last executing test programs: 5.275437843s ago: executing program 2 (id=3635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0xa0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000020000000000000c02000000060000000200008403000000feffffff03000000050000000400000001000000030000000e000000000000100200000000005f00"], 0x0, 0x58, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000002c0)={0x7, {{0xa, 0x4e21, 0xd, @local, 0x200}}}, 0x88) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"/516], 0x114}], 0x1}, 0x0) r7 = socket(0x11, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={r0, 0x101, 0x4, 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6_vti0\x00', r8, 0x29, 0x5, 0x9, 0x48c7, 0x28, @private2, @loopback, 0x700, 0x7, 0x7fffffff, 0x6}}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000900)={r10, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$l2tp6(0xa, 0x2, 0x73) r13 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xfffffffc}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r12, &(0x7f0000000000)=""/10, 0x5, 0x40010000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001600000825bd7000fedbdf25021036c8", @ANYRES32=r8, @ANYBLOB="080009001d080000140006002a9989dd316fe109fd000000000000000000e93c00000400c2440100000008000400ac1436aa"], 0x3c}, 0x1, 0xba01, 0x0, 0x40080d9}, 0xc0a0) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r11) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r14, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.281047482s ago: executing program 2 (id=3650): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) shutdown(r4, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "ebffffffff00", "4b8b4e0802ff03fbe3c7a6f875981e00", "85372e3c", "090000e6ff00"}, 0x28) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x7ffd, 0xe) sendmsg$inet6(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)="438ae0bb3048dc4834", 0x9}], 0x1, &(0x7f0000000700)}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 3.789313326s ago: executing program 2 (id=3658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r3, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 3.432035282s ago: executing program 2 (id=3665): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0xf, 0xc0, 0x8000, 0x1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x9, @value=r4}, 0x50) 3.244216205s ago: executing program 2 (id=3669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1fe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4003) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="a8f2552ade3eba3b84a841a2914888735b7bcf0092028dd1efb4efaa73e548ea0998ba630ebbead8cfc9ae93622cadd6a017f2099cf887e026d88be873f84b97b4aa357dd89313dd493df33b5b53a03e8223234d21e9f2cb49be36c3ddab3389bcf909ffa06986b12d22f9602f683bf61b57ff9821cc3d8e48bafc20d74d1e5679e383ae101b9cd6e15225d13ff9d30ea985a3e2cbb8255952dc05a2ee2e0a2592de572e43f41272eb44d20996f39c273399da3a0f60c79dff103cb48d7a8c218a3b3e2d3e2b0fae8a33b667199fb058ddec8db266b4591fd7e301e5c31fe04761f599a4fa6725f743010f4c378f76f38a1441", 0xf3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000018}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r3, 0x809, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x6c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1094aef3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71ff8998}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x531a6cdd}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x537fbf37}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a9b8e3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4004482}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040d8}, 