.516056][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.525589][T12760] dummy0: left promiscuous mode [ 185.531533][T12760] dummy0: left allmulticast mode [ 185.539573][T12760] 0X: left allmulticast mode [ 185.545576][T12760] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 185.767227][T12805] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 185.795248][T12811] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 185.801578][T12811] syzkaller0: linktype set to 1 [ 185.839188][T12813] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 185.916320][T12816] vlan0: entered promiscuous mode [ 186.109365][T12822] tipc: Enabled bearer , priority 0 [ 186.145214][T12822] syzkaller0: entered promiscuous mode [ 186.165560][T12822] syzkaller0: entered allmulticast mode [ 186.196995][T12822] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.295259][T12822] tipc: Resetting bearer [ 186.335116][T12821] tipc: Resetting bearer [ 186.419589][T12821] tipc: Disabling bearer [ 186.573685][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 186.580199][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 186.586649][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 186.694638][T12847] IPv6: addrconf: prefix option has invalid lifetime [ 186.856853][T12860] netlink: 'syz.2.2046': attribute type 4 has an invalid length. [ 186.993376][T12873] tipc: Enabled bearer , priority 0 [ 187.011117][T12873] syzkaller0: entered promiscuous mode [ 187.022527][T12873] syzkaller0: entered allmulticast mode [ 187.054722][T12873] tipc: Resetting bearer [ 187.081879][T12872] tipc: Resetting bearer [ 187.096184][T12872] tipc: Disabling bearer [ 187.353924][T12901] netlink: 'syz.3.2056': attribute type 10 has an invalid length. [ 187.405535][T12901] dummy0: entered promiscuous mode [ 187.411777][T12902] netlink: 'syz.3.2056': attribute type 10 has an invalid length. [ 187.418783][T12901] team0: Port device dummy0 added [ 187.448780][T12902] dummy0: left promiscuous mode [ 187.477770][T12902] team0: Port device dummy0 removed [ 187.747066][T12904] __nla_validate_parse: 15 callbacks suppressed [ 187.747086][T12904] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2057'. [ 188.273682][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'. [ 188.283006][T12940] tipc: Enabled bearer , priority 0 [ 188.291106][T12940] syzkaller0: entered promiscuous mode [ 188.298220][T12940] syzkaller0: entered allmulticast mode [ 188.317111][T12940] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.321918][T12937] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2066'. [ 188.338442][T12940] tipc: Resetting bearer [ 188.346531][T12939] tipc: Resetting bearer [ 188.354767][T12939] tipc: Disabling bearer [ 188.521531][T12957] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2074'. [ 188.632404][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 188.653779][T12973] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 188.665264][T12973] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2078'. [ 188.665709][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2077'. [ 188.684875][T12968] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2077'. [ 188.699434][T12968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 188.711313][T12968] gretap2: entered promiscuous mode [ 188.717830][T12968] gretap2: entered allmulticast mode [ 188.731360][T12975] lo speed is unknown, defaulting to 1000 [ 188.742166][T12974] netlink: 'syz.0.2078': attribute type 23 has an invalid length. [ 188.852206][T12981] bond0: (slave vlan1): Opening slave failed [ 189.007699][T12997] netlink: 'syz.4.2083': attribute type 3 has an invalid length. [ 189.139942][T13012] raw_sendmsg: syz.2.2088 forgot to set AF_INET. Fix it! [ 189.205849][T13012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.328150][T13030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2093'. [ 189.850067][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 189.861495][T13069] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 190.014825][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 190.135807][T13096] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:21 [ 190.157350][T13094] lo speed is unknown, defaulting to 1000 [ 234.346140][T13117] netlink: 'syz.4.2118': attribute type 10 has an invalid length. [ 234.358126][T13117] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 234.620734][T13134] tipc: Enabled bearer , priority 0 [ 234.665493][T13134] syzkaller0: entered promiscuous mode [ 234.673085][T13134] syzkaller0: entered allmulticast mode [ 234.698833][T13134] tipc: Resetting bearer [ 234.706090][T13134] syzkaller0: tun_net_xmit 90 [ 234.723336][T13133] tipc: Resetting bearer [ 234.730511][T13133] tipc: Disabling bearer [ 234.745737][T13144] __nla_validate_parse: 2 callbacks suppressed [ 234.745757][T13144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2122'. [ 234.764950][T13144] netlink: 'syz.3.2122': attribute type 13 has an invalid length. [ 234.779461][T13144] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2122'. [ 234.815478][T13146] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.2123'. [ 234.982588][T13151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2125'. [ 235.034669][T11182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.048090][T11182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.060284][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'. [ 235.253685][T13165] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 235.273790][T13165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2131'. [ 235.382619][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'. [ 235.491795][T13173] syzkaller0: entered promiscuous mode [ 235.509404][T13173] syzkaller0: entered allmulticast mode [ 235.614386][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 235.659508][T13179] pim6reg: entered allmulticast mode [ 235.733720][T13179] pim6reg: left allmulticast mode [ 236.360313][T13174] netlink: 'syz.4.2132': attribute type 30 has an invalid length. [ 236.477230][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 236.488494][T13209] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 236.492339][T13211] netlink: 'syz.0.2145': attribute type 13 has an invalid length. [ 236.500463][T13212] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 236.506370][T13211] netlink: 'syz.0.2145': attribute type 17 has an invalid length. [ 236.517643][T13212] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2143'. [ 236.730859][T13211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.759177][T13211] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.772237][T13211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.830676][T13211] geneve3: entered promiscuous mode [ 236.840913][T11182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.871318][T11182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.890065][T11182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.931162][T13234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.947092][T11182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.977188][T13242] netlink: 'syz.0.2151': attribute type 4 has an invalid length. [ 236.987671][T13234] macsec1: entered promiscuous mode [ 236.997271][T13234] bond4: entered promiscuous mode [ 237.004365][T13234] macsec1: entered allmulticast mode [ 237.010260][T13234] bond4: entered allmulticast mode [ 237.018702][T13234] bond4: left allmulticast mode [ 237.024819][T13234] bond4: left promiscuous mode [ 237.067710][T13242] : renamed from bond0 (while UP) [ 237.281561][T13262] netlink: 'syz.4.2157': attribute type 1 has an invalid length. [ 237.295281][T13257] lo speed is unknown, defaulting to 1000 [ 237.343149][T13265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.351317][T13271] netlink: 'syz.1.2160': attribute type 8 has an invalid length. [ 237.384635][T13271] bond0: entered promiscuous mode [ 237.389869][T13271] bond_slave_0: entered promiscuous mode [ 237.395837][ T7167] lo speed is unknown, defaulting to 1000 [ 237.401779][ T7167] s: Port: 1 Link ACTIVE [ 237.408764][T13271] bond_slave_1: entered promiscuous mode [ 237.417718][T13271] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 237.429270][T13271] bond0: left promiscuous mode [ 237.437006][T13271] bond_slave_0: left promiscuous mode [ 237.442972][T13271] bond_slave_1: left promiscuous mode [ 237.449403][T13271] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 237.479563][T11151] lo speed is unknown, defaulting to 1000 [ 237.910464][T13322] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 237.928923][T13319] tap0: tun_chr_ioctl cmd 1074025677 [ 237.944819][T13319] tap0: linktype set to 774 [ 237.973994][T13325] lo speed is unknown, defaulting to 1000 [ 238.115880][T13321] lo speed is unknown, defaulting to 1000 [ 238.455497][T13354] lo speed is unknown, defaulting to 1000 [ 238.999346][T13401] openvswitch: netlink: Missing key (keys=40, expected=80) [ 239.392463][T13426] validate_nla: 4 callbacks suppressed [ 239.392481][T13426] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 239.454842][T13416] veth0_to_team: left promiscuous mode [ 239.479575][T13416] veth0_to_team: left allmulticast mode [ 239.490567][T13430] netlink: 'syz.4.2202': attribute type 1 has an invalid length. [ 239.525643][T13416] geneve2: left promiscuous mode [ 239.538065][T13416] ip6gre1: left promiscuous mode [ 239.545496][T13416] bridge3: left promiscuous mode [ 239.550623][T13416] bridge3: left allmulticast mode [ 239.557529][T13416] bridge0: left promiscuous mode [ 239.563638][T13416] bridge0: left allmulticast mode [ 239.573994][T13416] bridge4: left allmulticast mode [ 239.580652][T13416] hsr1: left allmulticast mode [ 239.586274][T13416] dummy0: left allmulticast mode [ 239.591712][T13416] bond0: left allmulticast mode [ 239.597240][T13416] gretap1: left allmulticast mode [ 239.604524][T13416] bridge6: left allmulticast mode [ 239.609963][T13416] bridge7: left allmulticast mode [ 239.618540][T13416] batman_adv: batadv0: Interface deactivated: macvtap0 [ 239.626738][T13416] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 239.634088][T13416] macvtap0: left allmulticast mode [ 239.640772][T13416] gretap2: left promiscuous mode [ 239.646758][T13416] gretap2: left allmulticast mode [ 239.652660][T13422] macsec0: entered promiscuous mode [ 239.660271][T13422] macsec0: entered allmulticast mode [ 