last executing test programs: 2.393845183s ago: executing program 3 (id=2131): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x4}, 0x8) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r2], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000000300)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x2c, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x1, 0x200, 0x0, 0x4, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x46) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xc2924e2b4b46f3d6, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) accept4$nfc_llcp(r5, 0x0, &(0x7f0000000100), 0x80000) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.368529396s ago: executing program 0 (id=2132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000280)=0x9, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000000)={@bcast, @default, 0x2, 0x56}) 2.214365202s ago: executing program 0 (id=2134): syz_emit_ethernet(0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="11aaaaaaaaaabbbbbbbbbbbb080045000030000000006300000000000000ac143b31ddd49078010000404500000000000000001100"/62], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd01000040", 0x6}], 0x1, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.082280356s ago: executing program 2 (id=2137): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x80002, 0x3, 0x1, 0x3, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r5, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x4e8, 0xffffffff, 0xf0, 0xf0, 0x1f0, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@private0, @local, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xffffffff], 'batadv0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x87, 0x0, 0x0, 0x60}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg2\x00', {0x8000}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xff, 0xff000000, 0xff000000], [0x0, 0xff, 0xffffff, 0xff000000], 'macvlan0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x2c, 0x1, 0x2, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0xa, 0x4, 0x81, 0x401, 0x100, 0x5934e503f644daf5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x100, 0x9, 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:restorecond_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c040000bd57ebe0eae1eac220a9619f6c158901444b048871b3a483defd4b7c69761ea0045a1e74b4ca9ece2b80000000290998d4ffb258c522a7d425d4d447cf67", @ANYRES16=0x0, @ANYBLOB="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"], 0x41c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000100), 0x12) recvmmsg(r1, &(0x7f0000003d80)=[{{&(0x7f0000000380)=@sco={0x1f, @none}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/196, 0xc4}], 0x2, &(0x7f0000000f00)=""/44, 0x2c}, 0x5}, {{&(0x7f0000000f40)=@ax25={{0x3, @netrom}, [@null, @rose, @remote, @remote, @netrom, @default, @bcast, @bcast]}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000fc0)=""/207, 0xcf}, {&(0x7f00000010c0)=""/112, 0x70}, {&(0x7f0000001140)=""/51, 0x33}], 0x3, &(0x7f00000016c0)=""/128, 0x80}, 0x5}, {{&(0x7f0000001740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002940)=[{&(0x7f00000011c0)=""/32, 0x20}, {&(0x7f0000002840)=""/137, 0x89}, {&(0x7f00000017c0)=""/78, 0x4e}, {&(0x7f0000002900)=""/30, 0x1e}], 0x4, &(0x7f0000002980)=""/112, 0x70}, 0x1000}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002a00)=""/189, 0xbd}, {&(0x7f0000002ac0)=""/98, 0x62}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/240, 0xf0}, {&(0x7f0000003c40)=""/115, 0x73}], 0x5, &(0x7f0000003d40)=""/5, 0x5}, 0x8}], 0x4, 0x40, 0x0) r10 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x40) pread64(r11, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1.675786146s ago: executing program 2 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x109, 0x0, 0x0, {}, [{0x8}, {0x4}, {0x8}, {0x8}, {0x8}, {0x8}]}, 0x54}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x1284, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1264, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "546f61bd6b4822efffe360ea935d7f52548ffb2c8b43b4f507c7c17d9cc3af4929c4d53820f2fc6a912b1fb6f8025b8831cffe5a258b4fb47ffa3b94256bb4c15b157000ae9f85b2ba6a33b582a863b1ef3f017022905214a4a985f28e11a3532a44c908aa3767071e332fad239268e4bc36b81595a65d9783f0780f9bb3a7ba1dec4ae2404f0ed25ac850e9604cdd086c2dd419d696c52adb0612b01894f16a91743459a87b9c9a2e0591fd56a8c876097913c8c21c12455ae59654beebccd7846c164461ce142ae7b696cf58523dc05d57cc92aa360dca6401440819665052ae3739525c0af89dab566db72f2308119979818d270d82020697d2fe5749dc83102cb58190a38ba7af223bbcef2c91a0a83999bf27db1776b71c53714a594396b939136494ea9d4a86bde230cbfa827f2c140e8a8a970998c1ca2802ecbebc983fbbfceaf17b9cc7c75105071badd1c57d503a9d2332ceebe1c2cb683c93279c9b965bdbab105b08f86ed0607c4274b3479ca415fe03f2df421c00c65c10f6a9108577c5ddace4355e77516184bcf1ad5c235aec8b55f51036c1bb8fced5fbde709db21adef9fea8280a3ce9f19502f068a24abebdd773a613cab0ee5bf13d21e501ff8f86357485d4903e169895a0bcdc08a1710e0e8fb345228791409ac19c515c9b4697c4c06cc820ef2dcf468353e14f4b39aab39d50712e56f87952c34fcd89577b7d2df717549df1c9dcb1c72864a82bd204a2c562c3db863221d60295961c811854fa6981666ef787c4e74aaa6ad38e97a4230d25f08b1691d8933961ee2cb5f52671bae4dd035d64e8f377ba7da3973ff50039d90e678fd77037512635de0da6e54622cdcf41ad5ec5bce67c2c96c3e61f600562d0b9ec6c242c8c9d781dd5c507fb6d830b61d2f9c8b89827790ee09d502c6164309a0b77cd387d4dc3cc23088b1108af7a69763d373287ea1e710ed5aa300da252adfccbfb95e82c3432abf4f525de92d94278d481c3d5fa589d179435e3ccf8764d9fd9ca404fbda826ebe1c11de0ea7c960ce8dd1da22dca267571dd5def9c73dbd007c1c1b115c815a9f4b5474dcb56022caca142c9cdc8e1511a98907351fcebf2b0b5a8894c947aec8ca119ccad195aaade855e975fec62ae2c4e61c5cd82aa7610ee1539f9e1a325eba29cc1b87c5d4245b4e1a4d2db6fbadd02a973c07caf02b5adc57687e7322527e380a8e9fb49247f0301d7fa5fce9e3481fdbdd9ea22b3f7b70852a0b63ffa57d1bcaa8b20b2eab767a7acb8b286a75f5c11932f4e3364beb78550d7e375f9d119edf428b535a127249ffefa9dfd69473a5afde97145d1b3d15fcf2280794dbae505390611220e790e6f4930c9d847a9f7e80420aed908d5e4776de57fd062f4411a192b6fc8af2396bcedace002127637b62d17ab3725dbbed9fc13cb7d40536adb0617a6b0c4c29dc4b119b812d467cb29ed619606f1879edf64aecfc771d74f0d1648e13a018b455564655535ecfb9b30cc11cfa0ebeb7846fbe8bc87a946f10ece8eee72d7465772681a492dddd09e3fed32e7d256bc977830715b32eb380bf9c1c85e6e79de6775edda2f12042ac9a9e26cc4817c465606976d17e1e6f22fea7e2347e1aa78de02b2bd7345d79e7bdee29b173643c24aa0089ae5687cced016f67133ac984cb12e3fcd7b7ab5eed152c70290440d115e76c633d9aba34f8e5c27cc2b1fa4976fb7dbfbb9445f6c1aea6809bffd8e32a69a0dc14d9e9e4fa5656c0f8280d3d18d7c9fe6f45f6db320a27e49c67b3f7c5c1309b079040b9e873f66a88022755c0d45c31a84d952eb84787d58c5a37bc05785f0e54c6306ca8ca9bbc6a30fda724b73d9bc4ce75ca7bb1c058c958014cbcb95130d8c4017ae187c1a48a7dc89c9081b74c60e31f986a4e0aa4169bf7a990708883030f2229317ec0b4335147ff7fe6146f853ad4c83c87e4bbdb3511f2e86f1c182551c9fa6439656fbc66f5f02a5ed6583d0c60e3454f4b801cdbef2998d18fc94619930793b3c965ef8597bf8a4ee72e30aa0457e7744d772213561451228b62600a0a2986e7a3cc24cb5c310133670260278e0254d4c3612eede165ca0c257923bb49b3029c57688bca9b4f6da5253bf47f5fefa603995ba43e63f8b56de54825bed3087a115cb347e67a2631c5a0ea7aee34c46f88529d8ee52d546bcdd674494d29337f1be7e8f7bd41d8a30a0b6babe930dfeb291ca69a0ace4bfe9b859598daedb9dc1d448755444a3aa87b841f3109eb74e644693c680cdb747a2042e3f434f856461abf851f12d81175db92241420459eebc054da14a269b1dd6620f16c0c4859c90dec62cf8b4dc6484ea5616b742183bd610a7269cb25ad749a0d5220b790cff432282a673a5054a0cf53245c23f69cfb9296f7e304f161370d460ce16f5d85178380c35e19b13c8bb0002e63805cb6b4251e60043c9fc1a17aaa48807e86a0f10cb6f7ef39956f55f537fcad71352170f0b608dbfff6cff96e2ec3827c3c3cf1156aac866db33f1b996acd0fd10db02da68175c798c7901dae28ee7535232dba3205155f792e944fd98d92188f43fae2259c83e8c0a07c3253d6104595ce2b2641ea04cea737e713c899e4db8fa62fc40401d0ef093c100be9169bbf81b3d3f8ecbee14e8f529c58c661fb319953b0adcdf04bdf56ceed89d4e9f6ea449cee69877cbf1b12599e791b01f5cfd1c6b40b8966a5bac0d80a8fa97f7e257cff030b7f0594f02257c63f2bd67e45305ffb1dfee63eb66ed3f0d5295256237e5d281bbc46da492b0461474b7cdb47b6379a0cfc3f6bf8700c999b97c825802d8ab0f01994dad70a3cba1077d2e744e161dbf03c9cd3d3de633e30d5be8e163078d8e53a56959e73bf710ee08c6f6d86d423b13e8c9ccfdc821461970bcac719fa94a7d162a63113d9d8d374b08905f33777f27d93240340eef8906552a15d52424687499e284e84100e11578fda9f9575743ecf9d9e4332afed550900cfa3ae98203110b749c7693f7dd5acc39179e456135c4b8a4dd66be3be6a3f4aab385adcd2cc85b6f7f9212f71e7953085d01b247807762e06c9e95e4839fea09ad0bd8ba2d15010bbea050b808603c8b07810f1e55774bb6da1cba6c1e6721fdaa34d969615cd7405519e7059cc675d6686791d38f860866b7cb2ecd1d7784cd8e7800ff0a7e96f0ee7464654e8410933a9a1a138220a9bfe960ca7b1442dd9f3aed5b1561e1866f41e3423040d940a0ab20cdd646b7c2239aa8fd4e68e54ed7dcecb0bebb731f1eaa671090dc461c56f5b13c0beb9b63176e2c0d57b437dbd31079ca42884b965826d98a034edc86200128283b3473d527a184544196c402b1256dbc26689996c140bf661bb86bfc60090a16ec5c6b2867ed29ef94d2c0e9b38c69d1200455150d9b705002397e7c1533a8c55cf086909afc8a99d51c5cdb5761b9e464ac9f18afcbe01c06200c3e37c2a86dd5fa6d330ffc526150769ac9f78423be4fac2066609fcf467ff98587d417406fe34641619535c207c0a2eb65e37bb135786b0652fa17dc64155ecd97e0cbabe441b8a0e9f29cfcf50c60e57cf3eb0a8a4bcb7279f9c20fdc2e6ed2a9c2f33fed0cf5504572d52f225083d5ffa3d890f34f920b2467b64aef12c320b303534065518e7e6adfa6ab31aa4a59c97459cd5d4b0d84e9118712f8af5e31665021269689465119d4960c0d6e11a9c5678409b5b68fd9dd2e0edd7c652f9f8af98a93b0f73a516263bf08e0ac352927a8d1a9b3606972968c792ac67dcc1dc97913bfe05147de885541aa5fda098fa891ea58cd2dd08a6915823d8a7aeb95598451b9102750a579fce2f5dff157b1183871ab2a71e605e1d0858f4a3fab42d3e196c984f41364c543c75d0b2c23ee303b5ac40e9caca2b1e02747b92539f5f4c2e52df9b6f0cee7be98adc0e8b449d644eba4651156b9aba892edb4fe6c9c718475fb28dfc3162954157c7cfb958fd053f7cca84f69cd909a8bbd34bf16f8ac670a6a6482d59b72dc32e4180d8a48ed417b533f6fd0246f59540a107f2e5bed040f74e0df6bb644d371528d0df13bd0a03e7c3cf86bcdc05bb7d93d4d48514a708851e0fc6e52fd78d70c2be44b7e7667e53b526b6b5a700dcacf99bcf3527f1c5a0eb49ffccd8905b887817ab4a8f0d9f2de02699cde36ae2fccaeaeb790afaaba129301a1a5b10b99d77f213fed467ff20de079c1e767b9bc4910985d53112242889886dc0f6dcff975241c0094f6604a67e9884a297260b4176045ab9f0463e31f21fe223c3cad6ac11dd582154d567cca92a556087db29eb4b4e1f5f28099ec59795f7f89c8a8faf43d2a983694f5a7334ad4002977c9245cfc76801d64e79366b0ef91ca63c55d937dd6aa7cdc27183fe2d08927958ab897fa77db2129b9ec6094f80fb9160b554a167065ab4ed80e99c0ab52e5af07e24e80fbdf9afec3df2c893248b13f968ad929c02347f422007ca1720893b9b4c2c71eef05fe81c9a74b8ce0ead63a16b8fc79e316bdc7d8e9b859c124e5de1117b137e0ac1bf81200896749bab6b3cdbb3d3bbf577cf833b370c923da7ed4c0e8153daec0c9e7d012a2051acb244b26c29df546c184fce3ccf6e801f8739be7f9bff2f139c90d09202bb83166d27fb40b13f16ad45431eebcb04df1898b52beebf53c096adb9a9e0f8df2e24bcf055fa77da60b920d2bf24416ca5f6460594e384434e96d6c172abe2c285e39c56d3e262f891f64b158beaca1035c9142ab8a0d16b9b7cc9f3fc15412f6d39e70e62d377980aec0b266155d5172ebb1bb61a9f80949830dd630c3d3367983c27c3ac5835f49168bafedf590887cf2ffd84ccb54be9940b9cfaefe8d64ff760d7a6fec98dbd4a838f340fd1de7ba5c05592f8e21c97ca83e03c2d64dca97c57869b85063a4be281c7cbb368e3d82d3167b116aa6f88a8411a2ec8185936c3875d8f6accc13fa882d3731cd0c640e71743b3216f65b59e99841a156f28196e5cf8278546f7b3aa7992aa300e7229455109d81af81b9c1a8fa84feeb014fb1ee973a96eb956a167bf7b15b8cacf007b3cab389c2a8b816035ea4306d7adc9da76ed23053c35c61347d63cd6291a8b47288ac262156877535bf68143cdecda02599cdef164c2aec3bcc19f5bc8ce6b74ddc1b2285e2eb5a75a1404b536ed6b0f1757a645c9e3634e2baa2ccd7f71e0b79ac39455e2280d5ca33ef97815c40770dbd639ea95fd19544bc95f6c73e7034889ea30528849252afca61ac2d5db2dfca161c6585d9383ae1548ddbd06f0d75eaab28709b9ee4a09ec21a409b62186fca8555119b44cfb9adcb05c4ecfd260675cb2e8cb973ea030087ae01d8189845f847ae52ea12703f70a65f1a8b0f4b43bacbad938f05a65ce6c2913ca3894f6b4e0bc36a3decbd781924f2b7b15bcb728c6c6cfa7e01d319d644de826e2fb20ad2d715d94b5f9efed7885a88fc6463de951a0aba2a12b54d9afe8b6ded8d4ada1b450760313447f14989f057d0ec2bbe29b0eb8bdb0b8833571766b804497ec9031ce27bc90389f7ec83cc33906a38361552cfc99ca1d21fa14ed1cc8b031f7c453f19786c8eaba03a7b8cae43235f9d085069edabc0188961e3fb574ad93543d3f885d03da1044112623077097ed09d918678c55e8e22bb48b88451af07e9903866e5eef4fbe7fa2b4eb00fd123de0b6fa3d121665ade0f727d7a045251fc9d13f03b1b259448933cf3c7ab1ebf"}, @NL80211_BAND_60GHZ={0x41, 0x2, "74b48e197e7369356755a611bb2483fef734c4ce78637ec8cbe10b2382c91d2e1135764189bb11733d45c803e8656318c792fc5b460e75ab8ed23d237f"}, @NL80211_BAND_2GHZ={0xbd, 0x0, "8897182ab17a7dfa49ae17925e29a64c5ce7c5a18b5510229feab8c6b7e1eaf6f0ebce87dc59209e19566447d7214521032b0873f364f5513194b6a6a42482198d5590b33aae6d07e0a5e882228cf802079d041c335e33b89204f1653bcef303e060a390c88c10c48436d5407f3ad5ac54567bd8b7e43191821fee1a0ab329fc79e353ad84e5e02fc1130cead46394c30475ea845b48cd13623d71ab431075d0b22e1be5326c129aecc8d2417b8038f022cc08734243c28685"}, @NL80211_BAND_2GHZ={0xbc, 0x0, "e7f85d9d9ff409d19e9e0b66b7fc17acee706d0b4f39a574cb91bde4941f9cdbd4629193a3192be350d6a8d8dbb973e0ef240d8f80fe71644b3ecf17f21d8bb296fce3f40f4ec32718366b2e61f43e40e6292ff732b5c0c6c1b5145caa2263d002321f78014515a47c70aaae2303a39f630f15dd85383824932b86c25fc5d9f45ef848098ae12216ff2309aa90f203c381f116af18b09e114b9cfaafa2ac3442469d05287209c1a80ed3d70c52977015e44d6950fb61b5b8"}, @NL80211_BAND_60GHZ={0x1f, 0x2, "8bc209036cbc33dd0162fa949f016ae40d3d20e8fcb0873dee1e17"}, @NL80211_BAND_5GHZ={0x7a, 0x1, "36b4645347b6105f684a58a257e918d1bc150b2dbbc92955cbafa33c32c0ec3b99c15105c760be1c7805597dc1873306a3f9f95a8e14a973d96f3025842c168b39673728f15cfe418e0403f7a2d2881a84d600b041a3753d0aefc0797af9411351f062a28894d24f6d025f2e0b3217b1d445d2efaaa0"}]}]}, 0x1284}, 0x1, 0x0, 0x0, 0xc000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd78dd5a7e4be198fe1d03112100fe", @ANYRES32=r3, @ANYBLOB="08000500060000000800178004000500"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.619246037s ago: executing program 4 (id=2142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 1.402326642s ago: executing program 2 (id=2144): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000200)={0xfff, 0x10, 0x3, 0xe}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) (async) sendto$packet(r8, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x81, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendto$unix(r3, &(0x7f0000000000)="3858783a9c4e57ecfc2c5a08fa5b5a99190e5d36294203258e2d0e4bf489d98ea3bc03d19f933d6076f888ac74ed4205522ad0069456f47248f3db2a8211acbd3ebf940389597a24d92792b1bc29201dea854c62bd637288ed5f94fd62124396a393c2a1e3afd5804e1b44e9f723800d42712444a258f7a876421b056377c9cca454a235e976ba", 0x87, 0x40, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1.401511131s ago: executing program 4 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x60, 'syz0\x00', "52e140292bc4ac011cf5760b0ac479d265bbbb60494da73e69c8fa63169f6e83", "1b3bc6e5422991791f49e4dd04d6e6cdd7a25ddbfb6786a7fb5e5a79c1005143"}}}]}, 0x268}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1.287573187s ago: executing program 3 (id=2147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0xc0, 0x3, 0x7, 0x83, @empty, @local, 0x8, 0x10, 0x7, 0x9}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x5761, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x1, 0x7, 0x0, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x44, 0x0, 0x0, 0x41100, 0x22, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xb, 0x1, 0x400}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=[{0x0, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xc}, {0x2, 0x2, 0x3, 0x8}, {0x0, 0x4, 0xb, 0xa}, {0x5, 0x4, 0x6, 0xa}, {0x4, 0x1, 0x3, 0xd}, {0x0, 0x2, 0x2, 0x4}]}, 0x94) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000206050000ad580000000000000000000900020073797a31000000000c000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800060000000000"], 0x54}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0xa, 0x1, 0x0) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) listen(r5, 0x7) 1.202517679s ago: executing program 2 (id=2148): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x1344, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x61}, @ETHTOOL_A_LINKMODES_OURS={0x12fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "3c621d9c9728312592c42910d7a3239f6575f9855ea982d990207dcbb5efad4a8f75cf3de04e7d907d8c35f7f2bb283089ced75b586eff4f442c37c302644c79cbd50b09e9bf04a6c8ddb468872b25cef299a48ce1f687559b751f19becd4aad34e0dfd569cad49e61bb724a9b93a114bfe40922b5a55a7d61c7cf0e973511f5403e04530e39c260f4e2e26bc00921d997b42f181ef1de88f5691920df9f31f0f1ed3630d527"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "4bedc5c10a5a8f8b55ee5520b4670cd3e60a619ad93a4a9ce72b2a484a2bc4dae1f867456442078e88820af5b6489689305d3c0e6463741c7c8b8ea5cad314aaf07746fa69fee538b0c9dc49fc02b1bc0d412a8849428cdf9de70ed8e39aaa12f0bb6b"}, @ETHTOOL_A_BITSET_VALUE={0xe0, 0x4, "1ed971c9e1f40bb36377d6f2fca143d88ddf02ddad7ac4bb3e339027ed7cc6549284f0908470d2549f121108f9cadb79c02c43628343f77211f7a03ac9f3b2a983b132a6a1db33adfc12f449641b0b852e17b7e0715a1069f427409bf4aeeab9c67101a9015444ce2bba2095bb9b14d46fd23f418e853f241187dc1e09e36af95e3c9443a8777cf9e0791611d7a27fc65c46c7bda265d3eba35b2fa5b50160ee6cd589b692e6569d69b6a700e952939539c761691e04865e3b87bdbc0d5714ba033cc9618c702428291905e79da8418a1f099288fef51be6cdecce95"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "3320700c52f022690087c2a7604a3e9ec5e6a925fee1bf14c66827b2285df7f05c64a729de3db58b07908c70f10c099c44e8140aad45aafcb7e15d8c265543e32ee7f0e8e9c82c19afeb25a299b1d207014cd0cf7130c45f58c584ae2f01b6ff790b7bb6ca372e121116104f2bb208809b842789ed8385cfdd538af92cb0621d990d38f14b171df3e094dc195b747c8746007331100248b2a65b88012d6038e2395e2dfa1e67ae28fe0f9ba72f432ce2922c69b7b120dfacbf1faabeac97b4c2cbb1a4a6a2aa06ee7999d1b8cb7e4a5139315764b46ee8b55fee3533f0219f392d5df0854c8424bb0813bdd95a"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}]}, 0x1344}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.201952398s ago: executing program 0 (id=2149): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0x26}, 0x10) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[], 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r6, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x60}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'wlan0\x00', 0x1}) 1.178335791s ago: executing program 4 (id=2150): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x1}, @var={0x4, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x7c]}}, &(0x7f0000000540)=""/147, 0x37, 0x93, 0x1, 0x6}, 0x28) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x10, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit], &(0x7f0000000080)='GPL\x00', 0x8, 0xe2, &(0x7f00000003c0)=""/226, 0x41000, 0x1, '\x00', r1, @fallback=0x3, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x8, 0x3, 0xd}, 0x10, r5, 0xffffffffffffffff, 0xa, &(0x7f0000000900)=[0xffffffffffffffff], &(0x7f0000000940)=[{0x2, 0x1, 0x1, 0xc}, {0x5, 0x4, 0x9, 0xb}, {0x1, 0x4, 0x5, 0xb}, {0x5, 0x5, 0x7, 0xb}, {0x5, 0x2, 0x2, 0xe}, {0x0, 0x4, 0x6}, {0x2, 0x2, 0x10, 0x7}, {0x4, 0x2, 0x2, 0x1}, {0x4, 0x1, 0xf, 0x4}, {0x4, 0x4, 0x1, 0x4}], 0x10, 0x1}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0xffe0}, {0xffff, 0xe}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x18b4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1888, 0x2, [@TCA_FW_ACT={0xe0, 0x4, [@m_ctinfo={0x98, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5d1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0xa612, 0x8, 0xffffffffffffffff, 0x9, 0x6}}]}, {0x21, 0x6, "b938d4609da8cf1bb81d51c9d6256d78b60dc3ad8377e761d00ae86210"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x44, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x80000000}]}, {0x10, 0x6, "ef757cb2c870e20721127c6c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_POLICE={0x450, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0xffff, 0x1, 0x8001, {0xb, 0x1, 0x6, 0x3ff, 0x100, 0x5}, {0xc, 0x2, 0x0, 0x9, 0x9, 0xf6d}, 0x2, 0x7fffffff, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xf, 0xfffffffa, 0x2, 0x3ff, 0x4, 0x84, 0x1, 0x2, 0x8, 0x8, 0x5, 0x800, 0x9, 0x4, 0xff, 0x5, 0xa8d, 0x9a, 0xf, 0x8001, 0x1ff, 0x8, 0x7, 0x1, 0x9a, 0x6961, 0x1, 0x2, 0x1, 0xfff, 0xd6d, 0x5, 0xe56, 0x3, 0xfffffff6, 0x6, 0x9, 0x0, 0x5, 0x40, 0x2, 0x83c, 0x7c8, 0x4, 0x1, 0x4, 0x55d2, 0x108, 0x3, 0x4, 0x2, 0x40, 0xfffffffd, 0x40, 0x200, 0x1000, 0x3, 0x8, 0x4, 0xc07f173, 0x7, 0x7, 0x7ff, 0xe70, 0x6, 0x3, 0x5, 0x8, 0x6, 0x80000000, 0x4, 0x3ff, 0x1000, 0x3, 0x9, 0xaa81, 0x2, 0x0, 