0x8010) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x33}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x8001}}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9d1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000001) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r12, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x400409d) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@newtclass={0x40, 0x28, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x6, 0x7}, {0x7, 0x7}, {0xffff, 0x1}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x6044801}, 0x4000080) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000d80)={0x0, 0x49, "fcb6f9db16c265660f6e4bc9255178d80abb0ed58c8eef728111b3ad57aa041e304d5eea2bd216efc9465925b07665257c2d7ecfe07c29ae406e5230489576b399ee2619a72540e0b2"}, &(0x7f0000000e00)=0x51) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000000e40)={r14, 0xff16, 0x8, [0x5, 0xfff, 0x6, 0x5, 0x2, 0x4, 0xb, 0xfff]}, &(0x7f0000000e80)=0x18) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r13, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, r15, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) (async) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r16, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x4) 3.058986356s ago: executing program 4 (id=3673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)={0x2, 0x4, 0x5, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x40) getsockopt(r1, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0xa, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) 2.956174409s ago: executing program 2 (id=3674): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="ffbf53f2081e87f89b60160b08ff", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$inet6(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{}, {&(0x7f0000000040)="46f3df82f2aeee799b9e73d6bed88975e13ff30f5f192005ebc3e377870aea18bbe778316b3b30be1bdb9582245262f80bf081681910cd1e65d241e5211bc3159300f8aada3fe247b1bb3ecf4280ad80c291bd3eac408312a96b928515cc57b9c48f95539146d6cf68f8da993ea0c0506e7527c9354f086cb5ba071783f6d851264732fdfcc3a44770af754fb13cde5c81b727406ab2ccace2df0c46a16ada54c486022248046e7d3fe8cdd05b02f9e6310eb8785b81097e6c145dde36f642c8c89e013f2dbc2eaa753f", 0xca}, {&(0x7f0000000140)="055b9bb56e0dc98fbd2d51e9ef614d325d322131498739ff5a94b68b25824d1cb71f28750693eeb291b76cfa69ef0a12b04cc3482686f0e94d0546dc0c0a712a22d49387c7a267018da7d7f1edb359", 0x4f}, {&(0x7f0000000340)="d9a8428935fddfa3a026e429a0a997895b8319780a9a79cafb95c8c45b92dffe769d52c4181862b6459e148c095b67acec40a7ec3c371b5f9eb2e1ac4176d23e118dbe8fc8c9a2e5be646b34b84cb073a970e189a3bf925073c6ff50ef4060b948985161633ad0e078747167f167a96e0d4c93afa1380d221108b1d3a2955531e24681c5795c6a2314c3be058345cb44961a890b77d33bcb0208bc35cd1fe5d34da19e01745ce4ef89", 0xa9}, {&(0x7f0000000540)="82ab76c679fdc27ddd9932d1533220a508db2782b28e103eeaff5d1727824e9db7a41a341a3fb696561337f9d1ee347ac94f7b70d2eff0fb1eefd2fb5fc58c3e2cb05319ffab5a98fbf491e145aa03c8c83a948ccbc888dd183f2922c7ede75cd9d1d470b4e8d09b5b8bbd8fed33d4b11971e7fc99ef630377a8c654bb0247afe3bccbf2c2857589d8a948a50bc26a4e3f16bb31f2e02029dfeb2594fb3d25b86b1900481f5180ceeee1e9a8d08147e3bc", 0xb1}, {&(0x7f00000006c0)="2e91e912f5def0516c4f5b817442a358c43919ba7b7407ee454ab657890d2bbf010e453d8ae01b54d4cd4781162242d6f47404bf71bae07ccd7f55441b509c840926b0dd9cbea90a33fae256736ee03542c2c86837c46551a44433e7357984c8edc02fc079a03d7a4203a8705645ba83036ab651a99ccc09f9068e943e217f6ff8a041d8de5a82b438babb05d5cc4962a2e1a769569ff8506874226b7423f31ce19ead99c6b8223b5784868218cd952f4139d5516dd56d7a0cb64f348f3703f5a1fd70099bb62074", 