239.689608][T13423] team0: Port device dummy0 added [ 239.704498][T13425] veth1_macvtap: entered allmulticast mode [ 239.712988][T13425] macsec0: left promiscuous mode [ 239.735018][T13425] macsec0: left allmulticast mode [ 239.745376][T13425] veth1_macvtap: left allmulticast mode [ 239.753326][T13426] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.789227][T13426] team0: Failed to send options change via netlink (err -105) [ 239.797820][T13426] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.813597][T13426] team0: Port device dummy0 removed [ 239.823325][T13426] : (slave dummy0): Enslaving as an active interface with an up link [ 239.892046][T13430] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 239.892699][ T3014] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.967602][T13442] __nla_validate_parse: 15 callbacks suppressed [ 239.967626][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 240.000056][ T3014] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.034420][ T3014] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.081933][T13445] lo speed is unknown, defaulting to 1000 [ 240.119062][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'. [ 240.131729][T13457] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 240.162495][ T3014] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.173663][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 240.318542][T13459] netlink: 'syz.4.2208': attribute type 10 has an invalid length. [ 240.361157][T13470] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2210'. [ 240.415831][T13459] bridge0: port 1(macsec0) entered blocking state [ 240.477166][T13459] bridge0: port 1(macsec0) entered disabled state [ 240.530015][T13459] macsec0: entered allmulticast mode [ 240.563824][T13459] veth1_macvtap: entered allmulticast mode [ 240.576745][T13478] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20003 [ 240.608754][T13459] macsec0: entered promiscuous mode [ 240.673307][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 240.710195][T13481] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 240.785128][T13452] lo speed is unknown, defaulting to 1000 [ 241.027261][T13497] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 241.181581][T13489] lo speed is unknown, defaulting to 1000 [ 241.224830][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 241.254952][T13503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.262363][T13503] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 241.273678][T13502] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 241.284586][T13503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.299707][T13503] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 241.355459][T13503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.363968][T13503] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 241.396842][T13503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.432011][T13503] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 241.466396][T13503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.472497][T13503] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 241.708611][T13513] netlink: 'syz.4.2220': attribute type 12 has an invalid length. [ 241.722851][T13513] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2220'. [ 242.105028][T13534] netlink: 'syz.2.2223': attribute type 21 has an invalid length. [ 242.115052][T13534] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2223'. [ 242.136875][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2223'. [ 242.221210][T13546] tipc: Enabled bearer , priority 0 [ 242.280239][T13546] syzkaller0: entered promiscuous mode [ 242.288201][T13546] syzkaller0: entered allmulticast mode [ 242.295336][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 242.306066][T13546] tipc: Resetting bearer [ 242.355940][T13552] tipc: Resetting bearer [ 242.528855][T13552] tipc: Disabling bearer [ 242.611489][T13558] lo speed is unknown, defaulting to 1000 [ 242.720921][T13564] tipc: Enabled bearer , priority 0 [ 242.730516][T13564] syzkaller0: entered promiscuous mode [ 242.736943][T13564] syzkaller0: entered allmulticast mode [ 242.758094][T13564] tipc: Resetting bearer [ 242.768312][T13563] tipc: Resetting bearer [ 242.787779][T13563] tipc: Disabling bearer [ 242.889283][T13567] netlink: 'syz.2.2236': attribute type 2 has an invalid length. [ 242.897471][T13567] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 243.006411][T13579] netlink: 'syz.2.2240': attribute type 10 has an invalid length. [ 243.025110][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.053131][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.073401][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.120722][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.359925][T13609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.457067][T13618] IPVS: set_ctl: invalid protocol: 90 172.20.20.20:20002 [ 243.601979][T13631] lo speed is unknown, defaulting to 1000 [ 243.755703][T13646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.302349][T13697] lo speed is unknown, defaulting to 1000 [ 244.531446][T13713] sctp: [Deprecated]: syz.3.2277 (pid 13713) Use of int in max_burst socket option. [ 244.531446][T13713] Use struct sctp_assoc_value instead [ 244.735649][T13723] lo speed is unknown, defaulting to 1000 [ 244.751626][T13725] ip6erspan0: entered allmulticast mode [ 244.840655][T13725] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 245.050997][T13752] netlink: 'syz.3.2288': attribute type 2 has an invalid length. [ 245.078145][T13754] __nla_validate_parse: 12 callbacks suppressed [ 245.078167][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 245.101947][T13754] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 245.119574][T13754] netlink: 'syz.0.2289': attribute type 2 has an invalid length. [ 245.128288][T13754] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2289'. [ 245.156398][T13758] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2290'. [ 245.165161][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'. [ 245.201036][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2280'. [ 245.231619][T13755] netlink: 'syz.4.2280': attribute type 13 has an invalid length. [ 245.242125][T13755] netlink: 'syz.4.2280': attribute type 17 has an invalid length. [ 245.310341][T13755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.358790][T13755] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.386331][T13755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.411101][T13770] mac80211_hwsim hwsim7 ": renamed from wlan0 [ 245.480185][T13770] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 245.552661][T13780] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2297'. [ 245.637910][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 245.651442][T13782] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 245.757553][T13792] FAULT_INJECTION: forcing a failure. [ 245.757553][T13792] name failslab, interval 1, probability 0, space 0, times 0 [ 245.772070][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz.4.2301 Not tainted syzkaller #0 PREEMPT(full) [ 245.772094][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.772105][T13792] Call Trace: [ 245.772111][T13792] [ 245.772119][T13792] dump_stack_lvl+0x189/0x250 [ 245.772144][T13792] ? __pfx____ratelimit+0x10/0x10 [ 245.772168][T13792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.772186][T13792] ? __pfx__printk+0x10/0x10 [ 245.772212][T13792] should_fail_ex+0x414/0x560 [ 245.772236][T13792] should_failslab+0xa8/0x100 [ 245.772259][T13792] kmem_cache_alloc_noprof+0x73/0x3c0 [ 245.772280][T13792] ? skb_clone+0x212/0x3a0 [ 245.772301][T13792] skb_clone+0x212/0x3a0 [ 245.772320][T13792] __netlink_deliver_tap+0x404/0x850 [ 245.772348][T13792] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.772372][T13792] netlink_deliver_tap+0x19c/0x1b0 [ 245.772393][T13792] netlink_unicast+0x7fa/0x9e0 [ 245.772426][T13792] ? __pfx_netlink_unicast+0x10/0x10 [ 245.772447][T13792] ? netlink_sendmsg+0x642/0xb30 [ 245.772459][T13792] ? skb_put+0x11b/0x210 [ 245.772476][T13792] netlink_sendmsg+0x805/0xb30 [ 245.772495][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.772527][T13792] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.772542][T13792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.772560][T13792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.772574][T13792] __sock_sendmsg+0x219/0x270 [ 245.772594][T13792] ____sys_sendmsg+0x505/0x830 [ 245.772614][T13792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.772634][T13792] ? import_iovec+0x74/0xa0 [ 245.772653][T13792] ___sys_sendmsg+0x21f/0x2a0 [ 245.772672][T13792] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.772705][T13792] ? __fget_files+0x2a/0x420 [ 245.772720][T13792] ? __fget_files+0x3a0/0x420 [ 245.772741][T13792] __x64_sys_sendmsg+0x19b/0x260 [ 245.772758][T13792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.772778][T13792] ? __pfx_ksys_write+0x10/0x10 [ 245.772797][T13792] ? rcu_is_watching+0x15/0xb0 [ 245.772814][T13792] ? rcu_is_watching+0x15/0xb0 [ 245.772830][T13792] do_syscall_64+0xfa/0x3b0 [ 245.772844][T13792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.772860][T13792] ? clear_bhb_loop+0x60/0xb0 [ 245.772878][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.772901][T13792] RIP: 0033:0x7f6ba478ebe9 [ 245.772918][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.772931][T13792] RSP: 002b:00007f6ba55ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.772951][T13792] RAX: ffffffffffffffda RBX: 00007f6ba49b5fa0 RCX: 00007f6ba478ebe9 [ 245.772965][T13792] RDX: 0000000004048092 RSI: 00002000000000c0 RDI: 0000000000000003 [ 245.772976][T13792] RBP: 00007f6ba55ca090 R08: 0000000000000000 R09: 0000000000000000 [ 245.772987][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.772998][T13792] R13: 00007f6ba49b6038 R14: 00007f6ba49b5fa0 R15: 00007ffff85ff968 [ 245.773018][T13792] [ 245.813102][T13783] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 245.862132][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2302'. [ 245.918583][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 245.924241][T13798] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2302'. [ 246.218661][T13805] lo speed is unknown, defaulting to 1000 [ 246.389383][T13817] netlink: 'syz.3.2307': attribute type 4 has an invalid length. [ 