0x22, 0x1, 0x4, 0x1, 0x3, 0x10000, 0x6, 0xffffff9d, 0x2, 0x7, 0x9, 0x400, 0x7, 0x8, 0x80, 0x8, 0x6, 0x1, 0x8001, 0xfff, 0x1c0000, 0x101, 0x6, 0x8000, 0x0, 0x4, 0x10001, 0x0, 0x9f8, 0xae07, 0x8, 0x400, 0x6, 0x3, 0x0, 0x9, 0x5, 0x3ff, 0x3, 0x1, 0x8, 0x3, 0x1000, 0xd9d, 0x92c, 0x7, 0x3831, 0x8, 0x54bc, 0x9, 0x3, 0x159, 0x200, 0xf5, 0x7, 0x2, 0xba, 0xffff8000, 0x8, 0x5, 0x9, 0xe9a, 0xfffffffd, 0x11fffd57, 0x5, 0x5, 0x3, 0x0, 0x7, 0x0, 0xd0cf, 0xf773, 0x1000, 0x3, 0x3, 0x1000, 0x6, 0x7fff, 0x754832df, 0xfffffffc, 0x4, 0x24a, 0x6, 0x3, 0x5, 0x3, 0xa6, 0x2, 0x3, 0x2, 0x5, 0x9, 0xffff, 0xf, 0x8, 0x5, 0x401, 0x1, 0x6, 0x0, 0x1, 0xd6e3, 0x0, 0x9, 0x200, 0xf, 0x1, 0xc4dc, 0x9, 0xbebe, 0x4, 0x4, 0x80000001, 0x6, 0x5, 0x9, 0xa0000, 0x3, 0x9, 0x3, 0x5, 0x1, 0x1, 0x1, 0x92, 0x3, 0x6, 0x6, 0x8000000, 0x3ff, 0x3, 0x8d7d, 0x101, 0x8000000, 0x5, 0x2, 0x7, 0x2, 0x3, 0x7f, 0x5, 0xf, 0x1, 0x6, 0x6, 0x101, 0x7, 0x714f6450, 0x8, 0x7, 0x2, 0xff, 0x10001, 0xfffffbff, 0x5, 0x7f, 0x713, 0x0, 0x9, 0x172, 0x5, 0x6, 0x7f, 0x3, 0x3ad, 0x9, 0xee, 0x7, 0x9, 0xaa2, 0x6, 0x1, 0xfff, 0x100, 0x8, 0x4, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_ACT={0x1338, 0x4, [@m_vlan={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x70d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x14, 0x6, "25fef0acad029908d2f8d9cd045b76c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x8cd89b30101d7b6c}}}}, @m_tunnel_key={0x120, 0x2, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xd3, 0x6, "e58fbc9e85a2074c13dafbef0a21ae614c48592703806cd0872e0e71991b5504ea90f85a80cd425ffdfccae51554bdb83ca4b0f43bcab6d2fcd14a37c7f438c0f2fccd814fa473ea78addd61315145f3b26796e5260cb03d8883295ff1ccd44f87fecf784a0f1f04b0e9275fec2b3431ac58fcc8504751eb7923e7bd6187a6764ffb1ba32ab46ab9e6e6f4c092411b03f0c5263c26bc64b607723494009ffc3d4bcbbe5962df67ded09e38625ebad5e242c17868030f69bfd3318a398af13f27557c93267eebb7f71cb928ad1fc49b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x1038, 0x13, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x164, 0xd, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff493, 0x3f6a12e4, 0x0, 0x4}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0xb, 0x7, 0x7, 0x4ead, 0x3}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x80000000, 0xffffffffffffffff, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8e8c}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x9d, 0x2, 0x800, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}]}, {0xa7, 0x6, "5384bde5464c469b72d6681e15c13330eaab1d3fc5d681e24534dd11c55f1b78693e413085b4d072b47402bde414207c61d2ce2fc24c25c1cb5c42f75f68e433f258c87df72f8bb7e1db3aeeef78bb163a86ef73cb6020581ca9a2a79c8be21fb05f190d8c3cd62c60351844c1fa9732c3d7c227df5fee51cf9b79ec97a40d45568bb896c09e9396ea0bc07ee733c3c17b67940f364e234a1209a34e2f8df4b50841d1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x18b4}}, 0x24004000) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) sendto$netrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000b00)={'rose0\x00', &(0x7f0000000ac0)=@ethtool_modinfo={0x42, 0x800, 0xfffff4b6}}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.0822022s ago: executing program 1 (id=2151): syz_emit_ethernet(0x68, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x3}}, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x98ee}, {0xe0}], @generic="d4ef4f1ec821ea258c959461f0c18d2a0fec5751593716ace1e7843eac4ef75220cb1d6b91e49eb7701ff0feb949ffbf98994098919ac60fa97ffe06ecec6f0671d58fe2ea2b0f21ef46"}}}}, &(0x7f0000000080)={0x0, 0x4, [0x993, 0x7f2, 0x5ca, 0x517]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) r2 = getuid() r3 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000006c0), 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a40)={0x0}, &(0x7f0000001a80)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001b00)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001b40)=0x0) r10 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001cc0)={{{@in6=@private2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000001dc0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0, 0x0}, &(0x7f0000001e40)=0xc) r14 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r15 = accept$ax25(0xffffffffffffffff, &(0x7f0000001e80)={{0x3, @netrom}, [@rose, @remote, @default, @bcast, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000001f00)=0x48) r16 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c40)=[{&(0x7f0000000240)={0x24, 0x1a, 0x100, 0x70bd27, 0x25dfdbfe, "", [@typed={0x4, 0xd6}, @typed={0x8, 0x43, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@empty}]}, 0x24}, {&(0x7f00000003c0)={0x2ec, 0x29, 0x1, 0x70bd28, 0x25dfdbff, "", [@typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@local}, @generic="268882e2cfa4a8e4110932b54a36632ccff3a5a765a88fe32d60f3afc95a6dc54fdcd399ed721eb910dcd604414736552c3220bfa9b6a03e86c3c53cd76a40ab4aad04207398c58b28f6e3f4411c925a3b0f848b330cd9fe3a7bef1219209c1ca7735edca2f5ebc1fcfd5d60ec14907123bb9533f8eb7a2a33bfb9f6b0d989a42c84f3ff6b9f9f340706423e51099dd9beb0156be2affe7f699aa20f377c0746a93d257665", @typed={0x8, 0x7b, 0x0, 0x0, @uid=r2}, @nested={0x109, 0x64, 0x0, 0x1, [@generic="475ecf5ea477e6635ed485129d0706bb7966f122e2958cb2b27f41ee498513c4c00db810717b0632f748a879796397c37eea8a5a9c59362414835e798b98e9b5db4023a5fae57ec24f00e08813499fa0100024bfed1f06c0c3dfe359ec6e07d745bdda837d8eed300eb91c2173f32ec95bdd1978ffc4f03557c5941c3080ff145bc69a0a45ad8b5b407e237f8a7f39fd23e995", @generic="be8a44e503aabc692766d5e46a2385e022ff2dbf6717ee", @nested={0x4, 0x7f}, @typed={0x8, 0x50, 0x0, 0x0, @pid=r3}, @generic="0213d6ea96afc0244d4250fbe40de391b75b33dea5", @nested={0x4, 0x6b}, @generic="1ffc39c74768f4ba1b743eab5c22950f23abecc8dd0baa7a1c3211db0c8e263f75dc0cb3f6f9ab6a4102", @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x21}]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r5}, @generic="de39c79e3291f955f6d983338746c235ecf296ca269c7626a7e5936666b4311dc0fd12276e3a3aade2abf8f4bef3c8ad4d222aac97b4e8ec6b7500216dc9a513011cccc7917a95f44a74d57a492f79af0fcfcb7e744e50e5d3d1c9882c2d67cb100c7e3c8b40a57e071f2fa3508b40822a7ca5e565d1384d9aef96292348933d1a22876eaf22d7b70842846d8d3e48f216438e40b7a41f64d207ecb521f45b5f5f16cd15e8fac444c555a63004afce17b8c9080e2517fb9dc4a02bf6bbb608", @nested={0x4, 0xf1}, @nested={0x38, 0xf3, 0x0, 0x1, [@nested={0x4, 0x140}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xc7}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x800}]}, @typed={0x9, 0x102, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, 0x2ec}, {&(0x7f0000000700)={0x1334, 0x12, 0x200, 0x70bd2a, 0x25dfdbff, "", [@nested={0x1a3, 0x37, 0x0, 0x1, [@typed={0x8, 0x13e, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r6}, @generic="9a3a96414c2788174aa77058eb28f9633d84426300c754cd0f31cef1298454a98a2be032216fdc4554b98b13e78e9bc0afebae5b8482c93f4bcc0aa5581042c33c66083f8ce59f5882edde0fac749d88dd708c499df7ea417304bf091ef3762fc84880f80415d25e6d439a738e344dd8c7736995820d5b778db8fb3c894e1e382bf7cde7a2c890215eb0b4bb6e4eaee69d79895f192916a0c4aa4caee2fced537fa489669d82f64632cfbbf16298101e9e7361c595b00364f1cab56417febbf9e89001a0e20325634740f17f7ab14f8280d490743841dbfe966a8a731d1fb24378178423aa48f19bdbbde192a69458d2ef", @generic="ac53a3b7882e5962c132dbf4d797ea39a9fcdc834ec1cae907059d97868f840a16c770b791f9b73f246a9c47b42357132d89f38234db41db6f650f944f09320061c4", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x64}, @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @typed={0x4, 0x75}, @generic="0ac178c9127f1f3b21e79eca60f32833b7a3ed68ec4812284ab312433b7d1381fb71a7b01b25a3a942eb4a7dcddfbe8d2afa5093164b963a"]}, @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x2}, @generic="f1c8ae9c5e72ececba491f337264a906dc3acdfe64acc96d6437736cfb4a5cf5702352e629d0b3a39f207a43176367600bdd7103c1ec42399181c410846d8e3f46a5ae8aa55d959475dc06f78d1c312244925ece9ba55612810bcccb6b8d24f239399e1332", @generic="6faec6071b9b9ae5bd91e525844074c66e6a4bf8bba0ecbda5600cac5754da9fc3253849b95a9f3135bb714c11bd8611cdef49974f69c5eaa5445b8b2028106ac38d5a2bdd659cd43e2e447c7b6e3bb998e2f1175e094f82c1bc8d8bb714de8ac49332296207c6fb68bf9c4345ead92622d5bf519b20ac0a5d1ef35ce8231fe4adc836617a451560b6913fcdae0059e50ac9799f4a4aeb484f5b4a6aa8bfe53629677695d55eafe94d94913ebdbc22a1a72998cd190fde3366f563e49f2856151b463460bf7aeee55b", @generic="2d5b9f6e9501b88b62b5d7c826a08e7568b3b7f89ea88080096dfe90df29a9d4eded9d8613ef8d567a0ef1c1977dd439cd3210e0869f2b7f0ee3a5a816e48290ae0e51845c16421e", @generic="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"]}, 0x1334}, {&(0x7f0000001ac0)={0x18, 0x25, 0x0, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0xe7, 0x0, 0x0, @pid=r7}]}, 0x18}, {&(0x7f0000001b80)={0x98, 0x21, 0x4, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x37, 0x0, 0x0, @pid=r8}, @nested={0x7e, 0x121, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @uid=r9}, @generic="991762a2aa7766312904c825ff85ebdf3a9fcdfe64ca459c2fc679d4bbbc07ed3d0fc209f46d0adba2b4d075897e415a494fed6b37aef55238e112d136ca239ad9e2e74d4a4b7e441b4d616bf4afff2002a6678a0530222ff57685c9b5b6c0e462eb794fb5eb2f6708b3a6a15c74530bf9bc"]}]}, 0x98}], 0x5, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [r14, 0xffffffffffffffff, r15, r16, 0xffffffffffffffff]}}], 0x48, 0x4000000}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000002040)="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") pipe(&(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000022c0)=@o_path={&(0x7f0000002280)='./file0\x00', 0x0, 0x4010, r16}, 0x18) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002340)=@generic={&(0x7f0000002300)='./file0\x00', 0x0, 0x4}, 0x18) r20 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1bd61e0d, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r21 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', r11, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x11, 0x2, &(0x7f0000002140)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000002180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x3, '\x00', r0, 0x0, r17, 0x8, &(0x7f0000002200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002240)={0x3, 0x5, 0xc4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002480)=[r18, r14, r19, r20, r21, 0xffffffffffffffff, 0x1], &(0x7f00000024c0)=[{0x1, 0x3, 0xf, 0x9}, {0x0, 0x2, 0xa, 0x4}], 0x10, 0x23f8}, 0x94) r22 = bpf$ITER_CREATE(0x21, &(0x7f00000025c0)={r6}, 0x8) write$cgroup_subtree(r22, &(0x7f0000002600)={[{0x2b, 'cpu'}]}, 0x5) getsockopt$inet_mtu(r22, 0x0, 0xa, &(0x7f0000002640), &(0x7f0000002680)=0x4) r23 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002700), r22) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r22, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x4c, r23, 0xd07, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4040850) ioctl$TUNSETIFF(r17, 0x400454ca, &(0x7f0000002840)={'batadv_slave_0\x00', 0x1800}) 1.014497113s ago: executing program 3 (id=2152): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000400)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0x8, 0x28, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x1, 0x1, 0x57}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r1, 0x25, 0xe, @val=@tracing={r2, 0xc}}, 0x20) 943.132249ms ago: executing program 1 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) 888.982918ms ago: executing program 2 (id=2154): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) write$tun(r4, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x10000}}}}}}}}, 0x52) (async) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 778.350016ms ago: executing program 3 (id=2155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r5, 0xcc071acbf25dbf8f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x390, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x37, 0x3, "975f629b92a9d5a7489a76a5a22d8996a53fd62d664a9e2dbb22de33b8efd47540517c867e6263758f8e7656e00abd5f71c937"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b78}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f96}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x486c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc8}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x47}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfffffff9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xd6f1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x682a}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @mcast2, 0xffffffff}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r7, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 733.326825ms ago: executing program 1 (id=2156): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x90, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{}, [@bcast, @null, @null, @default, @netrom, @netrom, @netrom, @netrom]}, &(0x7f0000000340)=0x48, 0x80000) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000380)=0xfffffffc, 0x4) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) sendmmsg(r6, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) 517.269406ms ago: executing program 4 (id=2157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000058a8df7913f29cf6491d191606e7ee08008e000000000c009000fdffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6e30}, {0x6}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x10}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x20000000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4f1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c844) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1c8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6e30}, {0x6}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x10}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x8000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x20000000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4f1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c844) 503.180353ms ago: executing program 3 (id=2158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x134, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "8fe34488df63c18042b002217ec99177862593d5710931bee9e8e517d1763d85dd9fb4071dcb42d4b8d95e76da2affabce8d081c4dcaee2f4fdb07eddbb9bb24abdbe23e782fb6e71031fe8c466ee5dea2887d2b0f8011e18626c1b9f62ae377159037d8da4753e7f09fc1f2bc128be66b77552e52183205b8ad2983799881ee51d839ff0151692dbb737c1aff8fdeda053ed54af060940e37933b9a9d1767b8f453ccf5748a1634383f4f12c680584b8737c72a6c7662dfb1749f166d98e4c23741f34e47b0f71a8b76a858e29bf2a9a8a80a6f96f12f9a89a6779d961a"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004}, 0x10) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r1, 0x400, 0xa, 0x80}) (rerun: 64) ioctl(r4, 0x1, &(0x7f0000000340)="db755e13f0e9e0309596c00b3dd9f0149af5732a22cfb40fea36fb995dbf1803b3ff8b38d7e66247d40abc4b778bc9714d5aed8ccff4c2f58fadf37a2d5cc59cd21e6cb1d88de8c0c3f908e3afe65e0404baeb7012b40dd3e5abbaddb27c10579866a793bdc088eeddbf0d2d66f0dfe062255c02b90c7d185f8fa0ec5081") (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 418.078832ms ago: executing program 1 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x7}, 0x76, 0xeb, 0x5, 0x9, 0x13, 'syz0\x00', "3353e24baa55eb9aa92947ab917d5b29a4273214053628310fd4fc9212ad96b8", "1ec3f1ee4b04f93dc57c7f22c121da173b68f42efcb75d2afddc3fcff03a9339", [{0xb7a1, 0x100, {0x2, 0x7}}, {0x7, 0x10, {0x1, 0x6}}, {0x4, 0xffff, {0x3, 0x100}}, {0xc, 0x6, {0x1, 0x8}}, {0x1, 0x9, {0x1, 0x9}}, {0x4, 0x36, {0x2, 0x9}}, {0x0, 0x1, {0x2}}, {0x7f, 0x1e37, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x9}}, {0x2, 0x9, {0x2, 0x3}}, {0x8, 0x9, {0x1}}, {0x436, 0x4, {0x0, 0x6}}, {0x7, 0x4, {0x2, 0x6}}, {0x8, 0x3, {0x2}}, {0x8, 0x7e31, {0x2c83245c29519ddb, 0x3ff}}, {0x290, 0x1d, {0x1, 0x200}}, {0x101, 0x6, {0x1, 0x6}}, {0x3, 0x5, {0x3, 0xeaf}}, {0xc, 0x1, {0x3, 0x4}}, {0x0, 0x5, {0x1, 0x80000001}}, {0x8, 0xb, {0x1, 0x5}}, {0x3, 0x2, {0x1, 0x5ca4}}, {0x3, 0x9e, {0x0, 0xff}}, {0xe, 0xfffb, {0x0, 0xffffffff}}, {0x45c, 0x5, {0x0, 0x7fa9}}, {0xfffb, 0x41bf, {0x1}}, {0x8, 0x1ff, {0x2, 0x39}}, {0x5ece, 0x0, {0x0, 0x6}}, {0x956a, 0x81, {0x4015bda78b0d377, 0x63b}}, {0x5, 0xff07, {0x1, 0x9}}, {0x9, 0x5, {0x0, 0xfffffbff}}, {0x6, 0x4, {0x2, 0x7}}, {0x401, 0x62ba, {0x3, 0x10000}}, {0x7, 0x8ea, {0x0, 0x7fff}}, {0x1, 0xc, {0x1, 0x3}}, {0x7ff, 0x5, {0x0, 0x3}}, {0xd, 0x6, {0x2, 0xffffffff}}, {0x0, 0x3, {0x2, 0x8}}, {0x3, 0x8, {0x1, 0x7}}, {0x8000, 0x6356, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x100}, 0xff, 0xf, 0x6, 0xe68d, 0x24, 'syz0\x00', "574727d191d1d8427999852653e87b68991325c688a4e59d150ba2b7a9ab6602", "b1f638eea590abe7d6f64eb9e065a85d406618f99398b5f1dd2cedbc25e1d65b", [{0x8, 0x81, {0x2, 0x100}}, {0x4, 0x20, {0x0, 0x14b}}, {0x1, 0x0, {0x1, 0x4}}, {0x8001, 0x0, {0x0, 0x3}}, {0x400, 0x9, {0x1, 0x1}}, {0x5, 0x6, {0x2, 0x5}}, {0x3, 0x8, {0x0, 0x1}}, {0x9, 0x8, {0x1, 0x48f95d73}}, {0x5898, 0x3ff, {0xcb95880a2ff9b3e6, 0x5}}, {0x5, 0x957e, {0x2, 0x6}}, {0x4, 0x8001, {0x2, 0x7f}}, {0x3, 0x4, {0x2}}, {0x6, 0x7, {0x2, 0x8}}, {0xd, 0x1ff, {0x2, 0x3}}, {0x200, 0x200, {0x6da3beb620f14a50, 0x2}}, {0x6, 0xa5d, {0x0, 0x3}}, {0xc2, 0x4, {0x3}}, {0x6, 0x1, {0x2, 0xfffffffb}}, {0x5754, 0xa, {0x2, 0x9}}, {0x80, 0x9, {0x5, 0x2}}, {0x7, 0x6, {0x3, 0x31ede801}}, {0x9, 0xd, {0x0, 0x6}}, {0x5, 0x9, {0x0, 0xfffffffd}}, {0x4, 0x6, {0x3, 0x101}}, {0x6, 0x2, {0x2, 0x9}}, {0x1, 0x2, {0x1, 0x8}}, {0x788c, 0xff, {0x3, 0x17faf029}}, {0x6, 0x9, {0x0, 0x8}}, {0x8001, 0xd, {0x3, 0x2}}, {0xa28b, 0x0, {0x0, 0x7}}, {0x9, 0x2, {0x2, 0x8}}, {0x6, 0x744a, {0x1, 0x80000000}}, {0x8, 0x3e, {0x3, 0x9}}, {0x3fa3, 0x2, {0x1, 0x2}}, {0x6, 0x2, {0x3, 0xf}}, {0xd684, 0x1000, {0x2, 0x356c}}, {0x8, 0x125, {0x0, 0x5}}, {0x7ff, 0x9, {0x0, 0x2}}, {0x5, 0xe}, {0x9, 0x76, {0x9c67246fbfc8055b, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x1ff}, 0x1, 0x5, 0x5, 0x100, 0xa, 'syz0\x00', "348da09584683d3189a420dc5d2c5aa34e9225714b2b22cdd6a1377b2874580d", "e7fdcdbc6e905ca88dfcb03795a7a389cf0c4f346b7149812d758222c9b0d0ad", [{0x61, 0x1, {0x2, 0x80a}}, {0xd8a, 0x400, {0x2, 0xe19}}, {0x10, 0x1, {0x3, 0x101}}, {0x0, 0x1000, {0x0, 0x2}}, {0x8, 0xa044, {0x1, 0xffff}}, {0x8, 0x3, {0x4, 0x5}}, {0x1000, 0x101, {0x2, 0x800}}, {0x7, 0x8, {0x1, 0x4}}, {0x340, 0xffff, {0x2, 0x8503}}, {0x6, 0x6, {0x0, 0x3}}, {0x6, 0x12d6, {0x3, 0x8}}, {0x8, 0x8000, {0x3, 0x200}}, {0x6, 0x6, {0x2, 0xfa}}, {0x7ff, 0x2, {0x3, 0x101}}, {0xc5, 0x7, {0xd3df1c50cf95306f, 0x15}}, {0x0, 0x7, {0x3, 0x401}}, {0x703f, 0x800, {0x3, 0xb3f}}, {0x80, 0xa, {0x2, 0x5}}, {0x3, 0x8, {0xaca362c8535200f3}}, {0x3, 0x81, {0x2, 0x7}}, {0xffd4, 0x7, {0x2, 0x80}}, {0x0, 0x5, {0x2, 0x9}}, {0x7, 0x3, {0x2, 0x3}}, {0x81, 0x8, {0x3, 0x9}}, {0xe, 0x9, {0x2, 0x100}}, {0x795, 0xd, {0x1, 0x3}}, {0x76, 0x7, {0x0, 0x8}}, {0x1, 0x8000, {0x3, 0x54}}, {0x9, 0x401, {0x0, 0x3b60}}, {0x1, 0x8, {0x1, 0xce31}}, {0x0, 0x3, {0x1}}, {0xf, 0x6, {0x3, 0x1}}, {0x6, 0x4709, {0x1, 0x7f}}, {0x4d38, 0x3ff, {0x3, 0x4}}, {0xa948, 0x2, {0x4, 0xff}}, {0x81, 0x4, {0x0, 0xe2}}, {0x6, 0x1, {0x3, 0x10}}, {0x9, 0x6, {0x0, 0x2}}, {0x4, 0x9f, {0x1, 0x2}}, {0x0, 0x8, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0xd7, 0x80, 0x80, 0x7f, 0xb, 'syz1\x00', "5c0e7bd007ceb350738d8a0f4a214f5f735851f9147162df35d7f3fc57907a03", "bf3b7069988c4f439734d716780cc425be87a7e751b9bb759da554a25e68d419", [{0x401, 0x6, {0x2, 0x9}}, {0x9, 0xb, {0x1, 0x5}}, {0x2, 0x2d0, {0x0, 0xfffffffc}}, {0x81, 0x4e, {0x1, 0x6}}, {0x7f, 0x9, {0x0, 0x1d8}}, {0x100, 0x5244, {0x2, 0x3}}, {0x2, 0x4, {0x1, 0x1}}, {0x4, 0x3, {0x1, 0x4}}, {0x1, 0x3, {0x2, 0x10000000}}, {0x6, 0x2, {0x66db60e4e643d573, 0x5}}, {0x18, 0x3, {0x1, 0x9}}, {0x6, 0x1, {0x2}}, {0xb, 0x8, {0x3, 0x6}}, {0x8000, 0x408, {0x2}}, {0x5, 0x80, {0x3, 0x5}}, {0x3, 0x1, {0x3, 0x4}}, {0x4, 0x8, {0x0, 0x5}}, {0x8, 0x6, {0x3}}, {0xd0, 0xfff, {0x2, 0x3f}}, {0x9, 0x6, {0x0, 0x979}}, {0x7, 0x10, {0x2, 0x6}}, {0x1, 0xd, {0x3, 0xc1}}, {0x5, 0x7f, {0x0, 0x6}}, {0xc0, 0x5, {0x0, 0x7}}, {0x1000, 0x7, {0x0, 0x1}}, {0x9, 0x3}, {0xa000, 0xc, {0x1, 0x4}}, {0x5, 0x0, {0x2, 0x97d}}, {0x8000, 0x9, {0x0, 0x5}}, {0xb, 0x7fff, {0x1, 0xc0a}}, {0x1, 0x8, {0x3, 0x2}}, {0x2, 0xfff, {0x1, 0x9a88}}, {0x6, 0x80, {0x3, 0x2800}}, {0x7, 0xf, {0x2, 0x1}}, {0x5, 0x9, {0x1, 0x401}}, {0x2338, 0x4, {0x2, 0x5}}, {0xe7, 0x6, {0x0, 0x811}}, {0xe3, 0x1ff, {0x3, 0xb5}}, {0x0, 0x8ceb, {0x1, 0x9}}, {0x8, 0xd1d, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffbff}, 0x7, 0x95, 0x7, 0xfd29, 0x14, 'syz0\x00', "9f412da230f2a02cb5bf818bdee2b300ad8b2f9d7b5d9670d0203be4a0e0e9d8", "3c01ac0dbc39ae97e59243c4e6d814eb89eae90ca1e5b202d29c988209f6343d", [{0x7, 