0xc8}], 0x6}, 0x408) 2.674400018s ago: executing program 4 (id=3678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004810) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x8, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000780)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000070000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370390ff0ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5abbff35d1cd17c842175357a4bc758b4a943e06a7569fa1e1e4e017e43e8e47914d1000000000000000000000000000cd6b36d72dbc0d8000000c95d5ccace09e52960dbdf13b62f586b47ade41458b77834a573687780117829310ece7950fabcb63c63e18b207cbe936ee9a9a37879d42c66c2a72dfef46013ada19eb8d7e9f35267d0b72d591d0c2f92e2e667eed068310056ec5682b4c2bd946e657f2d9bce51da84f1e3b7d073265f352481b81703e0ecb59f70daf545215151b2b01b2bba1545de5d785ce281000000000000000000000000000000af9637ac06897446708dda1bd7b91be06c3f66def98618eb55bd5652d2ae6036402d69db587e87d04b6e4b1c86328adfcc7a22d77e8db6b1024f6bf7aec85a7f4241fb6b326acae3d9a4f4a0e8b723c43aae4f909f40d7167d1afde58812163d292666cf967e16c25889683658fdc86c820246d4009b3c4e8db0fe57735fb577b9f8e9d5fd9843615ec7c7affa29c04a7e8ea439d4938710039a55da15142ed876e581b4760b3483367fd96f0531ea7f3c6bb4193a76ea6b805b45a74365c15f41b8b542f21a83cae1aff4a858d551b95a2ba77fc8a1109f11e7b18d6f825587bb986e13ff37f111329feb2a09ebc54f1ee1ccd056ff9ec0ff0ce1c1ec5bfab4119a452eef335c0fe2b6bfcd635ef5979352de3801bdba7c145cdfb3ab07b45f13b8f45772c9f9c8285bbe14605879e4ddd78bfb6aa3444b7b3ef1713c58d3d348ea764370002f393e10ec3cf3ef1ab0aa1cab9596fe467c7288893172cd97691a0f1d68ca0449f05902fb7f46f7d0e0d36a68abb3f075358cdb701eac9c3f7f19ab13a83314309861dfaa256ccb4400ffc2568b900be14d9e06b138daf2b41c38abba3b1b2de2f3a660af382b7bc0c1318c5cbdec02646f3e28d8eef763aac4a7fd39c15950764734b8d641e4d642e44c4e6b83d1c3dda34d7cda18c652a5d8d9b406d4df8554e2a5611023766c53e9b478d374112165480e887c923ff0a33551d8f270481230ef34d9168806d43278c977b77148371bd02ee1bcfd278a579be8cc6dc58f6e1f8ee7118ae792c30d4f76546a630f7859fd315513722a1b871d311dc28f40d15b7c631b81e58a6bf8891875fe21e8ebcf2925c2fb2b32dc8a0b1b5c7f806ba81a31b1eec700225a14ff8dc83b484ab80849558a0ffc1ab62b2a4545dbfee4d93ed5de4ffe4469ed88df341dc69ab8b1da80bc47cd127c9e1378020cf5d362819e42350f293dd305b4801932d9e07fc647628a8a84958319874295b3cab523b2f43704845d5785c6b3025fadd8442ab42ebfc3bc45efcf24396f1c2ce50ba96430f8feaa1f8bcd8635a4ce00209a8ebabfdf6f1b5129c0e2a40ba4d1b5e3d6249ee8fa5d2d77351b6fba38756dea4e35c8573eda42eac89b4c50b85346b5ede0ff4dca6a70b38177eb5cb8b8437bb533f6ea1de29e1f1fda88e3afe92482af05ed713dd00aa6a5f8381b5d421909462ac33dee4095afcc67a926e50d2cbe1507195b73f624349b132e7b6b339f9a41fad97f3b70e5808eb177c9e7cb154554644e960f29c5d56fd83d8530a6afc8924dcf01e4ef07e7d16bcef404af5ee3b7767dfbd45f0eee2b583d0159b45cca60a930f37d995b02701d2991761cab642165ed3e52961b7c612991c11028bd1d45ea3106018692facfa14996d3d26d5642566c2f592f67975ce3840131275ce29ed116b6f6eeae34aeae334250e7ae4e25e98cc63b4104fdc79ac676a3c11fd6e9a67dc134802d41c4b01a47e3ad5b6ecd6f4a05bf55c1756535374b7bc9e010966a1415a1e50b2fcb20f3d972d9d7a9f0baf841be4f514eb35c9edaac4b3ca7bfab8a53945d035019cf3321c9144961780413dbb21b89c01fe020bcbaa7fe6b4697b196cf7ac3aa014c48259f5b22b45b2ae023d6052644fa51fc0671d6c4e012607a2df05b6f444903ab3251bdd8d2c98adf9f77de7edbc9631b0e7283a5ce1130d99ae5697ce3ea41e3ba5394883c9899384208cba558d69afdc574cbf05a45ed56d07a41f75c55603561f0e8d54670a53e4b8162729bc34ab66babf31d2e86af5a72553