246.452501][T13817] netlink: 'syz.3.2307': attribute type 4 has an invalid length. [ 246.470302][ T6025] lo speed is unknown, defaulting to 1000 [ 246.478799][ T6025] s: Port: 1 Link DOWN [ 246.512659][ T5857] lo speed is unknown, defaulting to 1000 [ 246.522542][ T6025] lo speed is unknown, defaulting to 1000 [ 246.605566][ T6025] s: Port: 1 Link ACTIVE [ 246.637472][ T5857] lo speed is unknown, defaulting to 1000 [ 246.658016][T13832] lo speed is unknown, defaulting to 1000 [ 246.998437][T13853] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 247.310589][T13837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.318742][T13837] IPv6: NLM_F_CREATE should be set when creating new route [ 247.326776][T13837] IPv6: NLM_F_CREATE should be set when creating new route [ 247.334407][T13837] IPv6: NLM_F_CREATE should be set when creating new route [ 247.352129][T13837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.356548][T13875] lo speed is unknown, defaulting to 1000 [ 247.597020][T13888] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 247.913405][T13912] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 248.409794][T13952] syzkaller0: entered promiscuous mode [ 248.416188][T13952] syzkaller0: entered allmulticast mode [ 248.426288][T13952] tipc: Enabled bearer , priority 0 [ 248.436470][T13951] tipc: Resetting bearer [ 248.453561][T13951] tipc: Disabling bearer [ 249.095117][T14010] lo speed is unknown, defaulting to 1000 [ 249.313939][T14014] lo speed is unknown, defaulting to 1000 [ 249.589137][T14035] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 249.599270][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.2.2375 Not tainted syzkaller #0 PREEMPT(full) [ 249.599294][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.599305][T14035] Call Trace: [ 249.599312][T14035] [ 249.599319][T14035] dump_stack_lvl+0x189/0x250 [ 249.599347][T14035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.599367][T14035] ? __pfx__printk+0x10/0x10 [ 249.599388][T14035] ? kernfs_root+0x1c/0x230 [ 249.599408][T14035] ? kernfs_path_from_node+0x2f/0x290 [ 249.599433][T14035] ? kernfs_path_from_node+0x250/0x290 [ 249.599451][T14035] ? kernfs_path_from_node+0x2f/0x290 [ 249.599471][T14035] sysfs_warn_dup+0x8e/0xa0 [ 249.599489][T14035] sysfs_do_create_link_sd+0xc0/0x110 [ 249.599509][T14035] device_add_class_symlinks+0x1cf/0x240 [ 249.599528][T14035] device_add+0x475/0xb50 [ 249.599547][T14035] wiphy_register+0x1ba6/0x28d0 [ 249.599577][T14035] ? __pfx_wiphy_register+0x10/0x10 [ 249.599599][T14035] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 249.599623][T14035] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 249.599643][T14035] ieee80211_register_hw+0x3425/0x4080 [ 249.599671][T14035] ? ieee80211_register_hw+0x1461/0x4080 [ 249.599694][T14035] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 249.599715][T14035] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.599741][T14035] ? __hrtimer_setup+0x187/0x210 [ 249.599756][T14035] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 249.599782][T14035] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 249.599817][T14035] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 249.599841][T14035] ? trace_kmalloc+0x1f/0xd0 [ 249.599861][T14035] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 249.599884][T14035] ? kstrndup+0xbf/0x160 [ 249.599904][T14035] hwsim_new_radio_nl+0xea4/0x1b10 [ 249.599926][T14035] ? __pfx___nla_validate_parse+0x10/0x10 [ 249.599957][T14035] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.599983][T14035] ? __nla_parse+0x40/0x60 [ 249.600008][T14035] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 249.600033][T14035] genl_family_rcv_msg_doit+0x212/0x300 [ 249.600056][T14035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.600081][T14035] ? bpf_lsm_capable+0x9/0x20 [ 249.600103][T14035] ? security_capable+0x7e/0x2e0 [ 249.600129][T14035] genl_rcv_msg+0x60e/0x790 [ 249.600151][T14035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.600168][T14035] ? __kasan_slab_alloc+0x6c/0x80 [ 249.600189][T14035] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.600210][T14035] ? __netlink_lookup+0xbd/0x810 [ 249.600225][T14035] ? rcu_is_watching+0x15/0xb0 [ 249.600246][T14035] netlink_rcv_skb+0x208/0x470 [ 249.600269][T14035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.600287][T14035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.600315][T14035] ? lock_release+0x4b/0x3e0 [ 249.600339][T14035] ? down_read+0x1ad/0x2e0 [ 249.600357][T14035] genl_rcv+0x28/0x40 [ 249.600374][T14035] netlink_unicast+0x82f/0x9e0 [ 249.600400][T14035] ? __pfx_netlink_unicast+0x10/0x10 [ 249.600430][T14035] ? netlink_sendmsg+0x642/0xb30 [ 249.600445][T14035] ? skb_put+0x11b/0x210 [ 249.600462][T14035] netlink_sendmsg+0x805/0xb30 [ 249.600481][T14035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.600497][T14035] ? futex_unqueue+0x22/0x240 [ 249.600515][T14035] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.600532][T14035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.600555][T14035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.600580][T14035] __sock_sendmsg+0x219/0x270 [ 249.600603][T14035] ____sys_sendmsg+0x505/0x830 [ 249.600641][T14035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.600662][T14035] ? import_iovec+0x74/0xa0 [ 249.600682][T14035] ___sys_sendmsg+0x21f/0x2a0 [ 249.600700][T14035] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.600722][T14035] ? futex_wait+0x285/0x360 [ 249.600756][T14035] ? __fget_files+0x2a/0x420 [ 249.600771][T14035] ? __fget_files+0x3a0/0x420 [ 249.600791][T14035] __x64_sys_sendmsg+0x19b/0x260 [ 249.600810][T14035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.600832][T14035] ? rcu_is_watching+0x15/0xb0 [ 249.600850][T14035] ? rcu_is_watching+0x15/0xb0 [ 249.600868][T14035] do_syscall_64+0xfa/0x3b0 [ 249.600885][T14035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.600901][T14035] ? clear_bhb_loop+0x60/0xb0 [ 249.600920][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.600937][T14035] RIP: 0033:0x7fd6b418ebe9 [ 249.600953][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.600969][T14035] RSP: 002b:00007fd6b4fda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.600989][T14035] RAX: ffffffffffffffda RBX: 00007fd6b43b6090 RCX: 00007fd6b418ebe9 [ 249.601002][T14035] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 249.601012][T14035] RBP: 00007fd6b4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 249.601023][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.601034][T14035] R13: 00007fd6b43b6128 R14: 00007fd6b43b6090 R15: 00007ffc57181b38 [ 249.601055][T14035] [ 250.134691][T14037] __nla_validate_parse: 8 callbacks suppressed [ 250.134711][T14037] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2374'. [ 250.480345][T14054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2380'. [ 250.624220][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'. [ 250.677607][T14064] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 250.687880][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2384'. [ 250.916207][T14080] lo speed is unknown, defaulting to 1000 [ 250.926395][T14083] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 251.016391][T14091] bond3: (slave geneve3): making interface the new active one [ 251.047745][T14091] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 251.074552][T14083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2391'. [ 251.084026][T14089] netlink: 'syz.2.2390': attribute type 16 has an invalid length. [ 251.096857][ T1148] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.112281][T14083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.126418][ T1148] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.147865][ T1148] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.182187][ T1148] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.209899][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 251.391602][T14107] geneve2: left promiscuous mode [ 251.407963][T14107] bond1: left promiscuous mode [ 251.418092][T14107] bridge5: left promiscuous mode [ 251.427380][T14111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 251.436376][T14107] bond2: left promiscuous mode [ 251.448608][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2395'. [ 251.458978][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 251.477151][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2397'. [ 251.601093][T14120] lo speed is unknown, defaulting to 1000 [ 251.772378][T14132] netlink: 'syz.2.2404': attribute type 8 has an invalid length. [ 251.785590][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2404'. [ 251.840220][T14139] nbd: socks must be embedded in a SOCK_ITEM attr [ 251.961352][T14144] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 252.075002][T14148] veth0_to_bond: entered allmulticast mode [ 252.204547][T14155] lo speed is unknown, defaulting to 1000 [ 252.269009][T14168] netlink: 'syz.3.2415': attribute type 18 has an invalid length. [ 252.375010][T14174] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.551032][T14174] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.607452][T14174] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.677502][T14174] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.735812][T14185] lo speed is unknown, defaulting to 1000 [ 252.757878][ T1148] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.786815][ T1148] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.809237][ T1148] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.826020][ T1148] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.866942][T14186] lo speed is unknown, defaulting to 1000 [ 253.301218][T14205] lo speed is unknown, defaulting to 1000 [ 253.584195][T14230] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 253.827217][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.858177][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.921966][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.960817][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.180071][T14277] lo: entered allmulticast mode [ 254.188302][T14277] lo: left allmulticast mode [ 254.260007][T14292] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 254.499082][T14317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.589485][T14325] netlink: 'syz.1.2462': attribute type 12 has an