0x7f, {0x0, 0x6}}, {0x200, 0x1ff, {0x3, 0x40}}, {0x9, 0x10, {0x1, 0x75}}, {0xc1, 0x5, {0x0, 0xfffffff9}}, {0x80, 0x8000, {0x1}}, {0x3, 0x8, {0x2, 0xffffffff}}, {0x4, 0x7, {0x1, 0x3}}, {0x2, 0x3, {0x3}}, {0x5, 0xf, {0x1, 0xf8}}, {0x58a, 0x6, {0x0, 0x1be}}, {0xe, 0x3, {0x2, 0x9}}, {0x81, 0x0, {0x0, 0xa8}}, {0x7, 0xb6, {0x1, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x9bd2, 0xae, {0x0, 0x8}}, {0x3, 0x3a9f, {0x0, 0x1}}, {0x4, 0xf, {0x1, 0x9}}, {0x8001, 0x8, {0x3, 0x5}}, {0x8, 0x6dd, {0x734fe50a8a3feb0d, 0x6}}, {0x2dd1, 0x0, {0x1, 0xff}}, {0x9, 0x6, {0x3, 0x4}}, {0x8, 0x3, {0x2, 0x2}}, {0x9, 0xb023, {0x0, 0xfff}}, {0x200, 0x7, {0x2, 0xffff6c99}}, {0x81, 0x401, {0x1, 0x7}}, {0x4, 0x3, {0x1, 0x5}}, {0x101, 0x6, {0x3, 0x71}}, {0x7, 0x0, {0x3, 0x400}}, {0x7, 0x9, {0x0, 0x9}}, {0xf72f, 0x7, {0x0, 0x3}}, {0x7, 0x2, {0x6, 0x2}}, {0x0, 0x2, {0x0, 0x1}}, {0x4, 0x3, {0x3, 0x1}}, {0x2cdb, 0x7e12, {0x1, 0x6}}, {0x8, 0x6, {0x0, 0x8a}}, {0x5, 0xbe9, {0x0, 0x396}}, {0xfffe, 0x3ff, {0x2, 0x6dd1}}, {0xa6f9, 0x3, {0x1, 0x2}}, {0x2, 0xc5f4, {0x3}}, {0x1, 0x8001, {0x0, 0x3}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x804c004}, 0x4001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) 399.640342ms ago: executing program 0 (id=2160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000ff0c000780080006400000070105000500020033b048a3d21ce0ab65abff6d830000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 281.976789ms ago: executing program 1 (id=2161): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) 234.381122ms ago: executing program 4 (id=2162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) r2 = accept4$alg(r1, 0x0, 0x0, 0x101800) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{r2}, 0x5, &(0x7f0000000080)=[0xfffffffffffffffd, 0x898, 0xf, 0x8c, 0x8], 0x5, 0x8}) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x90}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5e}, @jmp={0x5, 0x1, 0x3, 0xf, 0x9, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x401, 0x85, &(0x7f0000000300)=""/133, 0x41000, 0x24, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x3, 0x8, 0x4f}, 0x10, 0x18af4, r1, 0x4, 0x0, &(0x7f0000000400)=[{0x1, 0x3, 0x8, 0x3}, {0x4, 0x3, 0x9, 0x6}, {0x0, 0x4, 0xa}, {0x3, 0x1, 0xb, 0x4}]}, 0x94) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_INIT={0xf}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8}]}}, @qdisc_kind_options=@q_fq_codel={{}, {0x0, 0x2, [@TCA_FQ_CODEL_INTERVAL]}}]}, 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) 181.530685ms ago: executing program 2 (id=2163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r4, 0xa006}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r10, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018006000100", @ANYRES32=r11, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r8, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000000) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r6) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r13, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r14, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r16, 0x300, 0xfffffffe, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40840) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r16, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x50}, 0x1, 0x0, 0x0, 0x928470a008cf1866}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xfffffe5c, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x2}}}, 0x24}}, 0x0) 174.935183ms ago: executing program 0 (id=2164): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async) r2 = accept(r1, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000100)=0x80) bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) 46.431674ms ago: executing program 3 (id=2165): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r2, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1}, 0x20) ioctl$SIOCNRDECOBS(r0, 0x89e2) 42.006639ms ago: executing program 0 (id=2166): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000100)) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x7f, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x7, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x7cf0, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x7, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x1, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x881, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x5, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0xfffffffd, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x10002, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0x0, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x40, 0x10000, 0x8001, 0xa1, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x5, 0x8, 0x9, 0x9fa0, 0x1, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x7ffffffd, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x8001, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x7, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) (async, rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000015c0)=@newtaction={0xc0, 0x30, 0x871a15abc695fa3d, 0x0, 0xfffffffd, {}, [{0xac, 0x1, [@m_ctinfo={0x78, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x1e0bbb0e}}]}, {0x31, 0x6, "2e3f3909133cba1cef57d5c605ad53320a7bd014643440a9cdb9d1d36e83f1b1017240c3c1f4f1f5d2ed6155b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc0}}, 0x0) (async, rerun: 64) sendmsg$nl_generic(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40980) (async, rerun: 64) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f00000001c0)={0x0, 0x2, 0x2}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r11, 0xd000941e, &(0x7f00000005c0)={r10, "00ff0f0000000000a636aa00dcde00"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) 41.653009ms ago: executing program 1 (id=2167): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003900)=ANY=[@ANYBLOB="4000000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="329579d9a3bbf21c22bdb8b9d10920350200008128000014003500766972745f", @ANYRES32=r2, @ANYBLOB="04001680"], 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x4010) 0s ago: executing program 4 (id=2168): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x41, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0xb, 0x3a, 0xff, @dev, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd, 0x120, "9baff4"}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff, 0x5}, {0x3, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x70bd2a, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "a8841ff973ad4a7ffa45a84ae2540cfadba6d51b9b26bae4ce7c99365983d06d1ccd6bb6054247be71e404b434ebca103d267b7b4d5886028daf42a66adf39ff27"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) kernel console output (not intermixed with test programs): `syz.4.224'. [ 133.291389][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.303426][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 133.311867][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.423323][ T6785] IPVS: ip_vs_add_dest(): server weight less than zero [ 133.455767][ T5951] IPVS: starting estimator thread 0... [ 133.560389][ T6795] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.059842][ T6825] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 134.092281][ T6825] block nbd1: not configured, cannot reconfigure [ 134.279484][ T6834] veth1_to_bond: entered allmulticast mode [ 134.306453][ T6833] veth1_to_bond: left allmulticast mode [ 134.457257][ T6840] tipc: Invalid UDP bearer configuration [ 134.457325][ T6840] tipc: Enabling of bearer rejected, failed to enable media [ 134.961047][ T6865] netlink: 'syz.0.246': attribute type 13 has an invalid length. [ 135.147510][ T6874] net_ratelimit: 15 callbacks suppressed [ 135.147533][ T6874] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 135.902728][ T6906] lo speed is unknown, defaulting to 1000 [ 136.912406][ T6933] __nla_validate_parse: 11 callbacks suppressed [ 136.912429][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.267'. [ 137.022466][ T6934] netlink: 108 bytes leftover after parsing attributes in process `syz.1.267'. [ 137.045785][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 137.285833][ T6908] netlink: 'syz.2.260': attribute type 21 has an invalid length. [ 137.307354][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 137.370782][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 137.411625][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 138.036786][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 138.484163][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 138.519026][ T6992] tipc: Enabling of bearer rejected, media not registered [ 138.534892][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 138.613449][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 138.629263][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.076921][ T7020] netlink: 'syz.3.291': attribute type 3 has an invalid length. [ 139.459871][ T7025] netlink: 'syz.3.292': attribute type 8 has an invalid length. [ 139.513681][ T7025] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.538161][ T7031] netlink: 'syz.2.293': attribute type 6 has an invalid length. [ 139.947802][ T7051] trusted_key: syz.4.300 sent an empty control message without MSG_MORE. [ 140.040503][ T7059] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 140.115545][ T7059] team0: Port device geneve0 added [ 140.459438][ T7090] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 140.515322][ T7093] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 140.533847][ T7095] netlink: 'syz.1.312': attribute type 83 has an invalid length. [ 140.702714][ T7101] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 141.803785][ T7118] syzkaller0: entered promiscuous mode [ 141.815103][ T7118] syzkaller0: entered allmulticast mode [ 142.207996][ T7149] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 143.705380][ T7142] __nla_validate_parse: 9 callbacks suppressed [ 143.705405][ T7142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.323'. [ 143.968954][ T7158] netlink: 'syz.2.326': attribute type 5 has an invalid length. [ 144.139446][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 144.190928][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 144.247560][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 144.258207][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'. [ 144.281469][ T7180] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 144.307267][ T7180] netlink: 'syz.1.330': attribute type 2 has an invalid length. [ 144.323842][ T7172] bridge0: port 3(vlan2) entered blocking state [ 144.363650][ T7172] bridge0: port 3(vlan2) entered disabled state [ 144.389709][ T7172] vlan2: entered allmulticast mode [ 144.402483][ T7172] bridge0: entered allmulticast mode [ 144.460642][ T7172] vlan2: left allmulticast mode [ 144.465725][ T7172] bridge0: left allmulticast mode [ 144.572952][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.335'. [ 145.100838][ T7186] lo speed is unknown, defaulting to 1000 [ 145.125958][ T7203] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 145.780444][ T7215] netlink: 'syz.1.343': attribute type 13 has an invalid length. [ 145.813781][ T7215] netlink: 'syz.1.343': attribute type 58 has an invalid length. [ 145.836588][ T7215] netlink: 152 bytes leftover after parsing attributes in process `syz.1.343'. [ 145.949612][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 146.755684][ T7250] : entered promiscuous mode [ 147.003608][ T7260] ipvlan2: entered promiscuous mode [ 147.014793][ T7259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.351'. [ 147.076436][ T7266] syz_tun: entered allmulticast mode [ 147.149733][ T7266] syz_tun: left allmulticast mode [ 147.231686][ T7273] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 147.297744][ T7271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.355'. [ 147.677872][ T7287] openvswitch: netlink: Flow actions attr not present in new flow. [ 147.735131][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.743868][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.751069][ T7346] __nla_validate_parse: 3 callbacks suppressed [ 148.751090][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'. [ 148.793618][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.375'. [ 148.814948][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 148.843344][ T7348] netlink: 'syz.0.378': attribute type 8 has an invalid length. [ 148.862560][ T7348] tipc: Enabled bearer , priority 0 [ 148.877667][ T7348] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 148.886973][ T7348] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 149.018041][ T7352] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 149.086133][ T7355] netlink: 'syz.4.381': attribute type 2 has an invalid length. [ 149.124908][ T7356] netlink: 'syz.0.382': attribute type 9 has an invalid length. [ 149.226631][ T7364] netlink: 'syz.4.381': attribute type 2 has an invalid length. [ 149.894325][ T7400] openvswitch: netlink: Key 17 has unexpected len 769 expected 4 [ 149.920712][ T7405] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 149.937116][ T7404] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 149.989626][ T5957] tipc: Node number set to 2966060533 [ 150.047373][ T7404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.208648][ T7405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.249422][ T7410] vlan2: entered promiscuous mode [ 150.255052][ T7410] bond1: entered promiscuous mode [ 150.265801][ T7410] vlan2: entered allmulticast mode [ 150.275893][ T7410] bond1: entered allmulticast mode [ 150.301323][ T7409] vlan2: entered allmulticast mode [ 150.306881][ T7409] veth1: entered allmulticast mode [ 150.333565][ T7409] bond2: (slave vlan2): making interface the new active one [ 150.344207][ T7409] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 150.403169][ T7421] bond1: (slave gretap1): making interface the new active one [ 150.432623][ T7421] gretap1: entered promiscuous mode [ 150.450155][ T7421] gretap1: entered allmulticast mode [ 150.475689][ T7421] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 150.793940][ T7442] sctp: [Deprecated]: syz.3.401 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.793940][ T7442] Use struct sctp_sack_info instead [ 151.075740][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 151.088896][ T7455] netlink: 'syz.4.405': attribute type 26 has an invalid length. [ 151.097937][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 151.150261][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 151.216458][ T7455] netlink: 'syz.4.405': attribute type 26 has an invalid length. [ 151.253984][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 152.068997][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 152.379763][ T7520] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 152.411527][ T7520] netlink: 'syz.3.424': attribute type 4 has an invalid length. [ 152.456488][ T7520] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.424'. [ 152.982226][ T7547] netlink: 52 bytes leftover after parsing attributes in process `syz.2.431'. [ 153.303710][ T7562] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:3616 [ 153.310749][ T7559] lo speed is unknown, defaulting to 1000 [ 153.481558][ T7572] veth1_to_bond: entered allmulticast mode [ 154.219364][ T7553] ifb0: entered promiscuous mode [ 154.224781][ T7553] ifb0: entered allmulticast mode [ 154.246220][ T7577] veth1_to_bond: left allmulticast mode [ 154.743451][ T7595] sch_fq: defrate 0 ignored. [ 154.945500][ T7609] __nla_validate_parse: 3 callbacks suppressed [ 154.945524][ T7609] netlink: 19432 bytes leftover after parsing attributes in process `syz.4.446'. [ 155.850330][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 156.093660][ T7662] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 156.146613][ T7662] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 156.293166][ T7667] netlink: 'syz.2.459': attribute type 11 has an invalid length. [ 156.355363][ T7669] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 156.376243][ T7669] netlink: 224 bytes leftover after parsing attributes in process `syz.4.460'. [ 156.723530][ T7685] batadv0: entered allmulticast mode [ 156.936405][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 157.394457][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 157.510060][ T7722] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 157.523922][ T6300] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.570696][ T1116] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.607493][ T1116] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.645976][ T1116] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 158.214450][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 158.215378][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 158.276503][ T7747] geneve2: entered promiscuous mode [ 158.483456][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 158.668203][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.685927][ T7751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.476'. [ 158.692734][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.932125][ T30] audit: type=1107 audit(1755857818.980:2): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='nhhrS?