ec045466678427ca42eb49b58c5e58980b73451029b88118d730cce2a48b5d6b9caa2c8fb7178ff90196bd1091568a70d1b7ac47585f6180767a2534401aaf0cda644a4c978b972e0bf7b156aa5d80aa1c3d70c0bcd25ab61122349dd78bc28c3e169adea7ac95e09b6a160204ac772f810193cecf495a9836e082b60626316c02dba83abb792422079947b0d887b87f4cd6bd7c82b00000000000000008207fc649dab3ec0be72d68e61c19c1943664bf9088981b19ebbd3f212a471c6b01d28c1f5a0e5d9e0b762f7cebc056ae8fdeb4448ecb291b08684de1ff1c209448223e3979469b18ea13d5d88532f5a45ae4a86d21bde29b472d65e77d5412dae907ffaca95182316d15dbf12b7d77dcf2154376ab3900ba7d8f026e8a566372cdae696cdec4baa7efcbfc3d250638ee391aa3ab3cdd0a3fc42b674e1943bd0a3e1d103fe00b8788dc5b8ba1602bbfd7ca2bf58c60790eddb10cfca9938e2cafce2"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) 2.514496907s ago: executing program 4 (id=3682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x291c9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x20000000000080}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 2.266047678s ago: executing program 4 (id=3686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040040) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d"], 0x9e) 1.950469116s ago: executing program 0 (id=3689): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@mcast1, 0x0, 0x6c}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0x23c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x602, 0x70bd2a, 0x25dfdbfd, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.76634938s ago: executing program 0 (id=3692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1.673613056s ago: executing program 3 (id=3694): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1, 0x0, 0x0, 0x8044044}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x100}, &(0x7f00000001c0)=0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0xfffffffd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x6}, 0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r8, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="83ecaa", 0x3}], 0x1, &(0x7f0000004980)=ANY=[@ANYBLOB="1c0000000000000000", @ANYRES32, @ANYBLOB], 0x110}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000580)="52ebdccdeac236c89202fb8602a6a2601077900aafacd55411a2216b4647510f28e104c3", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000004040)}}], 0x3, 0x8800) (async) sendto(r8, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.671627764s ago: executing program 4 (id=3695): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b704000000000e006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x880) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x8090) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @empty}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2ecf8aba, 0x8, 0x6634, 0x100, 0x778d5e51, 0x4000000, r7}) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.321782073s ago: executing program 0 (id=3698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000140)=0x400009, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000400)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="a702c27bf06db98cdf8d6889422019c0b20a0a589054612bc8b9aa12732b5894b3c2d33be1f984c47d286b219241aefd3c8c01f9843c6e8fb0e19e0c0743a2532975634b87c108677948f86f35b5eecd56f3b769bcfa672442f58bd4199e03bf4ea9385cd1df984d2958938330a1cd148cde179da1e2f11ca51a529ea58803884e2b6978de1a4127626ec37a290e73ca8d6d8ddfdfd53755d167ba8b2cd2fbff86ac34b7db68e9875e4307792830f899f0c75e418f58ce82039ce193097579f3aceff36ec054c4672cc8969f69efe1015860c8ffffecec6de646fb793021c2bb996dc9f7e6a72620e7cd729f1c24e8eeb58eb51