invalid length. [ 254.598750][T14325] netlink: 'syz.1.2462': attribute type 14 has an invalid length. [ 254.873692][T14354] tipc: Enabled bearer , priority 0 [ 254.886336][T14354] syzkaller0: MTU too low for tipc bearer [ 254.894051][T14354] tipc: Disabling bearer [ 254.904917][T14333] netlink: 'syz.1.2465': attribute type 14 has an invalid length. [ 254.935780][T14356] lo speed is unknown, defaulting to 1000 [ 255.042116][T14365] netlink: 'syz.1.2475': attribute type 5 has an invalid length. [ 255.519505][T14415] __nla_validate_parse: 29 callbacks suppressed [ 255.519523][T14415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2483'. [ 255.536221][T14417] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 255.573861][T14415] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2483'. [ 255.608276][T14417] : (slave bridge0): Releasing backup interface [ 255.641662][T14417] : (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 255.673395][T14417] : (slave dummy0): Releasing backup interface [ 255.774582][T14423] netlink: 'syz.0.2486': attribute type 10 has an invalid length. [ 255.797250][T14423] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 255.805887][T14423] wlan1: mtu less than device minimum [ 255.812094][T14423] : (slave wlan1): Error -22 calling dev_set_mtu [ 256.057884][T14437] tipc: Enabled bearer , priority 0 [ 256.097922][T14436] lo speed is unknown, defaulting to 1000 [ 256.260130][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2490'. [ 256.277900][T14442] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 256.291514][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2491'. [ 256.309804][T14441] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 256.321771][ T7167] lo speed is unknown, defaulting to 1000 [ 256.322983][T14437] syzkaller0: entered promiscuous mode [ 256.333156][ T7167] s: Port: 1 Link DOWN [ 256.337346][T14437] syzkaller0: entered allmulticast mode [ 256.353648][T14448] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 256.359859][ T1148] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.378303][ T7167] lo speed is unknown, defaulting to 1000 [ 256.415698][ T1148] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.490203][T14437] tipc: Resetting bearer [ 256.502278][ T1148] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.532914][ T1148] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.567244][T14435] tipc: Resetting bearer [ 256.590436][T14435] tipc: Disabling bearer [ 256.621643][T14466] ip6tnl3: entered promiscuous mode [ 256.698713][T14473] netlink: 844 bytes leftover after parsing attributes in process `syz.2.2500'. [ 256.740889][T14479] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2502'. [ 256.793658][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2500'. [ 257.550677][T14524] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 257.559963][T14524] netlink: 'syz.2.2515': attribute type 3 has an invalid length. [ 257.568994][T14524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2515'. [ 257.963197][T14552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2526'. [ 257.989061][T14559] tipc: Enabled bearer , priority 0 [ 258.005589][T14552] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2526'. [ 258.045185][T14558] syzkaller0: entered promiscuous mode [ 258.093618][T14558] syzkaller0: entered allmulticast mode [ 258.164754][T14558] tipc: Resetting bearer [ 258.194759][T14558] tipc: Disabling bearer [ 258.319320][T14593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.393092][T14592] netlink: 'syz.3.2535': attribute type 10 has an invalid length. [ 258.435267][T14603] netlink: 'syz.1.2537': attribute type 5 has an invalid length. [ 258.689400][T14623] netlink: 'syz.1.2543': attribute type 4 has an invalid length. [ 258.700979][T14623] netlink: 'syz.1.2543': attribute type 4 has an invalid length. [ 258.740325][T14627] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 261.646298][T14671] __nla_validate_parse: 5 callbacks suppressed [ 261.646317][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2558'. [ 261.677798][T14672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2555'. [ 261.687081][T14671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.698423][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 261.831992][T14681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2559'. [ 261.870511][T14690] netlink: 'syz.4.2563': attribute type 21 has an invalid length. [ 261.878806][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 261.889725][T14690] netlink: 'syz.4.2563': attribute type 21 has an invalid length. [ 261.899302][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 261.943551][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2566'. [ 261.986936][T14698] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.035504][T14704] netlink: 'syz.2.2567': attribute type 11 has an invalid length. [ 262.064767][T14698] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.115821][T14698] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.160745][T14710] netlink: 'syz.4.2571': attribute type 3 has an invalid length. [ 262.176136][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 262.187681][T14698] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.208538][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 262.225131][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 262.277462][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.298977][T11163] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.314871][T14716] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 262.322728][T14723] team0: entered promiscuous mode [ 262.322895][T14716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.348941][T14721] team0: left promiscuous mode [ 262.354499][T11163] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.371490][T11163] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.063426][T14759] team0: Port device bridge0 removed [ 263.070177][T14759] bond1: (slave ip6erspan0): Releasing active interface [ 263.085936][T14760] validate_nla: 1 callbacks suppressed [ 263.085957][T14760] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 263.102919][T14762] FAULT_INJECTION: forcing a failure. [ 263.102919][T14762] name failslab, interval 1, probability 0, space 0, times 0 [ 263.142472][T14759] bond2: (slave bond3): Releasing backup interface [ 263.150810][T14762] CPU: 1 UID: 0 PID: 14762 Comm: syz.0.2585 Not tainted syzkaller #0 PREEMPT(full) [ 263.150835][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.150845][T14762] Call Trace: [ 263.150852][T14762] [ 263.150859][T14762] dump_stack_lvl+0x189/0x250 [ 263.150884][T14762] ? __pfx____ratelimit+0x10/0x10 [ 263.150908][T14762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.150926][T14762] ? __pfx__printk+0x10/0x10 [ 263.150948][T14762] ? __pfx___might_resched+0x10/0x10 [ 263.150965][T14762] ? lock_acquire+0x5f/0x360 [ 263.150988][T14762] should_fail_ex+0x414/0x560 [ 263.151011][T14762] should_failslab+0xa8/0x100 [ 263.151034][T14762] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 263.151056][T14762] ? __alloc_skb+0x112/0x2d0 [ 263.151073][T14762] __alloc_skb+0x112/0x2d0 [ 263.151089][T14762] alloc_skb_with_frags+0xca/0x890 [ 263.151107][T14762] ? ima_match_policy+0x10b/0x2150 [ 263.151128][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151147][T14762] sock_alloc_send_pskb+0x857/0x990 [ 263.151175][T14762] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 263.151193][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151206][T14762] ? dev_get_by_index+0x22/0x2e0 [ 263.151225][T14762] ? lock_release+0x4b/0x3e0 [ 263.151247][T14762] ? dev_get_by_index+0x22/0x2e0 [ 263.151269][T14762] packet_sendmsg+0x33a0/0x5080 [ 263.151300][T14762] ? audit_mount+0xd0/0x610 [ 263.151325][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151341][T14762] ? mntput_no_expire+0xb9/0x9d0 [ 263.151361][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151377][T14762] ? __pfx___might_resched+0x10/0x10 [ 263.151392][T14762] ? unwind_next_frame+0xa5/0x2390 [ 263.151410][T14762] ? unwind_next_frame+0xa5/0x2390 [ 263.151427][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151444][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151462][T14762] ? __pfx_packet_sendmsg+0x10/0x10 [ 263.151479][T14762] ? aa_sk_perm+0x81e/0x950 [ 263.151504][T14762] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 263.151525][T14762] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.151540][T14762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.151558][T14762] ? __pfx_packet_sendmsg+0x10/0x10 [ 263.151577][T14762] __sock_sendmsg+0x219/0x270 [ 263.151599][T14762] ____sys_sendmsg+0x505/0x830 [ 263.151618][T14762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.151640][T14762] ? import_iovec+0x74/0xa0 [ 263.151660][T14762] ___sys_sendmsg+0x21f/0x2a0 [ 263.151678][T14762] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.151711][T14762] ? __fget_files+0x2a/0x420 [ 263.151725][T14762] ? __fget_files+0x3a0/0x420 [ 263.151743][T14762] __x64_sys_sendmsg+0x19b/0x260 [ 263.151761][T14762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 263.151782][T14762] ? __pfx_ksys_write+0x10/0x10 [ 263.151802][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151820][T14762] ? rcu_is_watching+0x15/0xb0 [ 263.151837][T14762] do_syscall_64+0xfa/0x3b0 [ 263.151853][T14762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.151869][T14762] ? clear_bhb_loop+0x60/0xb0 [ 263.151887][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.151903][T14762] RIP: 0033:0x7f81d218ebe9 [ 263.151919][T14762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.151932][T14762] RSP: 002b:00007f81d3032038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.151949][T14762] RAX: ffffffffffffffda RBX: 00007f81d23b5fa0 RCX: 00007f81d218ebe9 [ 263.151960][T14762] RDX: 0000000020048005 RSI: 00002000000000c0 RDI: 0000000000000003 [ 263.151970][T14762] RBP: 00007f81d3032090 R08: 0000000000000000 R09: 0000000000000000 [ 263.151979][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.151987][T14762] R13: 00007f81d23b6038 R14: 00007f81d23b5fa0 R15: 00007fff38c9bbc8 [ 263.152004][T14762] [ 263.576472][T14759] bond0: (slave gretap1): Releasing active interface [ 263.615920][T14759] gretap1: left promiscuous mode [ 263.665116][T14759] team0: Port device bond4 removed [ 263.680284][T14759] bond5: (slave