>B' [ 158.962567][ T7769] netlink: 'syz.3.480': attribute type 2 has an invalid length. [ 158.992344][ T7769] netlink: 'syz.3.480': attribute type 8 has an invalid length. [ 159.013308][ T7779] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 159.027672][ T7775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 159.030218][ T7769] netlink: 132 bytes leftover after parsing attributes in process `syz.3.480'. [ 159.095629][ T7784] netlink: 'syz.2.484': attribute type 11 has an invalid length. [ 159.571429][ T1116] tipc: Subscription rejected, illegal request [ 159.719370][ T7798] syzkaller1: entered promiscuous mode [ 159.749160][ T7798] syzkaller1: entered allmulticast mode [ 160.098938][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880567dcc00: rx timeout, send abort [ 160.113164][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880567dcc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.139975][ T7824] __nla_validate_parse: 2 callbacks suppressed [ 160.140000][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 160.197255][ T7824] netlink: 'syz.4.493': attribute type 8 has an invalid length. [ 160.482622][ T7836] sctp: [Deprecated]: syz.4.497 (pid 7836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.482622][ T7836] Use struct sctp_sack_info instead [ 160.502486][ T7836] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 160.516056][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.525199][ T7836] bridge_slave_1: left allmulticast mode [ 160.537900][ T7836] bridge_slave_1: left promiscuous mode [ 160.546114][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.643943][ T7836] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 160.719170][ T7840] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 160.929407][ T7848] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 161.092585][ T7848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.334242][ T7868] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 161.471865][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.504'. [ 161.484188][ T7868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.512603][ T7872] bond4: (slave gretap1): making interface the new active one [ 161.522082][ T7872] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 162.233796][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 162.275087][ T7902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'. [ 162.553439][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 162.627993][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.636228][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.060841][ T7935] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 163.227094][ T7953] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 163.237318][ T7935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.254482][ T7953] netlink: 244 bytes leftover after parsing attributes in process `syz.4.526'. [ 163.395335][ T7949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.403985][ T7949] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 163.418776][ T7949] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 163.584124][ T7935] veth3: entered promiscuous mode [ 163.641335][ T7935] bond2: (slave veth3): Enslaving as an active interface with a down link [ 163.692454][ T7955] vlan2: entered allmulticast mode [ 163.697970][ T7955] bond2: entered allmulticast mode [ 163.908090][ T7975] net veth1_virt_wifi .: renamed from virt_wifi0 [ 164.075879][ T7983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.534'. [ 164.505189][ T24] IPVS: starting estimator thread 0... [ 164.532852][ T8004] netlink: 'syz.2.540': attribute type 5 has an invalid length. [ 164.583906][ T8008] netlink: 'syz.2.540': attribute type 5 has an invalid length. [ 164.638953][ T8010] IPVS: using max 22 ests per chain, 52800 per kthread [ 164.909872][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 165.069203][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 165.069758][ T8032] lo speed is unknown, defaulting to 1000 [ 165.326544][ T8025] "syz.4.544" (8025) uses obsolete ecb(arc4) skcipher [ 165.951235][ T8057] syzkaller0: entered promiscuous mode [ 165.956934][ T8057] syzkaller0: entered allmulticast mode [ 166.131334][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.555'. [ 167.620348][ T8073] pimreg3: entered allmulticast mode [ 167.894238][ T8093] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 167.899508][ T8097] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 168.514034][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'. [ 168.528051][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 168.570184][ T8128] veth0: entered promiscuous mode [ 168.586291][ T8118] veth0: left promiscuous mode [ 168.866269][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 169.018063][ T8148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.577'. [ 169.330862][ T8161] veth0: entered promiscuous mode [ 169.367547][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 169.434077][ T8165] netlink: 'syz.2.583': attribute type 39 has an invalid length. [ 169.798096][ T8179] netlink: 56 bytes leftover after parsing attributes in process `syz.3.586'. [ 169.988037][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.587'. [ 170.329640][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 170.347155][ T8207] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 170.400305][ T8206] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 170.408455][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'. [ 170.549532][ T8202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.772353][ T8211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.780393][ T8211] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 170.793597][ T8211] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 171.006402][ T8213] syz_tun: left promiscuous mode [ 171.012141][ T8213] syz_tun: left allmulticast mode [ 171.216386][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 171.457518][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 171.468840][ T8248] bridge_slave_1: left allmulticast mode [ 171.474540][ T8248] bridge_slave_1: left promiscuous mode [ 171.480620][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.542097][ T8251] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 171.840936][ T8248] bridge_slave_0: left allmulticast mode [ 171.888401][ T8248] bridge_slave_0: left promiscuous mode [ 171.942059][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.342698][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 172.552709][ T8272] syz.2.612 (8272) used greatest stack depth: 18008 bytes left [ 172.653365][ T8276] syz.2.612 (8276) used greatest stack depth: 17864 bytes left [ 172.736011][ T8295] netlink: 68 bytes leftover after parsing attributes in process `syz.4.620'. [ 172.899279][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.624'. [ 172.908509][ T8307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.624'. [ 172.938067][ T8309] wg1 speed is unknown, defaulting to 1000 [ 172.964908][ T8309] wg1 speed is unknown, defaulting to 1000 [ 172.973347][ T8309] wg1 speed is unknown, defaulting to 1000 [ 173.033475][ T8309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.069415][ T8305] netlink: 52 bytes leftover after parsing attributes in process `syz.2.622'. [ 173.077307][ T8309] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 173.233385][ T8309] wg1 speed is unknown, defaulting to 1000 [ 173.291668][ T8309] wg1 speed is unknown, defaulting to 1000 [ 173.411209][ T8309] wg1 speed is unknown, defaulting to 1000 [ 173.486044][ T8309] wg1 speed is unknown, defaulting to 1000 [ 173.529869][ T8332] netlink: 'syz.3.631': attribute type 4 has an invalid length. [ 173.587968][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 173.597673][ T8309] wg1 speed is unknown, defaulting to 1000 [ 173.655238][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 173.661143][ T8340] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 174.009110][ T8349] delete_channel: no stack [ 174.294837][ T8366] tipc: Enabling of bearer rejected, failed to enable media [ 174.314994][ T8368] tipc: Enabling of bearer rejected, failed to enable media [ 174.644933][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 174.695447][ T8377] bridge_slave_0: left allmulticast mode [ 174.722406][ T8377] bridge_slave_0: left promiscuous mode [ 174.728352][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.066367][ T8389] lo speed is unknown, defaulting to 1000 [ 175.657901][ T8411] netlink: 'syz.3.649': attribute type 23 has an invalid length. [ 175.705554][ T8413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.713290][ T8413] IPv6: NLM_F_CREATE should be set when creating new route [ 176.013929][ T8389] wg1 speed is unknown, defaulting to 1000 [ 176.432838][ T8426] bond1: entered promiscuous mode [ 176.472224][ T8426] bond1: entered allmulticast mode [ 176.495308][ T8426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.589663][ T8444] netlink: 'syz.4.657': attribute type 1 has an invalid length. [ 176.617400][ T8444] __nla_validate_parse: 2 callbacks suppressed [ 176.617420][ T8444] netlink: 224 bytes leftover after parsing attributes in process `syz.4.657'. [ 176.719045][ T8426] bond1 (unregistering): Released all slaves [ 176.729232][ T8448] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 176.737533][ T8448] netlink: 144 bytes leftover after parsing attributes in process `syz.3.658'. [ 176.749562][ T8448] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 176.757433][ T8448] netlink: 'syz.3.658': attribute type 2 has an invalid length. [ 176.765750][ T8448] netlink: 64 bytes leftover after parsing attributes in process `syz.3.658'. [ 177.042191][ T8457] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 177.292880][ T8456] macvtap1: entered allmulticast mode [ 177.336360][ T8456] veth0_macvtap: entered allmulticast mode [ 177.973027][ T8488] syzkaller1: entered promiscuous mode [ 177.999957][ T8488] syzkaller1: entered allmulticast mode [ 178.304780][ T5234] udevd[5234]: worker [5864] terminated by signal 33 (Unknown signal 33) [ 178.369435][ T5234] udevd[5234]: worker [5864] failed while handling '/devices/virtual/block/loop2' [ 178.551391][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 178.567048][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 178.573825][ T8515] netlink: 192 bytes leftover after parsing attributes in process `syz.3.675'. [ 178.814978][ T8522] syzkaller0: entered promiscuous mode [ 178.821911][ T8522] syzkaller0: entered allmulticast mode [ 178.843458][ T8526] tipc: Started in network mode [ 178.864065][ T8526] tipc: Node identity cac87fb962f5, cluster identity 4711 [ 178.893943][ T8526] tipc: Enabled bearer , priority 0 [ 178.970533][ T8522] tipc: Resetting bearer [ 179.002925][ T8519] tipc: Resetting bearer [ 179.054122][ T8519] tipc: Disabling bearer [ 179.570781][ T8559] syzkaller0: entered promiscuous mode [ 179.576338][ T8559] syzkaller0: entered allmulticast mode [ 179.684431][ T8566] netlink: 288 bytes leftover after parsing attributes in process `syz.2.690'. [ 179.745502][ T8566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 179.832200][ T8570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.690'. [ 180.146898][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 180.194036][ T8589] netlink: 'syz.2.698': attribute type 10 has an invalid length. [ 180.223997][ T8589] bridge_slave_1: left allmulticast mode [ 180.250401][ T8589] bridge_slave_1: left promiscuous mode [ 180.276317][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.413048][ T8589] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 180.435662][ T8598] tipc: New replicast peer: 255.255.255.255 [ 180.448631][ T8598] tipc: Enabled bearer , priority 10 [ 180.832004][ T8623] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 180.847447][ T8626] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 180.873770][ T8623] team0: Device ipvlan1 failed to register rx_handler [ 181.731567][ T8662] __nla_validate_parse: 5 callbacks suppressed [ 181.731591][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 181.774572][ T8662] tipc: Enabling of bearer rejected, media not registered [ 181.960936][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 182.015705][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 182.292537][ T8678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.348993][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 182.357987][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 182.474563][ T8691] tipc: Started in network mode [ 182.482212][ T8691] tipc: Node identity d253f1a35fe5, cluster identity 4711 [ 182.512466][ T8691] tipc: Enabled bearer , priority 0 [ 182.605981][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 182.635204][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 182.650930][ T8691] tipc: Disabling bearer [ 182.693313][ T6294] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.710759][ T6294] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.712064][ T8706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 182.722288][ T6294] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.809823][ T6294] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.096251][ T8722] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 183.127124][ T8722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.739'. [ 183.295300][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 183.747762][ T8754] netlink: 'syz.3.747': attribute type 7 has an invalid length. [ 183.767320][ T8748] syzkaller0: entered promiscuous mode [ 183.774590][ T8748] syzkaller0: entered allmulticast mode [ 183.806680][ T8754] : entered promiscuous mode [ 184.770201][ T8804] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 184.803044][ T8804] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 184.903532][ T8809] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 184.955499][ T8811] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 185.382974][ T8836] netlink: 'syz.1.772': attribute type 3 has an invalid length. [ 185.414541][ T8836] netlink: 'syz.1.772': attribute type 2 has an invalid length. [ 185.465980][ T8843] IPVS: length: 143 != 8 [ 185.625963][ T8848] netlink: 'syz.4.775': attribute type 2 has an invalid length. [ 185.847677][ T8863] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 186.536552][ T8904] nbd: couldn't find device at index 0 [ 187.150980][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 187.182087][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 187.337465][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 187.362813][ T8928] netlink: 'syz.2.790': attribute type 21 has an invalid length. [ 187.381954][ T8928] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 187.423244][ T8931] __nla_validate_parse: 15 callbacks suppressed [ 187.423264][ T8931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.792'. [ 187.511752][ T8893] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 187.533991][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 187.970476][ T8944] bond6: entered promiscuous mode [ 187.983827][ T8944] bond6: entered allmulticast mode [ 188.009181][ T8944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.040722][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 188.095046][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 188.154573][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 188.195827][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 188.220132][ T8893] hsr0 speed is unknown, defaulting to 1000 [ 188.314431][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 188.606725][ T8990] netlink: 'syz.1.808': attribute type 21 has an invalid length. [ 188.637150][ T8990] netlink: 128 bytes leftover after parsing attributes in process `syz.1.808'. [ 188.664956][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 188.766461][ T8987] erspan0: entered promiscuous mode [ 188.777373][ T8987] vlan2: entered promiscuous mode [ 188.880005][ T8990] netlink: 'syz.1.808': attribute type 5 has an invalid length. [ 188.899567][ T8990] netlink: 3 bytes leftover after parsing attributes in process `syz.1.808'. [ 188.914536][ T8998] netlink: 'syz.4.809': attribute type 21 has an invalid length. [ 188.927039][ T8993] 8021q: VLANs not supported on gre0 [ 189.171698][ T9010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.815'. [ 189.189251][ T9003] nbd1: detected capacity change from 0 to 127 [ 189.225342][ T51] block nbd1: Receive control failed (result -32) [ 189.238171][ T6119] block nbd1: Dead connection, failed to find a fallback [ 189.273320][ T6119] block nbd1: shutting down sockets [ 189.281141][ T6119] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.292571][ T6119] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.302534][ T6119] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.313941][ T6119] Buffer I/O error on dev nbd1, logical block 1, async page read [ 189.329895][ T6119] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.340212][ T6119] Buffer I/O error on dev nbd1, logical block 2, async page read [ 189.348173][ T6119] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.385748][ T6119] Buffer I/O error on dev nbd1, logical block 3, async page read [ 189.400516][ T6119] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.410948][ T6119] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.424734][ T6119] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.436570][ T6119] Buffer I/O error on dev nbd1, logical block 1, async page read [ 189.445433][ T6119] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.455016][ T6119] Buffer I/O error on dev nbd1, logical block 2, async page read [ 189.463626][ T6119] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.473503][ T6119] Buffer I/O error on dev nbd1, logical block 3, async page read [ 189.482202][ T6119] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.492699][ T6119] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.501374][ T6119] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 189.511219][ T6119] Buffer I/O error on dev nbd1, logical block 1, async page read [ 189.539502][ T6119] ldm_validate_partition_table(): Disk read failed. [ 189.547789][ T6119] Dev nbd1: unable to read RDB block 0 [ 189.555475][ T6119] nbd1: unable to read partition table [ 189.570531][ T6119] ldm_validate_partition_table(): Disk read failed. [ 189.581308][ T6119] Dev nbd1: unable to read RDB block 0 [ 189.591232][ T6119] nbd1: unable to read partition table [ 200.061063][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.316945][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.821'. [ 206.340915][ T9023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.817'. [ 206.420525][ T9030] openvswitch: netlink: Missing key (keys=40, expected=100) [ 206.464552][ T9026] dvmrp0: entered allmulticast mode [ 206.606537][ T9035] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 206.654105][ T9035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.822'. [ 206.698103][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 206.947581][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'. [ 207.412290][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 207.439919][ T9070] netlink: 'syz.1.833': attribute type 2 has an invalid length. [ 207.466112][ T9070] netlink: 'syz.1.833': attribute type 2 has an invalid length. [ 207.595750][ T9083] bond0: (slave bridge_slave_1): Releasing backup interface [ 207.629779][ T9083] bond0: (slave bond_slave_0): Releasing backup interface [ 207.660776][ T9083] bond0: (slave bond_slave_1): Releasing backup interface [ 207.716840][ T9083] team0: Port device team_slave_0 removed [ 207.742979][ T9083] team0: Port device team_slave_1 removed [ 207.755690][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.765495][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.776766][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.787722][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.829933][ T9083] bond0: (slave wlan1): Releasing backup interface [ 207.931051][ T9083] bond1: (slave gretap1): Releasing active interface [ 207.937831][ T9083] gretap1: left promiscuous mode [ 207.946537][ T9083] gretap1: left allmulticast mode [ 208.021271][ T5930] hsr0 speed is unknown, defaulting to 1000 [ 208.045746][ T9095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.838'. [ 208.500396][ T9114] syz0: rxe_newlink: already configured on lo [ 208.536337][ T9114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.556607][ T9] lo speed is unknown, defaulting to 1000 [ 208.572363][ T9] syz0: Port: 1 Link ACTIVE [ 208.596776][ T9] lo speed is unknown, defaulting to 1000 [ 208.778160][ T9124] syzkaller0: entered promiscuous mode [ 208.786250][ T9124] syzkaller0: entered allmulticast mode [ 208.801275][ T9128] bond0: entered promiscuous mode [ 209.373699][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 209.387793][ T9162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.861'. [ 209.404563][ T9160] Driver unsupported XDP return value 0 on prog (id 421) dev N/A, expect packet loss! [ 209.458054][ T9168] netlink: set zone limit has 8 unknown bytes [ 209.693414][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 210.078001][ T9198] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 210.147059][ T9198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.730631][ T9230] netlink: 'syz.2.885': attribute type 21 has an invalid length. [ 210.742578][ T9230] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 215.149376][ T9251] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 220.211830][ T9264] __nla_validate_parse: 10 callbacks suppressed [ 220.211853][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 220.376924][ T9273] syz.4.898: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.417148][ T9273] CPU: 1 UID: 0 PID: 9273 Comm: syz.4.898 Not tainted syzkaller #0 PREEMPT(full) [ 220.417177][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.417189][ T9273] Call Trace: [ 220.417198][ T9273] [ 220.417207][ T9273] dump_stack_lvl+0x189/0x250 [ 220.417243][ T9273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.417268][ T9273] ? __pfx__printk+0x10/0x10 [ 220.417296][ T9273] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 220.417322][ T9273] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 220.417348][ T9273] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 220.417375][ T9273] warn_alloc+0x214/0x310 [ 220.417412][ T9273] ? __pfx_warn_alloc+0x10/0x10 [ 220.417453][ T9273] ? __get_vm_area_node+0x28f/0x300 [ 220.417482][ T9273] ? hash_ipport_create+0x741/0x1410 [ 220.417515][ T9273] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 220.417576][ T9273] ? alloc_pages_mpol+0x3cd/0x4a0 [ 220.417606][ T9273] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.417641][ T9273] ? rcu_is_watching+0x15/0xb0 [ 220.417664][ T9273] ? hash_ipport_create+0x741/0x1410 [ 220.417688][ T9273] ? hash_ipport_create+0x741/0x1410 [ 220.417712][ T9273] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 220.417740][ T9273] ? hash_ipport_create+0x741/0x1410 [ 220.417768][ T9273] ? hash_ipport_create+0x6d5/0x1410 [ 220.417802][ T9273] hash_ipport_create+0x741/0x1410 [ 220.417829][ T9273] ? __lock_acquire+0xab9/0xd20 [ 220.417876][ T9273] ? __pfx_hash_ipport_create+0x10/0x10 [ 220.417908][ T9273] ? __nla_parse+0x40/0x60 [ 220.417946][ T9273] ? __pfx_hash_ipport_create+0x10/0x10 [ 220.417977][ T9273] ip_set_create+0xa94/0x1940 [ 220.418002][ T9273] ? ip_set_create+0x4a2/0x1940 [ 220.418040][ T9273] ? __pfx_ip_set_create+0x10/0x10 [ 220.418111][ T9273] nfnetlink_rcv_msg+0xb4a/0x1130 [ 220.418146][ T9273] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 220.418195][ T9273] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 220.418218][ T9273] ? kasan_save_free_info+0x46/0x50 [ 220.418301][ T9273] netlink_rcv_skb+0x205/0x470 [ 220.418332][ T9273] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 220.418359][ T9273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.418400][ T9273] ? bpf_lsm_capable+0x9/0x20 [ 220.418425][ T9273] ? security_capable+0x7e/0x2e0 [ 220.418468][ T9273] nfnetlink_rcv+0x26a/0x2520 [ 220.418498][ T9273] ? __dev_queue_xmit+0x1d79/0x3b50 [ 220.418535][ T9273] ? __dev_queue_xmit+0x27b/0x3b50 [ 220.418573][ T9273] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 220.418598][ T9273] ? __pfx___dev_queue_xmit+0x10/0x10 [ 220.418638][ T9273] ? ref_tracker_free+0x63a/0x7d0 [ 220.418666][ T9273] ? __asan_memcpy+0x40/0x70 [ 220.418686][ T9273] ? __pfx_ref_tracker_free+0x10/0x10 [ 220.418724][ T9273] ? skb_clone+0x246/0x3a0 [ 220.418746][ T9273] ? __netlink_deliver_tap+0x807/0x850 [ 220.418773][ T9273] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.418810][ T9273] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.418848][ T9273] netlink_unicast+0x82f/0x9e0 [ 220.418886][ T9273] ? __pfx_netlink_unicast+0x10/0x10 [ 220.418915][ T9273] ? netlink_sendmsg+0x642/0xb30 [ 220.418949][ T9273] ? skb_put+0x11b/0x210 [ 220.418972][ T9273] netlink_sendmsg+0x805/0xb30 [ 220.419014][ T9273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.419047][ T9273] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.419080][ T9273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.419101][ T9273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.419131][ T9273] __sock_sendmsg+0x219/0x270 [ 220.419160][ T9273] ____sys_sendmsg+0x505/0x830 [ 220.419189][ T9273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.419222][ T9273] ? import_iovec+0x74/0xa0 [ 220.419250][ T9273] ___sys_sendmsg+0x21f/0x2a0 [ 220.419274][ T9273] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.419343][ T9273] ? __fget_files+0x2a/0x420 [ 220.419371][ T9273] ? __fget_files+0x3a0/0x420 [ 220.419414][ T9273] __x64_sys_sendmsg+0x19b/0x260 [ 220.419438][ T9273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.419473][ T9273] ? rcu_is_watching+0x15/0xb0 [ 220.419500][ T9273] ? do_syscall_64+0xbe/0x3b0 [ 220.419536][ T9273] do_syscall_64+0xfa/0x3b0 [ 220.419585][ T9273] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.419611][ T9273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.419631][ T9273] ? clear_bhb_loop+0x60/0xb0 [ 220.419656][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.419675][ T9273] RIP: 0033:0x7f44b3f8ebe9 [ 220.419694][ T9273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.419711][ T9273] RSP: 002b:00007f44b4d99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.419734][ T9273] RAX: ffffffffffffffda RBX: 00007f44b41b6180 RCX: 00007f44b3f8ebe9 [ 220.419749][ T9273] RDX: 0000000000004020 RSI: 0000200000000280 RDI: 000000000000000a [ 220.419761][ T9273] RBP: 00007f44b4011e19 R08: 0000000000000000 R09: 0000000000000000 [ 220.419774][ T9273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.419786][ T9273] R13: 00007f44b41b6218 R14: 00007f44b41b6180 R15: 00007ffc7a35b908 [ 220.419821][ T9273] [ 220.956397][ T9273] Mem-Info: [ 220.968594][ T9273] active_anon:5402 inactive_anon:0 isolated_anon:0 [ 220.968594][ T9273] active_file:2829 inactive_file:39868 isolated_file:0 [ 220.968594][ T9273] unevictable:768 dirty:51 writeback:0 [ 220.968594][ T9273] slab_reclaimable:11049 slab_unreclaimable:103413 [ 220.968594][ T9273] mapped:28989 shmem:2425 pagetables:991 [ 220.968594][ T9273] sec_pagetables:0 bounce:0 [ 220.968594][ T9273] kernel_misc_reclaimable:0 [ 220.968594][ T9273] free:1320900 free_pcp:15198 free_cma:0 [ 221.023959][ T9283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.902'. [ 221.058909][ T9273] Node 0 active_anon:27308kB inactive_anon:0kB active_file:11316kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115956kB dirty:204kB writeback:0kB shmem:13664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12840kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.130871][ T9273] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.161812][ T9273] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.194171][ T9273] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 221.203205][ T9273] Node 0 DMA32 free:1374056kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29964kB inactive_anon:0kB active_file:11316kB inactive_file:157704kB unevictable:1536kB writepending:204kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:43012kB local_pcp:27460kB free_cma:0kB [ 221.237089][ T9273] lowmem_reserve[]: 0 0 1 1 1 [ 221.242756][ T9273] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 221.272495][ T9273] lowmem_reserve[]: 0 0 0 0 0 [ 221.277264][ T9273] Node 1 Normal free:3882060kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21920kB local_pcp:10496kB free_cma:0kB [ 221.309813][ T9273] lowmem_reserve[]: 0 0 0 0 0 [ 221.314585][ T9273] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 221.327912][ T9273] Node 0 DMA32: 1*4kB (E) 27*8kB (U) 5*16kB (UME) 77*32kB (UME) 76*64kB (UME) 43*128kB (UM) 18*256kB (ME) 7*512kB (UME) 1*1024kB (U) 6*2048kB (UME) 327*4096kB (UM) = 1374028kB [ 221.352298][ T9273] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 221.364887][ T9273] Node 1 Normal: 247*4kB (UE) 72*8kB (UME) 55*16kB (UME) 54*32kB (UME) 20*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3882060kB [ 221.386652][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 221.389229][ T9273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.405955][ T9273] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.415895][ T9273] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.427250][ T9273] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.435035][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 221.437535][ T9273] 45919 total pagecache pages [ 221.451595][ T9273] 0 pages in swap cache [ 221.455788][ T9273] Free swap = 124996kB [ 221.460817][ T9273] Total swap = 124996kB [ 221.465004][ T9273] 2097051 pages RAM [ 221.471924][ T9273] 0 pages HighMem/MovableOnly [ 221.476677][ T9273] 425656 pages reserved [ 221.481483][ T9273] 0 pages cma reserved [ 221.573693][ T9290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.906'. [ 221.740586][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'. [ 221.866334][ T9309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'. [ 222.037172][ T9320] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 222.170424][ T9323] netlink: 76 bytes leftover after parsing attributes in process `syz.3.916'. [ 222.266843][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 222.277444][ C0] vcan0: j1939_session_tx_dat: 0xffff888142ba5800: queue data error: -100 [ 222.286357][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 222.294001][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 222.301755][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.309801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.317770][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.325809][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.333764][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.341700][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.349804][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.357729][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.365792][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.373731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.381780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.389899][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.398000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.406023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.413988][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.421853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.429920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.438063][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.446318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.454298][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.462508][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.470666][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.478780][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.486668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.494688][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.502691][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.510814][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.518826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.526754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.534797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.542867][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.550852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.559330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.567256][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.575399][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.583285][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.591523][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.599400][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.607532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.615432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.623497][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.631800][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.640017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.647832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.655881][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.663774][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.671811][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.679731][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.687702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.695575][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.703542][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.711439][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.719440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.727365][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.735445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.743336][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.751326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.759194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.767097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.775034][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.783067][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.791073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.799082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.807037][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.815035][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.822911][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.830990][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.838864][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.846845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.854823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.862891][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.870797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.878802][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.886773][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.894889][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.902936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.911020][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.919162][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.927793][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.935751][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.944064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.952091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.960577][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.968482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.976428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.984470][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.992604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.000471][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.008619][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.016572][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.024558][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.032522][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.040766][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.048647][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.056582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.064454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.072444][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.080673][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.089265][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.097353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.105310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.113909][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.121973][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.130023][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.137983][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.146018][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.154020][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.161933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.169940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.177771][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.185760][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.193627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.202408][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.210532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.218575][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.226397][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.234393][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.242274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.250787][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.258661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.266826][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.274791][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.282960][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.290820][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.298925][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.306962][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.586679][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 224.130388][ T51] Bluetooth: hci4: link tx timeout [ 224.130754][ T9367] netlink: 'syz.2.932': attribute type 8 has an invalid length. [ 224.136295][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 224.380168][ T24] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 224.715705][ T9392] netlink: 'syz.1.939': attribute type 13 has an invalid length. [ 225.495404][ T9431] netlink: 10 bytes leftover after parsing attributes in process `syz.1.949'. [ 225.794243][ T9427] netlink: 'syz.3.950': attribute type 16 has an invalid length. [ 225.818905][ T9427] netlink: 'syz.3.950': attribute type 17 has an invalid length. [ 225.846998][ T9427] ifb0: left promiscuous mode [ 225.862681][ T9427] ifb0: left allmulticast mode [ 225.890294][ T9427] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 226.218968][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 226.535282][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 226.812778][ T9485] bridge3: entered promiscuous mode [ 226.824144][ T9485] bridge3: entered allmulticast mode [ 227.004466][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 227.161856][ T9506] netlink: 152064 bytes leftover after parsing attributes in process `syz.2.967'. [ 227.203895][ T9506] netlink: zone id is out of range [ 227.224182][ T9506] netlink: zone id is out of range [ 227.232092][ T9506] netlink: zone id is out of range [ 227.237353][ T9506] netlink: zone id is out of range [ 227.249851][ T9506] netlink: zone id is out of range [ 227.255251][ T9506] netlink: zone id is out of range [ 227.264744][ T9506] netlink: zone id is out of range [ 227.272917][ T9506] netlink: zone id is out of range [ 227.278106][ T9506] netlink: zone id is out of range [ 227.310580][ T9503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 227.529275][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.971'. [ 227.739116][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 227.747169][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 227.757079][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 227.759055][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 227.858675][ T9528] netlink: 'syz.2.974': attribute type 3 has an invalid length. [ 227.960820][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 227.975798][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 228.254868][ T9549] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 228.416414][ T9559] netlink: 232 bytes leftover after parsing attributes in process `syz.1.984'. [ 229.011013][ T9584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.987'. [ 229.082729][ T9588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.090090][ T9588] IPv6: NLM_F_CREATE should be set when creating new route [ 229.097552][ T9588] IPv6: NLM_F_CREATE should be set when creating new route [ 229.105039][ T9588] IPv6: NLM_F_CREATE should be set when creating new route [ 229.174034][ T9588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.806024][ T9607] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 229.835021][ T9607] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 229.845092][ T9607] gretap1: entered promiscuous mode [ 229.865248][ T9607] gretap1: entered allmulticast mode [ 230.104173][ T9630] netlink: 'syz.0.1001': attribute type 1 has an invalid length. [ 230.114737][ T9630] netlink: 'syz.0.1001': attribute type 2 has an invalid length. [ 230.199943][ T9638] vlan2: entered allmulticast mode [ 230.225703][ T9638] gretap0: entered allmulticast mode [ 230.566281][ T9648] __nla_validate_parse: 8 callbacks suppressed [ 230.566306][ T9648] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1006'. [ 230.616460][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 230.660747][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 230.757256][ T9665] pim6reg1: entered promiscuous mode [ 230.771473][ T9665] pim6reg1: entered allmulticast mode [ 230.977462][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 231.003469][ T9679] tc_dump_action: action bad kind [ 231.100125][ T9683] pim6reg1: entered promiscuous mode [ 231.105584][ T9683] pim6reg1: entered allmulticast mode [ 231.150214][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 231.335767][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 231.350250][ T9700] bond0: Error: Cannot enslave bond to itself. [ 231.442170][ T9700] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 231.466243][ T9700] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 231.477330][ T9706] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 231.935576][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 231.939515][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 231.990992][ T9739] netlink: 'syz.4.1034': attribute type 10 has an invalid length. [ 232.574037][ T9765] netlink: 'syz.1.1041': attribute type 1 has an invalid length. [ 232.866140][ T9768] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 232.868347][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 233.013926][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 233.214091][ T9791] netlink: 'syz.1.1049': attribute type 29 has an invalid length. [ 233.223448][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 233.409405][ T9800] netlink: 'syz.4.1051': attribute type 11 has an invalid length. [ 233.440629][ T9800] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 233.452807][ T9800] netlink: 'syz.4.1051': attribute type 29 has an invalid length. [ 233.552216][ T9806] tipc: Enabling of bearer rejected, failed to enable media [ 233.682868][ T9810] macvlan2: entered allmulticast mode [ 233.716671][ T9810] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 235.065333][ T9879] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 235.205072][ T9886] tipc: Invalid UDP bearer configuration [ 235.205135][ T9886] tipc: Enabling of bearer rejected, failed to enable media [ 235.448002][ T9902] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 235.617072][ T9909] __nla_validate_parse: 13 callbacks suppressed [ 235.617094][ T9909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1084'. [ 235.677643][ T9909] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1084'. [ 235.746025][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 235.755201][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1087'. [ 235.887625][ T9919] validate_nla: 2 callbacks suppressed [ 235.887648][ T9919] netlink: 'syz.0.1089': attribute type 83 has an invalid length. [ 235.952182][ T9925] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1090'. [ 236.013085][ T9925] hsr_slave_0: left promiscuous mode [ 236.040486][ T9925] hsr_slave_1: left promiscuous mode [ 236.205369][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 236.261873][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 236.315291][ T9938] netlink: 'syz.0.1091': attribute type 14 has an invalid length. [ 236.341787][ T9938] netlink: 'syz.0.1091': attribute type 13 has an invalid length. [ 236.875195][ T9964] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1094'. [ 237.410576][ T9996] gtp0: entered promiscuous mode [ 237.515552][ T5956] wg1 speed is unknown, defaulting to 1000 [ 238.454099][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1114'. [ 238.518674][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1114'. [ 239.740343][T10092] net_ratelimit: 223 callbacks suppressed [ 239.740366][T10092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.012196][T10104] erspan0: entered allmulticast mode [ 240.355012][T10123] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 240.392297][T10123] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 240.859520][T10146] __nla_validate_parse: 12 callbacks suppressed [ 240.859542][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 241.105926][T10157] veth5: entered allmulticast mode [ 241.122681][T10161] netlink: 'syz.4.1156': attribute type 10 has an invalid length. [ 241.148854][T10161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1156'. [ 241.236777][T10166] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.1157'. [ 241.272518][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 241.274196][T10168] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.1157'. [ 241.284210][T10161] team0: Port device geneve0 added [ 241.638501][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 241.850618][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 241.912498][T10201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1165'. [ 241.950519][T10201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1165'. [ 242.387020][T10228] netlink: 'syz.0.1172': attribute type 2 has an invalid length. [ 242.409244][T10228] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1172'. [ 242.482532][T10234] openvswitch: netlink: Flow actions attr not present in new flow. [ 242.506515][T10234] Unsupported ieee802154 address type: 0 [ 242.673667][T10240] netlink: 'syz.2.1176': attribute type 33 has an invalid length. [ 242.759615][T10240] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 242.930141][T10254] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 242.945002][T10254] bond1: (slave vcan1): Error -95 calling set_mac_address [ 243.061604][T10268] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 246.357274][T10300] __nla_validate_parse: 9 callbacks suppressed [ 246.357296][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 246.523964][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1196'. [ 246.572591][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1196'. [ 246.675578][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 246.711555][T10300] macvtap2: entered promiscuous mode [ 246.717099][T10300] vlan0: entered promiscuous mode [ 246.743993][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 246.792930][T10300] macvtap2: entered allmulticast mode [ 246.806995][T10300] vlan0: entered allmulticast mode [ 246.819611][T10300] veth0_vlan: entered allmulticast mode [ 246.911588][T10308] pim6reg1: entered promiscuous mode [ 246.917146][T10328] netlink: 'syz.0.1200': attribute type 10 has an invalid length. [ 246.933521][T10308] pim6reg1: entered allmulticast mode [ 247.053582][T10328] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 247.067660][T10328] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.149674][T10343] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 247.157162][T10343] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 247.174050][ T6277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.187614][ T6277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.387144][T10357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.553046][T10368] netlink: 'syz.2.1208': attribute type 4 has an invalid length. [ 247.597007][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1210'. [ 247.852564][T10381] tipc: Started in network mode [ 247.861464][T10381] tipc: Node identity 961c4d1994eb, cluster identity 4711 [ 247.873034][T10381] tipc: Enabled bearer , priority 0 [ 248.043807][T10393] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 248.057347][T10381] tipc: Disabling bearer [ 248.077830][T10395] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1215'. [ 248.169715][T10395] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 248.205650][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.4.1215 Not tainted syzkaller #0 PREEMPT(full) [ 248.205690][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.205702][T10395] Call Trace: [ 248.205711][T10395] [ 248.205721][T10395] dump_stack_lvl+0x189/0x250 [ 248.205756][T10395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.205782][T10395] ? __pfx__printk+0x10/0x10 [ 248.205818][T10395] ? kernfs_path_from_node+0x2f/0x290 [ 248.205841][T10395] ? kernfs_path_from_node+0x250/0x290 [ 248.205860][T10395] ? kernfs_path_from_node+0x2f/0x290 [ 248.205888][T10395] sysfs_warn_dup+0x8e/0xa0 [ 248.205910][T10395] sysfs_do_create_link_sd+0xc0/0x110 [ 248.205934][T10395] device_add_class_symlinks+0x1cf/0x240 [ 248.205962][T10395] device_add+0x475/0xb50 [ 248.205989][T10395] wiphy_register+0x1ba6/0x28d0 [ 248.206040][T10395] ? __pfx_wiphy_register+0x10/0x10 [ 248.206066][T10395] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 248.206096][T10395] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 248.206135][T10395] ieee80211_register_hw+0x3425/0x4080 [ 248.206179][T10395] ? ieee80211_register_hw+0x1471/0x4080 [ 248.206213][T10395] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 248.206240][T10395] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.206276][T10395] ? __hrtimer_setup+0x187/0x210 [ 248.206296][T10395] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 248.206328][T10395] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 248.206392][T10395] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 248.206416][T10395] ? trace_kmalloc+0x1f/0xd0 [ 248.206439][T10395] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 248.206463][T10395] ? kstrndup+0xbf/0x160 [ 248.206496][T10395] hwsim_new_radio_nl+0xea4/0x1b10 [ 248.206526][T10395] ? __pfx___nla_validate_parse+0x10/0x10 [ 248.206570][T10395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.206613][T10395] ? __nla_parse+0x40/0x60 [ 248.206648][T10395] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 248.206707][T10395] genl_family_rcv_msg_doit+0x212/0x300 [ 248.206741][T10395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.206783][T10395] ? bpf_lsm_capable+0x9/0x20 [ 248.206812][T10395] ? security_capable+0x7e/0x2e0 [ 248.206848][T10395] genl_rcv_msg+0x60e/0x790 [ 248.206877][T10395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.206899][T10395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 248.206944][T10395] netlink_rcv_skb+0x205/0x470 [ 248.206969][T10395] ? __lock_acquire+0xab9/0xd20 [ 248.206998][T10395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.207023][T10395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.207076][T10395] ? down_read+0x1ad/0x2e0 [ 248.207111][T10395] genl_rcv+0x28/0x40 [ 248.207130][T10395] netlink_unicast+0x82f/0x9e0 [ 248.207171][T10395] ? __pfx_netlink_unicast+0x10/0x10 [ 248.207201][T10395] ? netlink_sendmsg+0x642/0xb30 [ 248.207227][T10395] ? skb_put+0x11b/0x210 [ 248.207251][T10395] netlink_sendmsg+0x805/0xb30 [ 248.207292][T10395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.207327][T10395] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.207361][T10395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.207383][T10395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.207414][T10395] __sock_sendmsg+0x219/0x270 [ 248.207442][T10395] ____sys_sendmsg+0x505/0x830 [ 248.207472][T10395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.207506][T10395] ? import_iovec+0x74/0xa0 [ 248.207535][T10395] ___sys_sendmsg+0x21f/0x2a0 [ 248.207560][T10395] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.207631][T10395] ? __fget_files+0x2a/0x420 [ 248.207660][T10395] ? __fget_files+0x3a0/0x420 [ 248.207769][T10395] __x64_sys_sendmsg+0x19b/0x260 [ 248.207797][T10395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.207833][T10395] ? rcu_is_watching+0x15/0xb0 [ 248.207861][T10395] ? do_syscall_64+0xbe/0x3b0 [ 248.207897][T10395] do_syscall_64+0xfa/0x3b0 [ 248.207924][T10395] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.207950][T10395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.207972][T10395] ? clear_bhb_loop+0x60/0xb0 [ 248.207999][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.208018][T10395] RIP: 0033:0x7f44b3f8ebe9 [ 248.208046][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.208064][T10395] RSP: 002b:00007f44b4ddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.208088][T10395] RAX: ffffffffffffffda RBX: 00007f44b41b5fa0 RCX: 00007f44b3f8ebe9 [ 248.208103][T10395] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 248.208116][T10395] RBP: 00007f44b4011e19 R08: 0000000000000000 R09: 0000000000000000 [ 248.208129][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.208141][T10395] R13: 00007f44b41b6038 R14: 00007f44b41b5fa0 R15: 00007ffc7a35b908 [ 248.208178][T10395] [ 248.255031][T10404] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 248.363045][T10407] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1221'. [ 248.737663][T10404] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 249.127375][T10429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.174741][T10437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.226483][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 249.317425][T10441] pim6reg: entered allmulticast mode [ 249.387182][T10445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.420772][T10447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1235'. [ 249.433990][T10445] unknown channel width for channel at 909000KHz? [ 249.586438][T10458] IPVS: Unknown mcast interface: vcan0 [ 249.664752][T10466] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 249.664859][T10467] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 249.704205][T10465] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.465033][T10497] netlink: 'syz.4.1251': attribute type 4 has an invalid length. [ 250.485733][T10497] bridge_slave_0: left allmulticast mode [ 250.492891][T10497] bridge_slave_0: left promiscuous mode [ 250.499396][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.278949][T10514] pim6reg1: entered promiscuous mode [ 251.287063][T10514] pim6reg1: entered allmulticast mode [ 251.393914][T10527] __nla_validate_parse: 6 callbacks suppressed [ 251.393937][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1260'. [ 251.441273][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 252.262535][T10563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.327289][T10566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.924657][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 252.996994][T10590] bond0: entered promiscuous mode [ 253.007196][T10590] bond_slave_0: entered promiscuous mode [ 253.021567][T10590] bond_slave_1: entered promiscuous mode [ 253.027527][T10590] bridge_slave_1: entered promiscuous mode [ 253.043884][T10590] batadv0: entered promiscuous mode [ 253.056191][T10590] batadv0: left promiscuous mode [ 253.069991][T10590] bond0: left promiscuous mode [ 253.075279][T10590] bond_slave_0: left promiscuous mode [ 253.087223][T10590] bond_slave_1: left promiscuous mode [ 253.097084][T10590] bridge_slave_1: left promiscuous mode [ 253.200532][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1282'. [ 253.328650][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'. [ 253.586806][T10621] netlink: 'syz.4.1289': attribute type 13 has an invalid length. [ 253.598607][T10621] lo: entered promiscuous mode [ 253.604504][T10621] lo: entered allmulticast mode [ 253.624309][T10621] tunl0: entered promiscuous mode [ 253.632443][T10621] tunl0: entered allmulticast mode [ 253.643388][T10621] gre0: entered promiscuous mode [ 253.650981][T10621] gre0: entered allmulticast mode [ 253.703219][T10621] gretap0: entered promiscuous mode [ 253.719916][T10621] gretap0: entered allmulticast mode [ 253.735638][T10621] gretap0: refused to change device tx_queue_len [ 253.746023][T10621] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.878170][T10627] bond0: (slave wlan1): Releasing backup interface [ 253.886162][T10627] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 253.927167][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 254.182165][T10643] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 254.267783][T10650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.300707][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1296'. [ 254.381543][T10657] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 254.415849][T10659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.535345][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 254.584961][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 254.710424][T10672] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 254.858874][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 254.946048][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1302'. [ 255.751203][T10715] netlink: 'syz.2.1314': attribute type 4 has an invalid length. [ 255.969828][T10727] netlink: 'syz.4.1321': attribute type 21 has an invalid length. [ 256.129550][ T30] audit: type=1800 audit(1755857916.180:3): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1322" name="memory.events" dev="tmpfs" ino=1317 res=0 errno=0 [ 256.284185][T10730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.450569][T10746] __nla_validate_parse: 3 callbacks suppressed [ 256.450590][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 256.803578][T10762] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1332'. [ 256.878149][T10767] netlink: 'syz.3.1333': attribute type 18 has an invalid length. [ 256.997585][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 257.471854][T10798] unsupported nla_type 52263 [ 257.496915][T10800] netlink: 'syz.1.1344': attribute type 10 has an invalid length. [ 257.522919][T10800] bridge0: port 3(team0) entered blocking state [ 257.532857][T10800] bridge0: port 3(team0) entered disabled state [ 257.544085][T10798] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 257.557031][T10800] team0: entered allmulticast mode [ 257.567012][T10800] team_slave_0: entered allmulticast mode [ 257.583406][T10800] team_slave_1: entered allmulticast mode [ 257.596719][T10800] team0: entered promiscuous mode [ 257.606450][T10800] team_slave_0: entered promiscuous mode [ 257.614592][T10800] team_slave_1: entered promiscuous mode [ 257.628459][T10800] bridge0: port 3(team0) entered blocking state [ 257.635031][T10800] bridge0: port 3(team0) entered forwarding state [ 257.777650][T10812] IPVS: Unknown mcast interface: nicvf0 [ 257.789563][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 257.819838][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 257.836776][T10819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1350'. [ 257.917314][T10821] netlink: 'syz.0.1351': attribute type 18 has an invalid length. [ 257.960895][T10821] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 257.973276][T10821] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 257.994589][T10821] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1351'. [ 258.020060][T10821] xt_policy: neither incoming nor outgoing policy selected [ 258.207478][T10834] sctp: [Deprecated]: syz.4.1353 (pid 10834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.207478][T10834] Use struct sctp_sack_info instead [ 258.218857][T10841] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1355'. [ 258.246397][T10842] netlink: 'syz.0.1356': attribute type 10 has an invalid length. [ 258.247530][T10834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.296915][T10842] team0: Device ipvlan1 failed to register rx_handler [ 258.389908][T10848] netlink: 'syz.0.1356': attribute type 1 has an invalid length. [ 258.405123][T10848] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1356'. [ 258.419481][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 259.465019][T10888] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 259.476494][ T5957] IPVS: starting estimator thread 0... [ 259.579204][T10894] IPVS: using max 22 ests per chain, 52800 per kthread [ 259.658407][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 259.789381][T10907] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 260.193051][T10938] openvswitch: netlink: Message has 5 unknown bytes. [ 260.286736][T10938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.122833][T10985] Unsupported ieee802154 address type: 0 [ 261.403474][T11000] IPVS: set_ctl: invalid protocol: 8923 159.135.117.115:3350 [ 261.411764][ T5930] IPVS: starting estimator thread 0... [ 261.512737][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.618854][T11005] IPVS: using max 21 ests per chain, 50400 per kthread [ 261.900514][T11021] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 262.033086][T11021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.224719][T11046] tipc: Enabling of bearer rejected, failed to enable media [ 262.347991][T11051] __nla_validate_parse: 9 callbacks suppressed [ 262.348013][T11051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1414'. [ 262.585082][T11060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1416'. [ 262.908908][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 262.943409][T11079] chnl_net:caif_netlink_parms(): no params data found [ 263.287503][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1425'. [ 263.325114][T11090] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1425'. [ 263.521277][T11104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1430'. [ 263.793810][T11113] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 264.276594][T11147] netlink: 'syz.2.1438': attribute type 16 has an invalid length. [ 264.294933][T11147] netlink: 'syz.2.1438': attribute type 17 has an invalid length. [ 264.388555][T11147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.907117][T11168] macvtap1: entered allmulticast mode [ 264.920042][T11168] veth0_macvtap: entered allmulticast mode [ 265.379782][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'. [ 265.432944][T11190] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 265.624241][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1459'. [ 265.653394][T11199] veth3: entered promiscuous mode [ 265.671746][T11199] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 265.681997][T11200] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1461'. [ 265.697970][T11190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.841775][T11207] syzkaller1: entered promiscuous mode [ 265.849857][T11207] syzkaller1: entered allmulticast mode [ 266.036177][T11214] tipc: Enabling of bearer rejected, media not registered [ 266.713684][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1473'. [ 266.760343][T11243] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 266.795016][T11243] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 266.827500][T11243] netlink: 'syz.2.1473': attribute type 2 has an invalid length. [ 266.920114][T11236] sctp: [Deprecated]: syz.1.1470 (pid 11236) Use of int in max_burst socket option deprecated. [ 266.920114][T11236] Use struct sctp_assoc_value instead [ 267.228400][T11265] netlink: 'syz.3.1479': attribute type 33 has an invalid length. [ 267.350389][T11265] syzkaller0: entered promiscuous mode [ 267.356180][T11265] syzkaller0: entered allmulticast mode [ 269.571226][T11281] tipc: Enabling of bearer rejected, already enabled [ 269.580554][T11291] syzkaller0: entered promiscuous mode [ 269.599394][T11291] syzkaller0: entered allmulticast mode [ 269.861773][T11316] __nla_validate_parse: 5 callbacks suppressed [ 269.861796][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 269.933571][T11319] tipc: Enabled bearer , priority 5 [ 269.952641][T11321] TCP: TCP_TX_DELAY enabled [ 269.960671][T11318] tipc: Enabling of bearer rejected, already enabled [ 270.061777][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 270.164774][T11325] netlink: 'syz.4.1492': attribute type 11 has an invalid length. [ 270.197878][T11326] lo speed is unknown, defaulting to 1000 [ 270.198027][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 270.227219][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 270.364243][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.402990][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.611653][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 270.831348][T11353] netlink: 'syz.1.1498': attribute type 7 has an invalid length. [ 270.855270][T11353] netlink: 'syz.1.1498': attribute type 8 has an invalid length. [ 271.175598][T11326] wg1 speed is unknown, defaulting to 1000 [ 271.198027][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 271.210597][T11326] hsr0 speed is unknown, defaulting to 1000 [ 271.541813][T11388] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 271.551599][T11388] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1506'. [ 271.638636][T11386] tipc: Enabled bearer , priority 10 [ 271.644652][T11388] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 272.012885][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1512'. [ 272.217771][ T24] IPVS: starting estimator thread 0... [ 272.318562][T11442] IPVS: using max 24 ests per chain, 57600 per kthread [ 272.402593][T11445] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1514'. [ 272.748050][T11458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1517'. [ 272.769082][ T9] tipc: Node number set to 2822602681 [ 272.833084][T11467] netlink: 'syz.1.1521': attribute type 10 has an invalid length. [ 273.013612][T11467] bond0: (slave ): Enslaving as an active interface with an up link [ 273.131350][T11469] team0: left allmulticast mode [ 273.140634][T11478] openvswitch: netlink: Flow actions attr not present in new flow. [ 273.157465][T11469] team_slave_0: left allmulticast mode [ 273.166515][T11469] team_slave_1: left allmulticast mode [ 273.173204][T11469] team0: left promiscuous mode [ 273.178133][T11469] team_slave_0: left promiscuous mode [ 273.186482][T11466] nbd2: detected capacity change from 0 to 127 [ 273.193766][T11469] team_slave_1: left promiscuous mode [ 273.207951][T11469] bridge0: port 3(team0) entered disabled state [ 273.223861][T11469] bridge_slave_0: left allmulticast mode [ 273.230268][T11469] bridge_slave_0: left promiscuous mode [ 273.236198][T11469] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.249994][T11469] bridge_slave_1: left allmulticast mode [ 273.259379][T11469] bridge_slave_1: left promiscuous mode [ 273.265316][T11469] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.296364][T11469] bond0: (slave bond_slave_0): Releasing backup interface [ 273.323907][T11469] bond0: (slave bond_slave_1): Releasing backup interface [ 273.342881][T11482] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 273.364300][T11469] team0: Port device team_slave_0 removed [ 273.395643][T11469] team0: Port device team_slave_1 removed [ 273.415228][T11469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.425468][T11469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.445407][T11469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.454480][T11469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.519313][T11469] bond0: (slave ): Releasing backup interface [ 273.562255][T11469] bond2: (slave ip6gretap1): Releasing backup interface [ 273.602089][T11469] bond3: (slave veth3): Releasing backup interface [ 273.656228][ T5184] block nbd2: Receive control failed (result -104) [ 273.672219][T11475] team0: Device gtp0 is of different type [ 273.881652][T11495] netlink: 'syz.4.1529': attribute type 2 has an invalid length. [ 273.928167][T11497] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 512, id = 0 [ 274.016153][T11504] netlink: 'syz.2.1533': attribute type 83 has an invalid length. [ 274.185515][T11513] gretap0: entered promiscuous mode [ 274.226799][T11515] 0{X: renamed from gretap0 [ 274.262686][T11515] 0{X: left promiscuous mode [ 274.278049][T11515] 0{X: entered allmulticast mode [ 274.321976][T11515] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 274.881845][T11553] __nla_validate_parse: 10 callbacks suppressed [ 274.881869][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 274.984106][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 275.011759][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 275.249352][T11575] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 275.559626][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 275.603349][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 275.652009][T11590] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 275.708523][T11590] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1557'. [ 275.767505][T11595] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1558'. [ 275.865900][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 276.219288][T11602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'. [ 276.267256][T11602] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 276.536137][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1567'. [ 276.626696][T11624] bond0: (slave rose0): Error: Device can not be enslaved while up [ 276.688519][T11633] netlink: 'syz.3.1570': attribute type 12 has an invalid length. [ 276.961187][T11648] netlink: 'syz.3.1575': attribute type 33 has an invalid length. [ 277.015036][T11653] netlink: 'syz.0.1576': attribute type 33 has an invalid length. [ 278.366003][T11726] netlink: 'syz.2.1596': attribute type 1 has an invalid length. [ 278.693984][T11744] netlink: 'syz.2.1600': attribute type 10 has an invalid length. [ 278.772836][T11745] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 278.896233][T11743] lo speed is unknown, defaulting to 1000 [ 278.964021][T11753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.486013][T11743] wg1 speed is unknown, defaulting to 1000 [ 279.510638][T11743] hsr0 speed is unknown, defaulting to 1000 [ 280.000736][T11767] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 280.028557][T11767] __nla_validate_parse: 9 callbacks suppressed [ 280.028579][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 280.135347][T11778] sctp: [Deprecated]: syz.4.1607 (pid 11778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.135347][T11778] Use struct sctp_sack_info instead [ 280.319790][T11786] netlink: 'syz.4.1612': attribute type 3 has an invalid length. [ 280.327618][T11786] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1612'. [ 280.427997][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 280.474302][T11781] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1608'. [ 280.584900][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 281.412599][T11830] sctp: [Deprecated]: syz.3.1622 (pid 11830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.412599][T11830] Use struct sctp_sack_info instead [ 281.542682][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 281.654802][T11836] can: request_module (can-proto-0) failed. [ 282.127650][T11858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1632'. [ 282.346458][T11870] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 282.352587][T11871] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 282.365519][T11867] sch_fq: defrate 0 ignored. [ 282.375521][T11867] netlink: 'syz.2.1635': attribute type 21 has an invalid length. [ 282.406346][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1636'. [ 282.439318][T11870] bond2: entered promiscuous mode [ 282.455106][T11870] bond2: entered allmulticast mode [ 282.465078][T11870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.756403][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1643'. [ 282.790955][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 282.825413][T11900] wlan1: mtu less than device minimum [ 282.993341][T11912] gretap2: entered promiscuous mode [ 282.999535][T11912] gretap2: entered allmulticast mode [ 283.081246][T11916] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 283.348926][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 283.873122][T11945] macvtap1: entered promiscuous mode [ 283.879233][T11945] vlan0: entered promiscuous mode [ 283.884881][T11945] macvtap1: entered allmulticast mode [ 283.891161][T11945] vlan0: entered allmulticast mode [ 283.897090][T11945] veth0_vlan: entered allmulticast mode [ 285.278186][T12005] ip6erspan0: entered promiscuous mode [ 285.357372][T12012] __nla_validate_parse: 13 callbacks suppressed [ 285.357394][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1677'. [ 285.412827][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 285.446387][T12012] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 285.661082][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1677'. [ 285.723110][T12010] lo speed is unknown, defaulting to 1000 [ 286.119161][T12044] syz_tun: entered allmulticast mode [ 286.168950][T12044] netlink: 816 bytes leftover after parsing attributes in process `syz.1.1685'. [ 286.382050][T12049] netlink: 'syz.2.1688': attribute type 18 has an invalid length. [ 286.442290][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 286.456385][T12037] syz_tun: left allmulticast mode [ 286.658686][T12057] 8021q: VLANs not supported on ip_vti0 [ 287.096956][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1695'. [ 287.120677][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 287.161621][T12076] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 287.401185][T12076] bond4 (unregistering): Released all slaves [ 287.569471][T12010] wg1 speed is unknown, defaulting to 1000 [ 287.597378][T12010] hsr0 speed is unknown, defaulting to 1000 [ 287.603829][T12099] tipc: Enabling of bearer rejected, already enabled [ 287.781258][T12105] veth1_to_bond: entered allmulticast mode [ 287.985049][T12103] veth1_to_bond: left allmulticast mode [ 288.136514][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 288.367987][T12125] FAULT_INJECTION: forcing a failure. [ 288.367987][T12125] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 288.368515][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 288.400765][T12125] CPU: 1 UID: 0 PID: 12125 Comm: syz.2.1708 Not tainted syzkaller #0 PREEMPT(full) [ 288.400796][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.400809][T12125] Call Trace: [ 288.400818][T12125] [ 288.400826][T12125] dump_stack_lvl+0x189/0x250 [ 288.400858][T12125] ? __pfx____ratelimit+0x10/0x10 [ 288.400886][T12125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.400910][T12125] ? __pfx__printk+0x10/0x10 [ 288.400955][T12125] should_fail_ex+0x414/0x560 [ 288.400998][T12125] _copy_to_user+0x31/0xb0 [ 288.401030][T12125] simple_read_from_buffer+0xe1/0x170 [ 288.401066][T12125] proc_fail_nth_read+0x1b3/0x220 [ 288.401093][T12125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.401119][T12125] ? rw_verify_area+0x2a6/0x4d0 [ 288.401143][T12125] ? __lock_acquire+0xab9/0xd20 [ 288.401169][T12125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.401194][T12125] vfs_read+0x200/0xa30 [ 288.401217][T12125] ? fdget_pos+0x247/0x320 [ 288.401241][T12125] ? __pfx___mutex_lock+0x10/0x10 [ 288.401270][T12125] ? __pfx_vfs_read+0x10/0x10 [ 288.401299][T12125] ? __fget_files+0x2a/0x420 [ 288.401334][T12125] ? __fget_files+0x3a0/0x420 [ 288.401361][T12125] ? __fget_files+0x2a/0x420 [ 288.401401][T12125] ksys_read+0x145/0x250 [ 288.401431][T12125] ? __pfx_ksys_read+0x10/0x10 [ 288.401453][T12125] ? rcu_is_watching+0x15/0xb0 [ 288.401481][T12125] ? do_syscall_64+0xbe/0x3b0 [ 288.401515][T12125] do_syscall_64+0xfa/0x3b0 [ 288.401540][T12125] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.401566][T12125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.401585][T12125] ? clear_bhb_loop+0x60/0xb0 [ 288.401612][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.401632][T12125] RIP: 0033:0x7f9a4398d5fc [ 288.401652][T12125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.401671][T12125] RSP: 002b:00007f9a4481e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.401693][T12125] RAX: ffffffffffffffda RBX: 00007f9a43bb5fa0 RCX: 00007f9a4398d5fc [ 288.401708][T12125] RDX: 000000000000000f RSI: 00007f9a4481e0a0 RDI: 0000000000000004 [ 288.401721][T12125] RBP: 00007f9a4481e090 R08: 0000000000000000 R09: 0000000000000000 [ 288.401733][T12125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.401745][T12125] R13: 00007f9a43bb6038 R14: 00007f9a43bb5fa0 R15: 00007ffdfea6d398 [ 288.401781][T12125] [ 288.654635][T12127] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 289.002971][T12141] pim6reg1: entered promiscuous mode [ 289.031591][T12141] pim6reg1: entered allmulticast mode [ 289.366351][T12160] netlink: 212172 bytes leftover after parsing attributes in process `syz.1.1715'. [ 289.865168][T12185] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 290.116909][T12196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.263736][T12209] netlink: 'syz.2.1729': attribute type 29 has an invalid length. [ 290.276736][T12209] netlink: 'syz.2.1729': attribute type 29 has an invalid length. [ 290.341266][T12209] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 290.416606][T12209] __nla_validate_parse: 4 callbacks suppressed [ 290.416628][T12209] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1729'. [ 290.817236][ T6293] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82 [ 290.843113][T12241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 290.858591][T12242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 290.902214][T12241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 291.086433][T12253] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 291.123339][T12253] netlink: 'syz.3.1740': attribute type 2 has an invalid length. [ 291.153674][T12253] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 291.393590][T12261] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1743'. [ 291.467973][T12269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1746'. [ 291.749590][T12283] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 291.941653][T12288] tipc: Started in network mode [ 291.946716][T12288] tipc: Node identity bae38f9829dc, cluster identity 4711 [ 291.958609][T12288] tipc: Enabled bearer , priority 0 [ 291.968125][T12288] syzkaller0: entered promiscuous mode [ 291.974136][T12288] syzkaller0: entered allmulticast mode [ 291.995261][T12288] tipc: Resetting bearer [ 292.154223][T12301] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1756'. [ 292.213059][T12287] tipc: Resetting bearer [ 292.264942][T12287] tipc: Disabling bearer [ 292.313136][T12302] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 292.362196][T12303] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 292.460436][T12308] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1758'. [ 292.554549][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 292.556717][T12313] netlink: 'syz.4.1760': attribute type 8 has an invalid length. [ 293.116362][T12342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1770'. [ 293.280126][T12351] netlink: 'syz.1.1771': attribute type 21 has an invalid length. [ 293.602210][T12363] pim6reg1: entered promiscuous mode [ 293.617530][T12363] pim6reg1: entered allmulticast mode [ 295.020310][T12443] netlink: 'syz.1.1791': attribute type 15 has an invalid length. [ 295.509527][T12467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.746560][T12482] __nla_validate_parse: 9 callbacks suppressed [ 295.746581][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1800'. [ 296.011532][T12496] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1809'. [ 296.028137][T12495] netlink: 'syz.0.1807': attribute type 9 has an invalid length. [ 296.041951][T12498] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 296.111248][T12498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1808'. [ 296.174440][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 296.320529][T12512] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1812'. [ 296.329567][T12513] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 296.337566][T12513] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1813'. [ 296.670137][T12527] pim6reg1: entered promiscuous mode [ 296.676830][T12527] pim6reg1: entered allmulticast mode [ 296.694844][T12529] nbd: socks must be embedded in a SOCK_ITEM attr [ 296.705999][T12531] netlink: 'syz.4.1818': attribute type 2 has an invalid length. [ 296.892159][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 297.082378][T12543] netlink: 'syz.4.1819': attribute type 83 has an invalid length. [ 297.175717][T12543] netlink: 'syz.4.1819': attribute type 12 has an invalid length. [ 297.203815][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 297.226074][T12542] macvlan3: entered promiscuous mode [ 297.254018][T12542] macvlan3: entered allmulticast mode [ 297.265944][T12545] openvswitch: netlink: IPv4 tun info is not correct [ 297.267087][T12542] veth1_to_bond: entered promiscuous mode [ 297.291518][T12542] veth1_to_bond: entered allmulticast mode [ 297.308144][T12542] team0: Port device macvlan3 added [ 297.342796][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1820'. [ 297.536206][T12560] netlink: 'syz.1.1826': attribute type 33 has an invalid length. [ 297.544922][T12560] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 297.786820][T12571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'. [ 297.876158][T12571] netlink: 'syz.2.1830': attribute type 30 has an invalid length. [ 298.119016][T12587] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 298.150869][T12587] netlink: 'syz.1.1835': attribute type 1 has an invalid length. [ 298.178443][T12587] netlink: 'syz.1.1835': attribute type 10 has an invalid length. [ 298.320235][T12589] team1: entered promiscuous mode [ 298.334111][T12589] team1: entered allmulticast mode [ 298.468932][T12603] netlink: 'syz.1.1842': attribute type 4 has an invalid length. [ 298.676596][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.676596][T12617] Use struct sctp_sack_info instead [ 298.723316][T12616] netlink: 'syz.2.1845': attribute type 10 has an invalid length. [ 298.734065][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.734065][T12617] Use struct sctp_sack_info instead [ 298.801921][T12616] team0: Device veth1_macvtap failed to register rx_handler [ 298.838362][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.838362][T12617] Use struct sctp_sack_info instead [ 298.912905][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.912905][T12617] Use struct sctp_sack_info instead [ 298.974993][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.974993][T12617] Use struct sctp_sack_info instead [ 299.031617][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.031617][T12617] Use struct sctp_sack_info instead [ 299.075351][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.075351][T12617] Use struct sctp_sack_info instead [ 