a928570468e1fb23641e00fa426f6c24450abbde87f8833f0ee367758834d877babd4a80518cdcb04d6352e52d8abd6443757bd6ca779f0e57b25698598cdf11f8b45108cb1384fccab4aec1347e71eafcfafaadd4360716c11eb4d11864131df20db52730a242f45ccd6bc3dc02589c0e2a979b752986c692a4dff8ab71c5574220ae28bdb94c7e4ecf4b04e9ca4b68db1b27d0c2e8eea02487f5df0cb948cb2520694a6cb1dee45e0ef6d10925020001e0b49e1887f2c7e7dd98a4c04578e393b8bb7827868953f7587f5262aaf9f3d0803cd7e1ebc476f9407df2a9fea1349c80e14d094e3e203b18bd5bdee5453ad7817c73c974e753cdf923e9333c001cef33d89f8882adc5b5a491baecf9deb9199fd9e4740070183159818f1d527b0c369d590ec4988b7ed124eb9b34c050d426165f3ac392f2fc0dad59578c2498a755113f1e2207312e72fad25b59c0886c1242ed416e58d8fbff8e2ccf89d1aa87cde308c36e3c53c842a661df51449bd224cd967310172ad7165e6976e47cb7d191544d54170fdabdf9482e2b24d8a58376ea7cf60b347b55a259bf2eddb9e9d3aca20422dedcc9af246ead386662fdf14735a6e0deec38d23fbcebcc30349badcfb85308bd61354451d8199d9f53db36019d3d8e0db0becc5e1439c8104414d4020fa1f7298705becf897902d550862f1630a36773f585d0b122555632b7c333282b06d99a352daa20fda91c4406778dc36dcc5e73b8fa3048c53e30c762ede7be96880a1e3229a0bf88f8cc4e1c89571182e3dbdb5df2720ddf34f111314040c2f4ed3daf234a960e19d902fe68b41701c7834d9b092132f0b189cda43512319479475623598c4d1a00787f2ef605ff9289b180bbf17b62abaa1bea1429bc468f6f5df7fffcc7784a69338701a1e0fb471d3b17dba61e22705fe087b803faae47d7e338099021461a412af3ad4f94d6cea74fd858e5f39acdd93fc59c8970e00efc6cd78311d0859fab70c7de88d099c86743c8324427c7e931c0b50f54ab2d66bfc5eb474a2efd8ba91923825bacffff39d074e018373a36b55885cc1e2bbb5f8f7b001942e9e3dfb7f35e7b44b7c513ecc91f518d0d0577b9926961bcea1b468ee5f3d50d0cf188c81790dbb156be77eb6e69f5e2b922e13d8b92baef4125d802cfed1a097e3d9abb2b03e6566c17d24f78a6a29687188f22030c4f0e75935aea670bc038cee6e7827c66b772fe3bc17e5dcb66a371cda6ab8f95c199f23c8cfb98862947604c87973540ba650de26ceeaa118af2f8d51593c0bfab9a49360c862b5d2f0cd4912d42ab3a4830700ce125195190e28c20c44700b4c547d762b9d76aae14bcae36412fb8911a385ba5bda57f8cfeadf8f6e409226534866a61ee15cb5ad80cf22110176cf59db4e82207e3a5c12fb2afc1474ac7f6dd6c3f59a1f35caf41b9c75b98e3fdcee8ba0f62e0f66049ec52252990cb74339316e2878d76e5768096d16eed915721cd4cf2fbb8740ce3a483d95b15c28037e4f08568ce29e297f0fb9178ac6a3050e3311e57567b6a43e29fda3f6fe0116dcbb9999442d92902dbd030a806284e4702b68c49012738eab4ca6917ac15c333d9956abcc259887c0d804421569f67cda25ae113bf60c763d41bc96e1bbc984681fab5c0d74a1c5934d588f6eefea6cf186fb15b0d9fc3c656504fc542a7005f7f6a621476388b3cbb1d2fa6214cc62faacb3769fc7b5826af801f59d06d19cccac68eeb050b9d7f79b6263350178024072581b17f193d9700f63f7280f09f250988532ff9fb2baf6150f8ca02723e653662430df0e1cba59535448534d8b99a4869aa0e5f5ddde36bcce7b4c5018342bc73b0bafec14f27baa86ebaa0ae465686786a59ab7e6f443dc37154f43ee6128391f074929e9ec2b02835d83e04fffc6f0eec6de6d18b8396cc73b9e7634e9ca2838ebd710be87a9fe8d5a8619891a003fcd1c2c7e71b0df7c1bbf1efc3b69ef52053d29830c38e5eb6b3355ed23212bce370c9168f5dd17d5259642946c07eacfe1288105fe0beefcbee1828e1faf5cd9e030c35749b83ff25372757cf1dc7d27d963392d403e1d02ceac641b0d297b9ad07c45584f1717e0fdc96e105bdc421c8a8ebc9af1d2862729b4bd720d73bce506b9e37aa765ca3d5875cb52c2ae76579854455035cbc91fd71bd011326f3bd1dd4fcd56b9fe052336b85b4ed79c3c2a40f57a3dedacc9154b3cbbdf766c7d916d5aed0ba2c2724bcd97ec20da3e40b7e9a724d513f9ef6ed94c8afcc25c38ec2eb9267ef4dd07c7783decc2bc3e8b67e71dd54472b67e5bbe614856b96e1a3951b0c34668269116147b349b8ca5efd06e88a46c4dabf81c11cc1b46ffb9b9f7a8911fc8ad8b489f03f6faf9f231553cb4ad74470c330715781c9544ab48c38369265513952cc9f1063f43077390dbc59d704336e5f504e683ce34d1b02e76d4d2a689d2b401172245e3165a98e74e2aab0c7251cf8d59d377df