bond6): Releasing backup interface [ 263.735175][T14759] batman_adv: batadv0: Removing interface: macvtap0 [ 264.305759][T14803] netlink: 'syz.1.2599': attribute type 20 has an invalid length. [ 264.315150][T14803] netlink: 'syz.1.2599': attribute type 20 has an invalid length. [ 264.667011][T14830] tipc: Enabled bearer , priority 0 [ 264.681402][T14830] syzkaller0: entered promiscuous mode [ 264.692849][T14830] syzkaller0: entered allmulticast mode [ 264.728701][T14830] tipc: Resetting bearer [ 264.765891][T14829] tipc: Resetting bearer [ 264.787915][T14829] tipc: Disabling bearer [ 265.049274][T14866] hsr_slave_0: left promiscuous mode [ 265.067337][T14866] hsr_slave_1: left promiscuous mode [ 265.455373][T14879] tap0: tun_chr_ioctl cmd 1074025677 [ 265.469024][T14879] tap0: linktype set to 804 [ 265.484676][T14882] tap0: tun_chr_ioctl cmd 1074025677 [ 265.497091][T14882] tap0: linktype set to 804 [ 265.546826][T14887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.925848][T14910] : entered promiscuous mode [ 266.043917][T14926] batadv0: entered promiscuous mode [ 266.052529][T14926] batadv0: entered allmulticast mode [ 266.136011][T14938] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 266.614283][T14959] vlan1: entered allmulticast mode [ 266.634902][T14959] bridge_slave_0: entered allmulticast mode [ 266.701212][T14978] __nla_validate_parse: 22 callbacks suppressed [ 266.701230][T14978] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2639'. [ 266.861629][T14987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2643'. [ 266.973514][T14992] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2644'. [ 267.011339][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'. [ 267.271270][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'. [ 267.369249][T14998] netlink: 4208 bytes leftover after parsing attributes in process `syz.4.2646'. [ 267.496003][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 267.536065][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 267.567238][T15018] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2651'. [ 267.601753][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 267.628798][T15012] ip6tnl3: entered promiscuous mode [ 267.650180][T15012] ip6tnl3: entered allmulticast mode [ 267.765447][T15034] tipc: Enabling of bearer rejected, failed to enable media [ 267.822630][T15041] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 267.870855][T15041] : entered promiscuous mode [ 267.909615][ T30] audit: type=1800 audit(1756224579.187:7): pid=15050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2661" name="memory.events" dev="tmpfs" ino=2774 res=0 errno=0 [ 268.047129][T15067] tipc: Enabled bearer , priority 0 [ 268.069906][T15069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.101313][T15069] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.131940][T15065] tipc: Disabling bearer [ 268.158120][T15069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.169899][T15069] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.251809][T15069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.264123][T15069] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.328988][T15091] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!' [ 268.345672][T15091] CPU: 0 UID: 0 PID: 15091 Comm: syz.2.2674 Not tainted syzkaller #0 PREEMPT(full) [ 268.345698][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.345709][T15091] Call Trace: [ 268.345715][T15091] [ 268.345721][T15091] dump_stack_lvl+0x189/0x250 [ 268.345745][T15091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.345761][T15091] ? __pfx__printk+0x10/0x10 [ 268.345779][T15091] ? kernfs_root+0x1c/0x230 [ 268.345795][T15091] ? kernfs_path_from_node+0x2f/0x290 [ 268.345809][T15091] ? kernfs_path_from_node+0x250/0x290 [ 268.345822][T15091] ? kernfs_path_from_node+0x2f/0x290 [ 268.345848][T15091] sysfs_warn_dup+0x8e/0xa0 [ 268.345863][T15091] sysfs_do_create_link_sd+0xc0/0x110 [ 268.345879][T15091] device_add_class_symlinks+0x1cf/0x240 [ 268.345895][T15091] device_add+0x475/0xb50 [ 268.345909][T15091] wiphy_register+0x1ba6/0x28d0 [ 268.345946][T15091] ? __pfx_wiphy_register+0x10/0x10 [ 268.345964][T15091] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 268.345983][T15091] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 268.346001][T15091] ieee80211_register_hw+0x3425/0x4080 [ 268.346023][T15091] ? ieee80211_register_hw+0x1461/0x4080 [ 268.346041][T15091] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 268.346058][T15091] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.346079][T15091] ? __hrtimer_setup+0x187/0x210 [ 268.346091][T15091] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 268.346112][T15091] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 268.346139][T15091] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 268.346156][T15091] ? trace_kmalloc+0x1f/0xd0 [ 268.346173][T15091] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 268.346191][T15091] ? kstrndup+0xbf/0x160 [ 268.346207][T15091] hwsim_new_radio_nl+0xea4/0x1b10 [ 268.346225][T15091] ? __pfx___nla_validate_parse+0x10/0x10 [ 268.346249][T15091] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 268.346270][T15091] ? __nla_parse+0x40/0x60 [ 268.346290][T15091] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 268.346314][T15091] genl_family_rcv_msg_doit+0x212/0x300 [ 268.346333][T15091] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.346353][T15091] ? bpf_lsm_capable+0x9/0x20 [ 268.346371][T15091] ? security_capable+0x7e/0x2e0 [ 268.346392][T15091] genl_rcv_msg+0x60e/0x790 [ 268.346409][T15091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.346422][T15091] ? __kasan_slab_alloc+0x6c/0x80 [ 268.346439][T15091] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 268.346456][T15091] ? __netlink_lookup+0xbd/0x810 [ 268.346467][T15091] ? rcu_is_watching+0x15/0xb0 [ 268.346484][T15091] netlink_rcv_skb+0x208/0x470 [ 268.346503][T15091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.346518][T15091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.346541][T15091] ? lock_release+0x4b/0x3e0 [ 268.346560][T15091] ? down_read+0x1ad/0x2e0 [ 268.346573][T15091] genl_rcv+0x28/0x40 [ 268.346588][T15091] netlink_unicast+0x82f/0x9e0 [ 268.346608][T15091] ? __pfx_netlink_unicast+0x10/0x10 [ 268.346625][T15091] ? netlink_sendmsg+0x642/0xb30 [ 268.346636][T15091] ? skb_put+0x11b/0x210 [ 268.346650][T15091] netlink_sendmsg+0x805/0xb30 [ 268.346665][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.346677][T15091] ? futex_unqueue+0x22/0x240 [ 268.346691][T15091] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.346704][T15091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.346718][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.346730][T15091] __sock_sendmsg+0x219/0x270 [ 268.346748][T15091] ____sys_sendmsg+0x505/0x830 [ 268.346764][T15091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.346781][T15091] ? import_iovec+0x74/0xa0 [ 268.346796][T15091] ___sys_sendmsg+0x21f/0x2a0 [ 268.346811][T15091] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.346840][T15091] ? futex_wait+0x285/0x360 [ 268.346870][T15091] ? __fget_files+0x2a/0x420 [ 268.346882][T15091] ? __fget_files+0x3a0/0x420 [ 268.346897][T15091] __x64_sys_sendmsg+0x19b/0x260 [ 268.346913][T15091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.346931][T15091] ? rcu_is_watching+0x15/0xb0 [ 268.346947][T15091] ? rcu_is_watching+0x15/0xb0 [ 268.346962][T15091] do_syscall_64+0xfa/0x3b0 [ 268.346977][T15091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.346990][T15091] ? clear_bhb_loop+0x60/0xb0 [ 268.347005][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.347018][T15091] RIP: 0033:0x7fd6b418ebe9 [ 268.347032][T15091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.347044][T15091] RSP: 002b:00007fd6b4ffb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.347061][T15091] RAX: ffffffffffffffda RBX: 00007fd6b43b5fa0 RCX: 00007fd6b418ebe9 [ 268.347072][T15091] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 268.347082][T15091] RBP: 00007fd6b4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.347091][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.347099][T15091] R13: 00007fd6b43b6038 R14: 00007fd6b43b5fa0 R15: 00007ffc57181b38 [ 268.347116][T15091] [ 268.897537][T15069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.941008][T15069] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 268.989369][T15079] lo speed is unknown, defaulting to 1000 [ 269.030353][T15096] netlink: 'syz.0.2677': attribute type 10 has an invalid length. [ 269.041121][T15096] : (slave wlan1): Enslaving as an active interface with an up link [ 269.181471][T11182] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 269.201242][T11182] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.260704][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 269.273212][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.292120][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 269.313292][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.331471][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 269.341893][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.414050][T15123] netlink: 'syz.0.2683': attribute type 11 has an invalid length. [ 269.550956][T15146] tipc: Enabled bearer , priority 0 [ 269.582250][T15146] syzkaller0: entered promiscuous mode [ 269.589614][T15146] syzkaller0: entered allmulticast mode [ 269.613923][T15146] tipc: Resetting bearer [ 269.622516][T15145] tipc: Resetting bearer [ 269.647361][T15145] tipc: Disabling bearer [ 269.744006][T15163] lo speed is unknown, defaulting to 1000 [ 269.873854][T15182] sock: sock_timestamping_bind_phc: sock not bind to device [ 269.932062][T15182] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.950195][T15182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.105334][T15194] netlink: 'syz.3.2703': attribute type 2 has an invalid length. [ 270.192006][T15183] netlink: 'syz.1.2695': attribute type 13 has an invalid length. [ 270.202102][T15183] netlink: 'syz.1.2695': attribute type 17 has an invalid length. [ 270.229659][T15183] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 270.312335][T15206] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 270.340112][T15206] syzkaller1: linktype set to 6 [ 270.545931][T15223] lo speed is unknown, defaulting to 1000 [ 