299.143910][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.143910][T12617] Use struct sctp_sack_info instead [ 299.197698][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.197698][T12617] Use struct sctp_sack_info instead [ 299.278076][T12617] sctp: [Deprecated]: syz.2.1845 (pid 12617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.278076][T12617] Use struct sctp_sack_info instead [ 299.754153][T12665] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 300.641213][T12702] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 300.792243][T12709] netlink: 'syz.1.1867': attribute type 23 has an invalid length. [ 300.795519][T12708] __nla_validate_parse: 14 callbacks suppressed [ 300.795538][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1868'. [ 301.263611][T12729] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1877'. [ 301.365903][T12734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.373306][T12734] IPv6: NLM_F_CREATE should be set when creating new route [ 301.446111][T12729] tipc: Enabled bearer , priority 0 [ 301.467542][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 301.480705][T12729] syzkaller0: entered promiscuous mode [ 301.494443][T12729] syzkaller0: entered allmulticast mode [ 301.581229][T12727] tipc: Resetting bearer [ 301.660724][T12727] tipc: Disabling bearer [ 301.741023][T12750] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 302.963860][T12795] tipc: Enabled bearer , priority 0 [ 302.975735][T12795] syzkaller0: entered promiscuous mode [ 302.983067][T12795] syzkaller0: entered allmulticast mode [ 303.011400][T12795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1896'. [ 303.050305][T12795] tipc: Resetting bearer [ 303.071996][T12802] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 303.110036][T12802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1898'. [ 303.132630][T12805] tipc: Resetting bearer [ 303.200436][T12805] tipc: Disabling bearer [ 303.241550][T12802] team0: Port device geneve0 added [ 303.270953][T12810] pim6reg: entered allmulticast mode [ 303.687311][T12836] netlink: 'syz.0.1910': attribute type 10 has an invalid length. [ 303.708119][T12837] lo: MTU too low for tipc bearer [ 303.718348][T12837] tipc: Enabling of bearer rejected, failed to enable media [ 303.737741][T12836] batman_adv: batadv0: Adding interface: team0 [ 303.744788][ T96] block nbd2: Possible stuck request ffff888024f95080: control (read@0,1024B). Runtime 30 seconds [ 303.757300][ T96] block nbd2: Possible stuck request ffff888024f95240: control (read@1024,1024B). Runtime 30 seconds [ 303.769866][ T96] block nbd2: Possible stuck request ffff888024f95400: control (read@2048,1024B). Runtime 30 seconds [ 303.770695][T12836] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.781113][ T96] block nbd2: Possible stuck request ffff888024f955c0: control (read@3072,1024B). Runtime 30 seconds [ 303.818407][T12836] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 322.941325][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.465361][T12857] IPVS: stopping backup sync thread 9902 ... [ 326.490813][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 326.528386][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 326.605687][ T3505] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.646741][ T3505] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.682713][ T3505] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.694441][T12867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1917'. [ 326.700638][ T3505] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.766388][T12874] netlink: 'syz.0.1919': attribute type 11 has an invalid length. [ 326.817333][T12874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1919'. [ 327.065454][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 327.161833][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 328.080221][T12934] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 328.392977][T12949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1939'. [ 328.425726][T12949] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1939'. [ 328.445800][T12949] netlink: 'syz.0.1939': attribute type 6 has an invalid length. [ 328.471745][T12949] netlink: 'syz.0.1939': attribute type 5 has an invalid length. [ 328.483830][T12949] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1939'. [ 328.517936][T12952] netlink: 'syz.1.1940': attribute type 2 has an invalid length. [ 328.542359][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 328.812153][T12967] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.938750][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 329.444907][T12989] netlink: 'syz.0.1949': attribute type 1 has an invalid length. [ 329.815953][T12998] nbd: illegal input index -8454144 [ 329.916401][T13007] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 330.277738][T13025] lo speed is unknown, defaulting to 1000 [ 330.721013][T13050] netlink: 'syz.2.1968': attribute type 29 has an invalid length. [ 330.998821][T13025] wg1 speed is unknown, defaulting to 1000 [ 331.007359][T13025] hsr0 speed is unknown, defaulting to 1000 [ 331.342072][T13079] netlink: 'syz.4.1974': attribute type 9 has an invalid length. [ 331.717116][T13099] __nla_validate_parse: 9 callbacks suppressed [ 331.717139][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 331.929764][T13106] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1980'. [ 331.994818][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 332.080406][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1981'. [ 332.092427][T13099] hsr_slave_1 (unregistering): left promiscuous mode [ 332.171585][T13109] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1982'. [ 332.227370][T13109] netlink: 'syz.1.1982': attribute type 1 has an invalid length. [ 332.476503][T13121] IPv6: sit1: Disabled Multicast RS [ 332.494095][T13127] netlink: 'syz.4.1986': attribute type 1 has an invalid length. [ 332.504916][T13121] sit1: entered allmulticast mode [ 332.574456][T13130] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.584628][T13130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.861554][T13143] tipc: Enabling of bearer rejected, already enabled [ 332.948057][T13143] tipc: Resetting bearer [ 333.167114][T13155] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1995'. [ 333.238961][T13156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1995'. [ 333.274002][T13168] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1995'. [ 333.496967][T13178] team0: Device gtp1 is of different type [ 333.658104][T13187] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 333.857300][ T96] block nbd2: Possible stuck request ffff888024f95080: control (read@0,1024B). Runtime 60 seconds [ 333.869108][ T96] block nbd2: Possible stuck request ffff888024f95240: control (read@1024,1024B). Runtime 60 seconds [ 333.880654][ T96] block nbd2: Possible stuck request ffff888024f95400: control (read@2048,1024B). Runtime 60 seconds [ 333.892495][ T96] block nbd2: Possible stuck request ffff888024f955c0: control (read@3072,1024B). Runtime 60 seconds [ 333.952819][T13188] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2006'. [ 334.093843][T13189] bond4: (slave gretap1): making interface the new active one [ 334.134180][T13189] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 334.226802][T13208] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2011'. [ 334.451029][T13220] netlink: 'syz.1.2014': attribute type 30 has an invalid length. [ 334.469451][T13220] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 334.490016][T13220] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 335.636028][T13273] bridge0: port 1(vlan0) entered blocking state [ 335.665498][T13273] bridge0: port 1(vlan0) entered disabled state [ 335.673264][T13273] vlan0: entered allmulticast mode [ 335.679045][T13273] bridge0: entered allmulticast mode [ 335.701679][T13273] vlan0: left allmulticast mode [ 335.707745][T13273] bridge0: left allmulticast mode [ 336.257142][T13303] macvlan2: entered promiscuous mode [ 336.276212][T13303] macvlan2: entered allmulticast mode [ 336.323127][T13305] Unsupported xt match [ 336.323152][T13305] unable to load match [ 336.747537][T13328] __nla_validate_parse: 15 callbacks suppressed [ 336.747560][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2051'. [ 336.802505][T13331] netlink: 'syz.4.2052': attribute type 1 has an invalid length. [ 336.859433][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 336.899629][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2052'. [ 336.911036][T13331] 8021q: adding VLAN 0 to HW filter on device bond11 [ 336.930984][T13338] openvswitch: netlink: ct_state flags 2026bc58 unsupported [ 336.985593][T13340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 337.162054][T13349] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 337.210537][T13354] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 337.228729][T13349] gretap3: entered promiscuous mode [ 337.246679][T13349] gretap3: entered allmulticast mode [ 337.268018][T13352] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2058'. [ 337.277638][T13352] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2058'. [ 337.398797][T13354] team0: Device veth0_vlan failed to register rx_handler [ 337.796758][T13360] netlink: 'syz.1.2059': attribute type 5 has an invalid length. [ 337.863268][T13362] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 337.957464][T13358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.231338][T13381] netlink: 'syz.3.2063': attribute type 21 has an invalid length. [ 338.291371][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2065'. [ 338.443183][T13358] bond5 (unregistering): Released all slaves [ 338.485108][T13379] netlink: 'syz.2.2062': attribute type 29 has an invalid length. [ 338.494607][T13381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2063'. [ 338.781842][T13399] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 338.845852][T13399] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 338.884155][T13399] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 338.934002][T13399] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 339.017154][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 339.160957][T13424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2073'. [ 339.290707][T13426] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 339.406359][T13428] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2075'. [ 339.977167][ T5184] block nbd3: Receive control failed (result -32) [ 339.977221][T13447] netlink: 'syz.2.2080': attribute type 1 has an invalid length. [ 340.683149][T13471] batman_adv: batadv0: Adding interface: dummy0 [ 340.690738][T13471] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.721579][T13471] batman_adv: batadv0: Interface activated: dummy0 [ 340.801483][T13472] batadv0: mtu less than device minimum [ 340.809673][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.822393][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.834815][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.847152][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.859476][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.871792][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 340.884100][T13472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 341.301234][T13496] macsec0: entered allmulticast mode [ 341.373139][T13505] blkio.reset_stats is deprecated [ 341.644902][T13513] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 341.894076][T13531] __nla_validate_parse: 5 callbacks suppressed [ 341.894101][T13531] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2106'. [ 342.031810][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2109'. [ 342.041023][T13539] bridge_slave_0: left allmulticast mode [ 342.046724][T13539] bridge_slave_0: left promiscuous mode [ 342.053549][T13539] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.161223][T13546] netlink: 'syz.1.2107': attribute type 13 has an invalid length. [ 342.170349][T13546] netlink: 'syz.1.2107': attribute type 58 has an invalid length. [ 342.178960][T13546] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2107'. [ 342.180592][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2110'. [ 342.501952][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2113'. [ 342.543721][T13560] geneve2: entered promiscuous mode [ 342.682699][T13566] netlink: 'syz.3.2117': attribute type 21 has an invalid length. [ 342.696408][T13566] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2117'. [ 342.710580][T13566] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2117'. [ 342.743137][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'. [ 343.186064][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 343.235930][T13589] netlink: 'syz.3.2126': attribute type 10 has an invalid length. [ 343.257254][T13589] veth1_macvtap: left promiscuous mode [ 343.313992][T13594] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2128'. [ 344.342512][T13643] netlink: 'syz.2.2141': attribute type 11 has an invalid length. [ 344.413055][T13646] netlink: 'syz.4.2142': attribute type 21 has an invalid length. [ 344.802397][T13663] netlink: 'syz.3.2147': attribute type 27 has an invalid length. [ 345.311523][T13687] netlink: 'syz.2.2154': attribute type 7 has an invalid length. [ 345.671313][T13699] tap0: tun_chr_ioctl cmd 1074025672 [ 345.697098][T13699] tap0: ignored: set checksum disabled [ 345.953859][T13719] [ 345.956253][T13719] ====================================================== [ 345.963393][T13719] WARNING: possible circular locking dependency detected [ 345.970706][T13719] syzkaller #0 Not tainted [ 345.975226][T13719] ------------------------------------------------------ [ 345.982372][T13719] syz.3.2165/13719 is trying to acquire lock: [ 345.988470][T13719] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 345.997902][T13719] [ 345.997902][T13719] but task is already holding lock: [ 346.005349][T13719] ffff8880792f5c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 346.014611][T13719] [ 346.014611][T13719] which lock already depends on the new lock. [ 346.014611][T13719] [ 346.025027][T13719] [ 346.025027][T13719] the existing dependency chain (in reverse order) is: [ 346.034042][T13719] [ 346.034042][T13719] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 346.042058][T13719] lock_acquire+0x120/0x360 [ 346.047183][T13719] _raw_spin_lock_bh+0x36/0x50 [ 346.052470][T13719] nr_rt_device_down+0x12a/0x720 [ 346.057944][T13719] nr_device_event+0x137/0x150 [ 346.063227][T13719] notifier_call_chain+0x1b3/0x3e0 [ 346.068859][T13719] __dev_notify_flags+0x18d/0x2e0 [ 346.074402][T13719] netif_change_flags+0xe8/0x1a0 [ 346.079862][T13719] dev_change_flags+0x130/0x260 [ 346.085240][T13719] dev_ioctl+0x7b4/0x1150 [ 346.090111][T13719] sock_do_ioctl+0x22c/0x300 [ 346.095227][T13719] sock_ioctl+0x576/0x790 [ 346.100093][T13719] __se_sys_ioctl+0xfc/0x170 [ 346.105204][T13719] do_syscall_64+0xfa/0x3b0 [ 346.110335][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.117224][T13719] [ 346.117224][T13719] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 346.125154][T13719] lock_acquire+0x120/0x360 [ 346.130471][T13719] _raw_spin_lock_bh+0x36/0x50 [ 346.135772][T13719] nr_rt_device_down+0xa9/0x720 [ 346.141414][T13719] nr_device_event+0x137/0x150 [ 346.146707][T13719] notifier_call_chain+0x1b3/0x3e0 [ 346.152343][T13719] __dev_notify_flags+0x18d/0x2e0 [ 346.157977][T13719] netif_change_flags+0xe8/0x1a0 [ 346.163536][T13719] dev_change_flags+0x130/0x260 [ 346.168930][T13719] dev_ioctl+0x7b4/0x1150 [ 346.173881][T13719] sock_do_ioctl+0x22c/0x300 [ 346.179018][T13719] sock_ioctl+0x576/0x790 [ 346.184061][T13719] __se_sys_ioctl+0xfc/0x170 [ 346.189202][T13719] do_syscall_64+0xfa/0x3b0 [ 346.194263][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.200769][T13719] [ 346.200769][T13719] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 346.209215][T13719] validate_chain+0xb9b/0x2140 [ 346.214527][T13719] __lock_acquire+0xab9/0xd20 [ 346.219737][T13719] lock_acquire+0x120/0x360 [ 346.224769][T13719] _raw_spin_lock_bh+0x36/0x50 [ 346.230061][T13719] nr_rt_ioctl+0x390/0xd50 [ 346.235005][T13719] sock_do_ioctl+0xdc/0x300 [ 346.240120][T13719] sock_ioctl+0x576/0x790 [ 346.245060][T13719] __se_sys_ioctl+0xfc/0x170 [ 346.250206][T13719] do_syscall_64+0xfa/0x3b0 [ 346.255259][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.261711][T13719] [ 346.261711][T13719] other info that might help us debug this: [ 346.261711][T13719] [ 346.271936][T13719] Chain exists of: [ 346.271936][T13719] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 346.271936][T13719] [ 346.285852][T13719] Possible unsafe locking scenario: [ 346.285852][T13719] [ 346.293310][T13719] CPU0 CPU1 [ 346.298679][T13719] ---- ---- [ 346.304042][T13719] lock(&nr_node->node_lock); [ 346.308982][T13719] lock(nr_node_list_lock); [ 346.316109][T13719] lock(&nr_node->node_lock); [ 346.323431][T13719] lock(nr_neigh_list_lock); [ 346.328130][T13719] [ 346.328130][T13719] *** DEADLOCK *** [ 346.328130][T13719] [ 346.336621][T13719] 2 locks held by syz.3.2165/13719: [ 346.341847][T13719] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 346.351358][T13719] #1: ffff8880792f5c70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 346.361032][T13719] [ 346.361032][T13719] stack backtrace: [ 346.366925][T13719] CPU: 0 UID: 0 PID: 13719 Comm: syz.3.2165 Not tainted syzkaller #0 PREEMPT(full) [ 346.366946][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.366957][T13719] Call Trace: [ 346.366967][T13719] [ 346.366976][T13719] dump_stack_lvl+0x189/0x250 [ 346.366999][T13719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.367017][T13719] ? __pfx__printk+0x10/0x10 [ 346.367037][T13719] ? stack_trace_save+0x9c/0xe0 [ 346.367061][T13719] print_circular_bug+0x2ee/0x310 [ 346.367080][T13719] check_noncircular+0x134/0x160 [ 346.367099][T13719] validate_chain+0xb9b/0x2140 [ 346.367123][T13719] __lock_acquire+0xab9/0xd20 [ 346.367148][T13719] ? nr_rt_ioctl+0x390/0xd50 [ 346.367165][T13719] lock_acquire+0x120/0x360 [ 346.367185][T13719] ? nr_rt_ioctl+0x390/0xd50 [ 346.367204][T13719] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.367223][T13719] ? nr_rt_ioctl+0x390/0xd50 [ 346.367240][T13719] _raw_spin_lock_bh+0x36/0x50 [ 346.367259][T13719] ? nr_rt_ioctl+0x390/0xd50 [ 346.367276][T13719] nr_rt_ioctl+0x390/0xd50 [ 346.367297][T13719] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 346.367319][T13719] ? apparmor_capable+0x137/0x1b0 [ 346.367340][T13719] ? capable+0x89/0xe0 [ 346.367355][T13719] ? nr_ioctl+0x1b1/0x3b0 [ 346.367369][T13719] sock_do_ioctl+0xdc/0x300 [ 346.367389][T13719] ? __pfx_sock_do_ioctl+0x10/0x10 [ 346.367406][T13719] ? __lock_acquire+0xab9/0xd20 [ 346.367433][T13719] sock_ioctl+0x576/0x790 [ 346.367451][T13719] ? __pfx_sock_ioctl+0x10/0x10 [ 346.367468][T13719] ? __fget_files+0x2a/0x420 [ 346.367491][T13719] ? __fget_files+0x3a0/0x420 [ 346.367512][T13719] ? __fget_files+0x2a/0x420 [ 346.367536][T13719] ? bpf_lsm_file_ioctl+0x9/0x20 [ 346.367556][T13719] ? __pfx_sock_ioctl+0x10/0x10 [ 346.367572][T13719] __se_sys_ioctl+0xfc/0x170 [ 346.367592][T13719] do_syscall_64+0xfa/0x3b0 [ 346.367614][T13719] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.367635][T13719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.367652][T13719] ? clear_bhb_loop+0x60/0xb0 [ 346.367670][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.367685][T13719] RIP: 0033:0x7f078cb8ebe9 [ 346.367701][T13719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.367715][T13719] RSP: 002b:00007f078d9b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.367741][T13719] RAX: ffffffffffffffda RBX: 00007f078cdb5fa0 RCX: 00007f078cb8ebe9 [ 346.367753][T13719] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 346.367764][T13719] RBP: 00007f078cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.367774][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.367784][T13719] R13: 00007f078cdb6038 R14: 00007f078cdb5fa0 R15: 00007fff48b77ba8 [ 346.367801][T13719] [ 346.689255][T13717] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 346.697344][T13717] nbd: error processing sock list [ 346.703310][T13717] block nbd4: shutting down sockets [ 349.758554][ T5234] udevd[5234]: worker [10126] /devices/virtual/block/nbd2 is taking a long time