853795c3fced7998025d5f851fdfb797a3a8dffff9b7fab792dfb60dcace3aada03c58baa51d79e0b8cd04017d9b193a2f9d732c1cef477c1683d923f70718d4be2deba348a418f1453414e4482b79813e34e1b7dfd5ac854b80e412d1d642f5a7f6132ad6c6eae847d6900a0efefa7a73ade315c25c1c0ec843394d315c10cc8b775b61c42507cc12b323a8734cd70bb1608be5355544009cd739e3d11701bf861901f40c7575093f8b619188303161100aa828f3d8fff2ba09b4d98ecbfd86d649f8b8224403921b8c0045a0cf501792c92d7571fb6f4137149b3f2b564c8d59cd2274cfa8e2caeeb4e6c47120a5a1cb6f3b9f817b12fc2a960a9aec82569bd0397cc3b686363c74672fe6627f69ba74f23f8093de16fa9e01694d81dec03a26c2573bd9dae8bd0edb97f6ff1e41af299118d6e17f81b20df90b22034b487e553dc6efc6ec6b8dd4659af003f4d187e519092ebfd332d58b37069b0b71df37f34ca89d9ce58e9000f3e5af502a4c0e486aa489826f1b2f397da15929e51aca8ba61c1fe6a0acea6481423f7168146c1b6213988b051a8209ff5fedbebe8993ea28cc0877a3af310c3e9aab2f9fafeee0605741abf51d9ade538450ff627dbc5ed266e11521922671afe6bca00709e9499387831f0961d9d78d437ea05f30996d4c3748aec2ab32879f3b2c553fd28028e57211443d3187373c60dfe083edc1e8ca29f4962a0c32c4d822523aef785094c36bd1006b33ab84819b36fbdb9bfefe1f3b0203fc056c0d332e323f881e04419a533201764a2bf4f4d09cdc82ed7581d9c08eaab4250a85c2fa2344492f5fd8ee25141972f8dedfa4f2f4c37bd356be7bdd061c396c3533ebbc267bc30983dfd34ba255979d206fb600b07d8ad7ec4aa12449a6fb50d3fd3d7e1ff542204a67ffd2390e2e1cc26d3ea43946893cd39906055c3ca4f660b71ee4a818383fc7c7cce0abde2428fbb1f1516b82719556e4f38b2e0896de65706e5d924ff9dcf16941e7293d312f5a69aafc1819b1d49461a5f44ca927d6748cfb36b6cb786be2f9f8316d9ef3c24709c0830d4457fe59992ada7f87ba46701298cde81012e5fdcc90f31ccd951cc73b79b1b01e37764f998d7b8e1503fd4e3785c63c054cf22ec82c94acfd733e3c81a87359898b1577d1630e22dbe34139e0dbb941bc8223b8e5bc784109bcb050a0905de7a59be4ff9855b1db9a50ae6d460f8a55742d354748fefb71e532340b379c393d053bfd3045370f247c3e54acfc07ac00cfbf39017e627706c927ae5ecd095f826a3ec076872eee99257abcf128082ea82d171022eda335c5306f798298bdbaf019f86f3314706a7c916cb428ef97a0a196ce7fdec1897c0d9e23c517e211c7867869c468978660cecae91c94dbacea6d812d1deff6753d8051c4aae074ece8f574540b560ac601a8104e24ce86a36cb2adf446debaf06b8675a55424c497e8cc4a8dce43cf3371083e5fbc8d76223652b82821bfe221109b9877dcd5dc7a03679c36e5607a0075436ea8a5c5dbbdd5c8995c0b3e5d447552600c6b787540bb9ac5a9430b830fb10f6b16ee7528c2e297d61eeb79c20426b146cefb33eee2458630102b34668300ff6dea9e413f66cf78c623403eca9869109bc66a49a0cca38882bc35badb3ef121baef323320c72ca4cb999d9964ad42070b1e589c961bfcf224016ecf9dcaa951fe9da5ac6e54e435b3237b4e066012bf132e8d23dff0481e2b6ebaca7fe5d32308eef7c2546130bcc998b32b676abf6ffde6ac89d280e531f7bd01b6f6fbd17a25482461ff5994012db41cd222ea72dfcc384ad6bfd80fef24424a2ad2451f741c530ac493212938c5277e3885b75caf3a6eb92638733a4f038cbc8264d76db9c36fec68d01231cedf0718df59ab6d133730f0ae865fca192098b5a46837c3fc0da67c7d104329cbacaaa6109c772c7ea588dd29eed97301cf4d6d85063e923cb5441c33b8b51e4bd2233ef361fb2ffe72ab2620eab2bf5903db9a11a2d9bb45f4dd004a24590e5f0ba6741b775480fbdd6b3fd2c37daed23fb09936ee1688dd58ba8c9eab2070711f5948b7cd983b8e8332a8dd49a792e970b153c18515858efd68da892b8bf017dd656f392df7ec9c4ab74dc4ccb4e39bfa890f3b595503e5e9bad8d4910129124808e0ee592bc002e99ecbbc1eb94aaefa9ce730438c67044c8061396e6079a6bda4210cb44e52bd97e26aedd65aa8a2a1898f16bee6862699560295d222e0bb7d217bb2f7a257bf7e6d4f6155b907a523ea5e22a55b547d625bff7752f311780d66766f95d4be38a261cb4114f90f73597bed75430e7f6bdd6116544b252b2b29f00c50a717da2ab4911af8aebc1dba81b884b9f3d63f9ea6177102ddc07a59b50f19f756172c1b515f55758bdff3d3094fb1f82b2864ec11cce06895a61585f02b295c3a15c8cfab53ee7b81f1a6a1814b8eaf3bce97a9782274e7431920580cb1ef1d5aef26205568b17