270.676004][T15236] openvswitch: netlink: Flow key attr not present in new flow. [ 271.116143][T15264] IPv6: sit1: Disabled Multicast RS [ 271.331212][T15274] netlink: 'syz.4.2726': attribute type 10 has an invalid length. [ 271.356520][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.381560][T15274] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 271.489262][T15289] lo speed is unknown, defaulting to 1000 [ 271.655024][T15303] lo speed is unknown, defaulting to 1000 [ 271.799271][T15317] netlink: 'syz.1.2736': attribute type 13 has an invalid length. [ 271.809595][T15317] netlink: 'syz.1.2736': attribute type 17 has an invalid length. [ 271.825915][T15317] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 272.119041][T15325] __nla_validate_parse: 11 callbacks suppressed [ 272.119158][T15325] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2738'. [ 272.136801][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'. [ 272.366954][T15342] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 272.568564][T15353] netlink: 'syz.2.2746': attribute type 10 has an invalid length. [ 272.668624][T15360] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2748'. [ 272.790464][T15371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2750'. [ 272.815195][T15365] block nbd0: server does not support multiple connections per device. [ 272.826876][T15365] block nbd0: shutting down sockets [ 272.902384][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 273.101172][T15392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2758'. [ 273.189586][T15396] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 273.282638][T15407] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2764'. [ 273.372472][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 273.665376][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'. [ 273.760167][T15442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2776'. [ 273.890106][T15447] team0: Mode changed to "loadbalance" [ 274.243354][T15462] netlink: 'syz.0.2782': attribute type 7 has an invalid length. [ 274.288688][T15465] vlan1: entered allmulticast mode [ 274.294633][T15465] dummy0: entered allmulticast mode [ 274.401060][T15472] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 274.744112][T15500] tipc: Enabled bearer , priority 0 [ 274.769210][T15499] tipc: Resetting bearer [ 274.803172][T15499] tipc: Disabling bearer [ 274.874252][T15508] tap0: tun_chr_ioctl cmd 1074025676 [ 274.881801][T15508] tap0: owner set to 0 [ 275.129387][T15542] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 275.136672][T15539] lo speed is unknown, defaulting to 1000 [ 275.925549][T15577] netlink: 'syz.4.2818': attribute type 6 has an invalid length. [ 276.081587][T15577] bond6: entered promiscuous mode [ 276.449684][T15603] macvlan2: entered allmulticast mode [ 276.471640][T15603] veth1_vlan: entered allmulticast mode [ 276.483047][T15603] veth1_vlan: left allmulticast mode [ 276.662414][T15621] lo speed is unknown, defaulting to 1000 [ 277.187378][T15653] __nla_validate_parse: 70 callbacks suppressed [ 277.187397][T15653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2838'. [ 277.207578][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'. [ 277.249320][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 277.282883][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 277.338253][T15657] netlink: del zone limit has 8 unknown bytes [ 277.471663][T15671] lo speed is unknown, defaulting to 1000 [ 278.511536][T15728] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 278.540401][T15720] lo speed is unknown, defaulting to 1000 [ 278.562486][T15747] netlink: 'syz.1.2858': attribute type 11 has an invalid length. [ 278.657170][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'. [ 279.429594][T15791] dvmrp0: entered allmulticast mode [ 279.535273][T15796] tipc: Cannot configure node identity twice [ 279.744970][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2874'. [ 279.788615][ T5180] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.800216][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 279.813940][ T5180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.828764][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2875'. [ 279.832935][ T5180] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.860983][ T5180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.872329][ T5180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.889675][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.900436][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.909441][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.920290][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.930640][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.963548][T15807] lo speed is unknown, defaulting to 1000 [ 279.979139][T15815] Bluetooth: MGMT ver 1.23 [ 280.060270][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 280.096293][T15815] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 280.506028][T15849] lo speed is unknown, defaulting to 1000 [ 280.526244][T15807] chnl_net:caif_netlink_parms(): no params data found [ 280.557523][T15850] tipc: Enabled bearer , priority 0 [ 280.577550][T15850] syzkaller0: entered promiscuous mode [ 280.583288][T15850] syzkaller0: entered allmulticast mode [ 280.673209][T15850] tipc: Resetting bearer [ 280.722419][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.742928][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.750811][T15807] bridge_slave_0: entered allmulticast mode [ 280.760610][T15857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.772310][T15807] bridge_slave_0: entered promiscuous mode [ 280.788858][T15859] netlink: 'syz.1.2884': attribute type 8 has an invalid length. [ 280.794901][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.806593][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.814613][T15807] bridge_slave_1: entered allmulticast mode [ 280.822303][T15807] bridge_slave_1: entered promiscuous mode [ 280.833757][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2883'. [ 280.900222][T15859] lo speed is unknown, defaulting to 1000 [ 280.911194][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.926323][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.990737][T15848] tipc: Resetting bearer [ 281.007078][T15848] tipc: Disabling bearer [ 281.025420][T15807] team0: Port device team_slave_0 added [ 281.040438][T15807] team0: Port device team_slave_1 added [ 281.137019][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.155014][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.200012][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.227474][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.248872][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.289804][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.515971][T15807] hsr_slave_0: entered promiscuous mode [ 281.524114][T15807] hsr_slave_1: entered promiscuous mode [ 281.569416][T15889] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 281.683129][T15807] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.701856][T15898] openvswitch: netlink: Flow key attr not present in new flow. [ 281.736175][T15807] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.808702][T15807] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.844106][T15906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.879383][T15807] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.013876][ T5858] Bluetooth: hci4: command tx timeout [ 282.799388][ T3014] bond1 (unregistering): Released all slaves [ 282.810510][ T3014] bond2 (unregistering): Released all slaves [ 282.824199][ T3014] bond3 (unregistering): Released all slaves [ 282.836182][ T3014] bond0 (unregistering): left promiscuous mode [ 282.846873][ T3014] bond0 (unregistering): Released all slaves [ 282.860118][ T3014] bond4 (unregistering): Released all slaves [ 282.878795][ T3014] bond5 (unregistering): Released all slaves [ 282.891222][ T3014] bond6 (unregistering): Released all slaves [ 282.906440][ T3014] bond7 (unregistering): Released all slaves [ 282.998384][T15918] lo speed is unknown, defaulting to 1000 [ 283.027129][ T3014] : left promiscuous mode [ 283.086006][T15807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.119055][ T3014] k*]: left promiscuous mode [ 283.142655][T15807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.155234][T15943] __nla_validate_parse: 3 callbacks suppressed [ 283.155255][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 283.191230][T15807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.222575][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'. [ 283.233682][T15946] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 283.242890][ T3014] tipc: Left network mode [ 283.249437][T15946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.259870][T15807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.274581][ T3014] IPVS: stopping backup sync thread 9940 ... [ 283.298262][T15942] lo speed is unknown, defaulting to 1000 [ 283.610789][T15949] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.2910'. [ 283.624386][ T5858] Bluetooth: hci0: command tx timeout [ 283.645747][T15949] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.2910'. [ 283.832351][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 283.974230][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2914'. [ 284.007475][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.070805][T15970] vlan2: entered promiscuous mode [ 284.080807][T15970] bridge0: entered promiscuous mode [ 284.093654][ T5858] Bluetooth: hci4: command tx timeout [ 284.152245][ T3014] dummy0: left promiscuous mode [ 284.169242][ T3014] hsr_slave_0: left promiscuous mode [ 284.177851][ T3014] hsr_slave_1: left promiscuous mode [ 284.233993][ T3014] pim6reg (unregistering): left allmulticast mode [ 285.034491][T15974] !: renamed from dummy0 [ 285.199524][T15998] lo speed is unknown, defaulting to 1000 [ 285.227937][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.266946][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.274455][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.299342][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.307328][T11163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.342675][T16016] lo: entered allmulticast mode [ 285.355099][T16016] lo: left allmulticast mode [ 285.389054][T15989] lo speed is unknown, defaulting to 1000 [ 285.548707][ T3014] IPVS: stop unused estimator thread 0... [ 285.758141][T16024] lo speed is unknown, defaulting to 1000 [ 285.815213][T15807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.935089][T15807] veth0_vlan: entered promiscuous mode [ 285.975603][T15807] veth1_vlan: entered promiscuous mode [ 286.106520][T15807] veth0_macvtap: entered promiscuous mode [ 286.137301][T15807] veth1_macvtap: entered promiscuous mode [ 286.173087][ T5858] Bluetooth: hci4: command tx timeout [ 286.349518][T15807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.404796][T15807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.436181][T11182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.452115][T11182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.476283][ T5144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.488053][ T5144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.626983][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2934'. [ 286.824182][T11175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.850932][T11175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.906843][T11175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.924881][T11175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.939490][T16082] sctp: [Deprecated]: syz.1.2936 (pid 16082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.939490][T16082] Use struct sctp_sack_info instead [ 287.002048][T16080] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.045021][T16089] netlink: 'syz.0.2937': attribute type 11 has an invalid length. [ 287.167699][T16080] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.298993][T16080] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.410696][T16080] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.512694][T16099] tipc: Enabled bearer , priority 14 [ 287.513026][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 287.520854][ T3014] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.553365][T16100] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 287.563248][T11175] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.572450][T11175] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.590380][T11169] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.664148][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 287.676731][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 287.722261][T16104] IPVS: Scheduler module ip_vs_ not found [ 287.839573][T16111] vlan5: entered promiscuous mode [ 287.857714][T16111] bridge0: entered promiscuous mode [ 288.045195][T16123] netlink: 'syz.4.2950': attribute type 12 has an invalid length. [ 288.253272][ T5858] Bluetooth: hci4: command tx timeout [ 288.341263][ T5180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.354393][ T5180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.367832][ T5180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.395885][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.564644][ T5180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.590924][T16144] __nla_validate_parse: 3 callbacks suppressed [ 288.590944][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2956'. [ 288.632154][ T5857] tipc: Node number set to 2514935559 [ 288.635414][T16146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2957'. [ 288.714041][T16136] lo speed is unknown, defaulting to 1000 [ 289.054527][T16160] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309 [ 289.110330][T11169] dvmrp1 (unregistering): left allmulticast mode [ 289.489466][T11169] bond1 (unregistering): Released all slaves [ 289.505485][T11169] bond0 (unregistering): Released all slaves [ 289.618802][T11169] : left promiscuous mode [ 289.684245][T11169] tipc: Disabling bearer [ 289.701338][T11169] tipc: Left network mode [ 289.750340][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2965'. [ 289.871595][T16182] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2965'. [ 289.889460][T11169] IPVS: stopping backup sync thread 14448 ... [ 289.904083][T16174] lo speed is unknown, defaulting to 1000 [ 290.284513][T16136] chnl_net:caif_netlink_parms(): no params data found [ 290.437964][T16136] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.453285][T16136] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.465233][T16136] bridge_slave_0: entered allmulticast mode [ 290.484279][T16136] bridge_slave_0: entered promiscuous mode [ 290.524234][T16136] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.532351][T16136] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.565023][T16136] bridge_slave_1: entered allmulticast mode [ 290.567934][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2974'. [ 290.585652][T16136] bridge_slave_1: entered promiscuous mode [ 290.648932][T16230] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 290.663069][ T5180] Bluetooth: hci1: command tx timeout [ 290.746233][T16136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.789803][T16136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.860308][T16136] team0: Port device team_slave_0 added [ 290.900140][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2977'. [ 290.915718][T16136] team0: Port device team_slave_1 added [ 290.946958][T16237] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2978'. [ 291.032612][T16136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.058196][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.107395][T16136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.139338][T16136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.152798][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.194117][T16136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.265198][T16136] hsr_slave_0: entered promiscuous mode [ 291.291311][T16136] hsr_slave_1: entered promiscuous mode [ 291.301596][T16136] debugfs: 'hsr0' already exists in 'hsr' [ 291.312986][T16136] Cannot create hsr debugfs directory [ 291.410229][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 291.430474][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 291.456502][T16268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'. [ 291.568459][T16263] ip6tnl1: entered promiscuous mode [ 291.577399][T16263] ip6tnl1: entered allmulticast mode [ 291.642942][T11169] hsr_slave_0: left promiscuous mode [ 291.718542][T11169] hsr_slave_1: left promiscuous mode [ 291.969032][T11169] pimreg (unregistering): left allmulticast mode [ 292.403906][T16286] ================================================================== [ 292.417007][T16286] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450 [ 292.431098][T16286] Read of size 1 at addr ffff88802e379430 by task syz.1.2990/16286 [ 292.443315][T16286] [ 292.448649][T16286] CPU: 1 UID: 0 PID: 16286 Comm: syz.1.2990 Not tainted syzkaller #0 PREEMPT(full) [ 292.448685][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.448703][T16286] Call Trace: [ 292.448718][T16286] [ 292.448732][T16286] dump_stack_lvl+0x189/0x250 [ 292.448761][T16286] ? __virt_addr_valid+0x1c8/0x5c0 [ 292.448780][T16286] ? rcu_is_watching+0x15/0xb0 [ 292.448796][T16286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.448813][T16286] ? rcu_is_watching+0x15/0xb0 [ 292.448828][T16286] ? lock_release+0x4b/0x3e0 [ 292.449151][T16286] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 292.449205][T16286] ? __virt_addr_valid+0x1c8/0x5c0 [ 292.449230][T16286] ? __virt_addr_valid+0x4a5/0x5c0 [ 292.449252][T16286] print_report+0xca/0x240 [ 292.449393][T16286] ? __xfrm_state_insert+0x8af/0x1450 [ 292.449434][T16286] kasan_report+0x118/0x150 [ 292.449461][T16286] ? __xfrm_state_insert+0x8af/0x1450 [ 292.449481][T16286] __xfrm_state_insert+0x8af/0x1450 [ 292.449503][T16286] xfrm_state_insert+0x54/0x60 [ 292.449520][T16286] ipcomp6_init_state+0x655/0x900 [ 292.449539][T16286] __xfrm_init_state+0xa73/0x13f0 [ 292.449556][T16286] ? __xfrm_init_state+0x7ef/0x13f0 [ 292.449574][T16286] xfrm_add_sa+0x2f5b/0x4070 [ 292.449707][T16286] ? __pfx_xfrm_add_sa+0x10/0x10 [ 292.449855][T16286] ? apparmor_capable+0x137/0x1b0 [ 292.449875][T16286] ? __nla_parse+0x40/0x60 [ 292.449898][T16286] xfrm_user_rcv_msg+0x7a0/0xab0 [ 292.449918][T16286] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 292.449946][T16286] ? __pfx___mutex_trylock_common+0x10/0x10 [ 292.449963][T16286] ? rcu_is_watching+0x15/0xb0 [ 292.449977][T16286] ? trace_contention_end+0x39/0x120 [ 292.449992][T16286] ? __mutex_lock+0x335/0x1350 [ 292.450014][T16286] netlink_rcv_skb+0x208/0x470 [ 292.450035][T16286] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 292.450051][T16286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.450074][T16286] ? lock_release+0x4b/0x3e0 [ 292.450095][T16286] xfrm_netlink_rcv+0x79/0x90 [ 292.450112][T16286] netlink_unicast+0x82f/0x9e0 [ 292.450133][T16286] ? __pfx_netlink_unicast+0x10/0x10 [ 292.450152][T16286] ? netlink_sendmsg+0x642/0xb30 [ 292.450163][T16286] ? skb_put+0x11b/0x210 [ 292.450177][T16286] netlink_sendmsg+0x805/0xb30 [ 292.450193][T16286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.450206][T16286] ? futex_unqueue+0x22/0x240 [ 292.450220][T16286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 292.450233][T16286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.450248][T16286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.450260][T16286] __sock_sendmsg+0x219/0x270 [ 292.450279][T16286] ____sys_sendmsg+0x505/0x830 [ 292.450296][T16286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.450314][T16286] ? import_iovec+0x74/0xa0 [ 292.450330][T16286] ___sys_sendmsg+0x21f/0x2a0 [ 292.450345][T16286] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.450361][T16286] ? futex_wait+0x285/0x360 [ 292.450389][T16286] ? __fget_files+0x2a/0x420 [ 292.450400][T16286] ? __fget_files+0x3a0/0x420 [ 292.450416][T16286] __x64_sys_sendmsg+0x19b/0x260 [ 292.450468][T16286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.450490][T16286] ? rcu_is_watching+0x15/0xb0 [ 292.450508][T16286] ? rcu_is_watching+0x15/0xb0 [ 292.450523][T16286] do_syscall_64+0xfa/0x3b0 [ 292.450539][T16286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.450558][T16286] ? clear_bhb_loop+0x60/0xb0 [ 292.450574][T16286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.450589][T16286] RIP: 0033:0x7fd2a878ebe9 [ 292.450605][T16286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.450618][T16286] RSP: 002b:00007fd2a65f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.450635][T16286] RAX: ffffffffffffffda RBX: 00007fd2a89b6270 RCX: 00007fd2a878ebe9 [ 292.450648][T16286] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 000000000000000a [ 292.450658][T16286] RBP: 00007fd2a8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 292.450667][T16286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.450676][T16286] R13: 00007fd2a89b6308 R14: 00007fd2a89b6270 R15: 00007ffde54a1758 [ 292.450694][T16286] [ 292.450701][T16286] [ 293.071993][T16286] Allocated by task 13162: [ 293.078164][T16286] kasan_save_track+0x3e/0x80 [ 293.084227][T16286] __kasan_slab_alloc+0x6c/0x80 [ 293.090680][T16286] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 293.099125][T16286] xfrm_state_alloc+0x24/0x2f0 [ 293.107582][T16286] __find_acq_core+0x8a7/0x1c00 [ 293.114580][T16286] xfrm_find_acq+0x78/0xa0 [ 293.122784][T16286] xfrm_alloc_userspi+0x6b3/0xc90 [ 293.132299][T16286] xfrm_user_rcv_msg+0x7a0/0xab0 [ 293.140415][T16286] netlink_rcv_skb+0x208/0x470 [ 293.148694][T16286] xfrm_netlink_rcv+0x79/0x90 [ 293.156731][T16286] netlink_unicast+0x82f/0x9e0 [ 293.163850][T16286] netlink_sendmsg+0x805/0xb30 [ 293.172173][T16286] __sock_sendmsg+0x219/0x270 [ 293.179042][T16286] ____sys_sendmsg+0x505/0x830 [ 293.185038][T16286] ___sys_sendmsg+0x21f/0x2a0 [ 293.192004][T16286] __x64_sys_sendmsg+0x19b/0x260 [ 293.197603][T16286] do_syscall_64+0xfa/0x3b0 [ 293.204055][T16286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.210765][T16286] [ 293.213805][T16286] Freed by task 5857: [ 293.220326][T16286] kasan_save_track+0x3e/0x80 [ 293.225829][T16286] kasan_save_free_info+0x46/0x50 [ 293.233300][T16286] __kasan_slab_free+0x5b/0x80 [ 293.238362][T16286] kmem_cache_free+0x18f/0x400 [ 293.243752][T16286] xfrm_state_gc_task+0x52d/0x6b0 [ 293.249313][T16286] process_scheduled_works+0xae1/0x17b0 [ 293.256275][T16286] worker_thread+0x8a0/0xda0 [ 293.261135][T16286] kthread+0x70e/0x8a0 [ 293.266084][T16286] ret_from_fork+0x3f9/0x770 [ 293.271804][T16286] ret_from_fork_asm+0x1a/0x30 [ 293.279812][T16286] [ 293.282830][T16286] The buggy address belongs to the object at ffff88802e379100 [ 293.282830][T16286] which belongs to the cache xfrm_state of size 928 [ 293.302303][T16286] The buggy address is located 816 bytes inside of [ 293.302303][T16286] freed 928-byte region [ffff88802e379100, ffff88802e3794a0) [ 293.321578][T16286] [ 293.324671][T16286] The buggy address belongs to the physical page: [ 293.332975][T16286] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e379980 pfn:0x2e378 [ 293.347208][T16286] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 293.359200][T16286] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 293.370327][T16286] page_type: f5(slab) [ 293.375213][T16286] raw: 00fff00000000040 ffff88801fafca00 dead000000000122 0000000000000000 [ 293.385637][T16286] raw: ffff88802e379980 00000000800f0006 00000000f5000000 0000000000000000 [ 293.394835][T16286] head: 00fff00000000040 ffff88801fafca00 dead000000000122 0000000000000000 [ 293.403783][T16286] head: ffff88802e379980 00000000800f0006 00000000f5000000 0000000000000000 [ 293.414923][T16286] head: 00fff00000000002 ffffea0000b8de01 00000000ffffffff 00000000ffffffff [ 293.424868][T16286] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 293.435013][T16286] page dumped because: kasan: bad access detected [ 293.442424][T16286] page_owner tracks the page as allocated [ 293.450754][T16286] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9873, tgid 9871 (syz.4.1122), ts 138781232303, free_ts 138604500544 [ 293.476067][T16286] post_alloc_hook+0x240/0x2a0 [ 293.481696][T16286] get_page_from_freelist+0x21e4/0x22c0 [ 293.487985][T16286] __alloc_frozen_pages_noprof+0x181/0x370 [ 293.494301][T16286] alloc_pages_mpol+0x232/0x4a0 [ 293.499854][T16286] allocate_slab+0x8a/0x370 [ 293.504709][T16286] ___slab_alloc+0xbeb/0x1410 [ 293.510268][T16286] kmem_cache_alloc_noprof+0x283/0x3c0 [ 293.517136][T16286] xfrm_state_alloc+0x24/0x2f0 [ 293.522966][T16286] xfrm_add_sa+0x17d1/0x4070 [ 293.528935][T16286] xfrm_user_rcv_msg+0x7a0/0xab0 [ 293.534769][T16286] netlink_rcv_skb+0x208/0x470 [ 293.543595][T16286] xfrm_netlink_rcv+0x79/0x90 [ 293.549252][T16286] netlink_unicast+0x82f/0x9e0 [ 293.556487][T16286] netlink_sendmsg+0x805/0xb30 [ 293.563268][T16286] __sock_sendmsg+0x219/0x270 [ 293.568946][T16286] ____sys_sendmsg+0x505/0x830 [ 293.576146][T16286] page last free pid 9851 tgid 9851 stack trace: [ 293.583906][T16286] __free_frozen_pages+0xbc4/0xd30 [ 293.592301][T16286] free_large_kmalloc+0x13a/0x1f0 [ 293.598940][T16286] device_release+0x9c/0x1c0 [ 293.604535][T16286] kobject_put+0x22b/0x480 [ 293.610353][T16286] netdev_run_todo+0xd2e/0xea0 [ 293.616874][T16286] tun_chr_close+0x13c/0x1c0 [ 293.622254][T16286] __fput+0x44c/0xa70 [ 293.628125][T16286] task_work_run+0x1d4/0x260 [ 293.633715][T16286] do_exit+0x6b5/0x2300 [ 293.638734][T16286] do_group_exit+0x21c/0x2d0 [ 293.644456][T16286] __x64_sys_exit_group+0x3f/0x40 [ 293.650290][T16286] x64_sys_call+0x21f7/0x2200 [ 293.656023][T16286] do_syscall_64+0xfa/0x3b0 [ 293.661084][T16286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.667410][T16286] [ 293.669861][T16286] Memory state around the buggy address: [ 293.675998][T16286] ffff88802e379300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.687286][T16286] ffff88802e379380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.701952][T16286] >ffff88802e379400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.714164][T16286] ^ [ 293.722015][T16286] ffff88802e379480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 293.733763][T16286] ffff88802e379500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 293.745787][T16286] ================================================================== [ 293.756086][T16286] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 293.766368][T16286] CPU: 1 UID: 0 PID: 16286 Comm: syz.1.2990 Not tainted syzkaller #0 PREEMPT(full) [ 293.779779][T16286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.798527][T16286] Call Trace: [ 293.803763][T16286] [ 293.808228][T16286] dump_stack_lvl+0x99/0x250 [ 293.814325][T16286] ? __asan_memcpy+0x40/0x70 [ 293.821207][T16286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.828131][T16286] ? __pfx__printk+0x10/0x10 [ 293.835685][T16286] vpanic+0x281/0x750 [ 293.840658][T16286] ? __pfx_vpanic+0x10/0x10 [ 293.846368][T16286] ? rcu_is_watching+0x15/0xb0 [ 293.852644][T16286] panic+0xb9/0xc0 [ 293.858025][T16286] ? __pfx_panic+0x10/0x10 [ 293.862762][T16286] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 293.868945][T16286] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 293.875304][T16286] ? is_module_address+0x17/0xf0 [ 293.880589][T16286] ? __xfrm_state_insert+0x8af/0x1450 [ 293.886311][T16286] check_panic_on_warn+0x89/0xb0 [ 293.892242][T16286] ? __xfrm_state_insert+0x8af/0x1450 [ 293.898070][T16286] end_report+0x78/0x160 [ 293.902719][T16286] kasan_report+0x129/0x150 [ 293.907510][T16286] ? __xfrm_state_insert+0x8af/0x1450 [ 293.914018][T16286] __xfrm_state_insert+0x8af/0x1450 [ 293.920703][T16286] xfrm_state_insert+0x54/0x60 [ 293.926537][T16286] ipcomp6_init_state+0x655/0x900 [ 293.931952][T16286] __xfrm_init_state+0xa73/0x13f0 [ 293.937251][T16286] ? __xfrm_init_state+0x7ef/0x13f0 [ 293.942893][T16286] xfrm_add_sa+0x2f5b/0x4070 [ 293.947800][T16286] ? __pfx_xfrm_add_sa+0x10/0x10 [ 293.953360][T16286] ? apparmor_capable+0x137/0x1b0 [ 293.958858][T16286] ? __nla_parse+0x40/0x60 [ 293.964016][T16286] xfrm_user_rcv_msg+0x7a0/0xab0 [ 293.969852][T16286] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 293.976066][T16286] ? __pfx___mutex_trylock_common+0x10/0x10 [ 293.982150][T16286] ? rcu_is_watching+0x15/0xb0 [ 293.987915][T16286] ? trace_contention_end+0x39/0x120 [ 293.993641][T16286] ? __mutex_lock+0x335/0x1350 [ 293.998942][T16286] netlink_rcv_skb+0x208/0x470 [ 294.004981][T16286] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 294.011542][T16286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.017292][T16286] ? lock_release+0x4b/0x3e0 [ 294.022095][T16286] xfrm_netlink_rcv+0x79/0x90 [ 294.027202][T16286] netlink_unicast+0x82f/0x9e0 [ 294.032785][T16286] ? __pfx_netlink_unicast+0x10/0x10 [ 294.038805][T16286] ? netlink_sendmsg+0x642/0xb30 [ 294.045162][T16286] ? skb_put+0x11b/0x210 [ 294.049964][T16286] netlink_sendmsg+0x805/0xb30 [ 294.056342][T16286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.063272][T16286] ? futex_unqueue+0x22/0x240 [ 294.068507][T16286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 294.074176][T16286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.079910][T16286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.086084][T16286] __sock_sendmsg+0x219/0x270 [ 294.091762][T16286] ____sys_sendmsg+0x505/0x830 [ 294.097762][T16286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.103332][T16286] ? import_iovec+0x74/0xa0 [ 294.108272][T16286] ___sys_sendmsg+0x21f/0x2a0 [ 294.113878][T16286] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.119343][T16286] ? futex_wait+0x285/0x360 [ 294.124417][T16286] ? __fget_files+0x2a/0x420 [ 294.129216][T16286] ? __fget_files+0x3a0/0x420 [ 294.134955][T16286] __x64_sys_sendmsg+0x19b/0x260 [ 294.140784][T16286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.146961][T16286] ? rcu_is_watching+0x15/0xb0 [ 294.153577][T16286] ? rcu_is_watching+0x15/0xb0 [ 294.158810][T16286] do_syscall_64+0xfa/0x3b0 [ 294.164058][T16286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.171635][T16286] ? clear_bhb_loop+0x60/0xb0 [ 294.177276][T16286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.184225][T16286] RIP: 0033:0x7fd2a878ebe9 [ 294.188994][T16286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.210341][T16286] RSP: 002b:00007fd2a65f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.219198][T16286] RAX: ffffffffffffffda RBX: 00007fd2a89b6270 RCX: 00007fd2a878ebe9 [ 294.227689][T16286] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 000000000000000a [ 294.236463][T16286] RBP: 00007fd2a8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.245170][T16286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.253930][T16286] R13: 00007fd2a89b6308 R14: 00007fd2a89b6270 R15: 00007ffde54a1758 [ 294.262089][T16286] [ 294.265739][T16286] Kernel Offset: disabled [ 294.270389][T16286] Rebooting in 86400 seconds..