b56ce1472d3131f4b771e18a68b7cea6d8cf859af35982373e89c5d0f0442576eef8ef34d14b7d87db9037cbfa08f4b391103eefed276eaee90554c7b32daa44029b67ea514786ea1f187715bac8ea5bf4f0717723b55b5f6807e55830d46dfd515b754d8797ed772aec91c7c08a2ce4fbbe9ba35593fbd800d173b20b6ac32bf4f62e336bb589148b4b448da8cad255e633e31d59bd8b3732da0bebad997874ec786742fb8e673712714d19d99a1faeb0bdf8bfcc29997dd6560ea76ce97c6f861a8d99bf16bb4822f1a1439c2cedd66b9b4aba07eaf5f4e6f57a60975eff5cf4109a8e4d25eb12f9bcc527d14c886a6319f3d79c4c03eefab6acc0a559f425f9a03722333a7c392f7", 0xfec}, {&(0x7f0000000440)="b3ad62993a47b989a1bf12aedf0b71c145ac1daef4abb1a1706b5a063fee9fc762507a01f3ce14f887dffed1d0a0b139d4bfee81cf9eee93660bc7a0159a1b56dc244f824dfc21ac7cf78330afe280f51ae7408dacca91d996e21e3129ccb93f9a96", 0x62}], 0x4}, 0x4044800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0xffffffffffffffc1}, 0x1, 0x0, 0x0, 0x20000002}, 0x4000000) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@getchain={0x2c, 0x66, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0xfff1}, {0x5, 0xfff1}, {0x0, 0x4}}, [{0x8}]}, 0x2c}}, 0x0) r9 = socket(0x21, 0xa, 0x40000002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r10, &(0x7f0000000200)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000080)={r11}, &(0x7f00000001c0)=0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000280)) 1.122295151s ago: executing program 3 (id=3699): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9c638bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7bfa0f000000000000c346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf701627825be61e036c9eae11b300b3ec832a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f60d8000000053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563ebbe1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270106181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e687098295d6a66bff091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea264fcfb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000000072b043a07864ef74028bd9ac8c169da129bf1f6776d2e5884cebc50666d334417ddafcc381b0cfbd65d6036d3a15bc680f424efff16edc05758d5be24f42b8dbe920e7823cb0ce62afb1246dc9d4c6b56e391c30e7ef3c1b9b3a9cb202dac5a2eb2516ee891b3e6f23fa95a2d86fd65c02476321b830c4ae1c0a414420dbd16ca220"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) r4 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000680)={0x0, 0x10}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000700)={r5, 0x101}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0015001a006da800000000000000000000000000000000000000006b9fa320db82edb2e7ea4d7c23242b31131a2c3310f047ed50ac0dc8bf867595e7b4b907493904f7e8d929cf0e307b13759ee064f4cf31c9e6d03f93116f1e300ba679a9"], 0x1c}}, 0x0) close(r3) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000500000000000008000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r8}, 0x42) sendmsg$AUDIT_GET(r11, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3e8, 0x200, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4008081) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="1100", @ANYRES32=r11, @ANYBLOB, @ANYRES64=0x0], 0x20) read(r2, &(0x7f0000000440)=""/220, 0xdc) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "b579525946ef4b68", "8db0acd9ada978cda7c31e399bd5a373", "45052ff4", "00e7ec4a2e215906"}, 0x28) 1.121698688s ago: executing program 1 (id=3700): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22329}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fffffff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc042}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b774}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x20000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf25110000000800150002000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) pread64(r1, &(0x7f0000000400)=""/143, 0x8f, 0x7f51) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)={0x4, 0x7, 0x2, 0x0, 0x0, [{{r2}, 0x5}, {{}, 0x3}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x78, 0x5, 0xa, 0x24758fa9e80e96b4, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x35, 0xc, "cc22393504ec228e2333a712b95674204d480d717693537e6a414375d716e380bed9dc29f3dfd90e899fcd0d883e43274e"}, @NFTA_CHAIN_USERDATA={0x21, 0xc, "1a4acac46dab7d98bd457021d5092a6b3a10cbdb8c203386cc93252f76"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xd8, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0xc4, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x33}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x200}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x83f}]}}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_TTL={0x5, 0x2, 0xf5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xe5}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x840) 1.121042058s ago: executing program 4 (id=3701): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x58000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040), 0xc) close(r1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10) unshare(0x6a040000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x58000000) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040), 0xc) (async) close(r1) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10) (async) 964.862498ms ago: executing program 1 (id=3702): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x20c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x25}}}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x6}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x16c, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3691dde561"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "df3cbf4eb1"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bb3c701c1c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "daef105efb"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xf, 0x4, "f920144b2562c481b665c9"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "696f94db4870ebca0551b594ea"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "2bc72215d5d328a7e34c96bf"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "12eb991fb2"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "31d2cc2ccc"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6ff954ec1e"}, @NL80211_KEY_SEQ={0x9, 0x4, "42ca09c52e"}, @NL80211_KEY_SEQ={0x11, 0x4, "f890322806b6f39a0163442769"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x2, 0x7, 0x0, {0x9, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x303b, 0xe5}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x200000}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000084) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000900)={{r1}, "58520d36bf60609832fba7e10cb6a38cd5f18eeaf75ccda1e0f6c3eb1e060eafef232af4c59256437091a4aee120fe96acca352f0681c3afb28debe9d27e91ecf53c1b2a937d9d3bfe00a8ec1074f1226a09412acc4975480a86fb2a17a8aa8b4acd5a913c046d13288359fa127b62aafccae34293f662eea0562c34a1d391924cf86ea8fd10d51297e9a6bb4f5280dae9f334291975c948911fb33f593948b6c4b171fe0f0d7a465b5d75904e079de3adbaca9844d723ea945f441fd4f04ca733e34101ee9a0bb37e297e373301937410783ae5783d565ebf51c906645a8ecad837f6be4ee23eca297aa0b0beed45dbfde433e6426238f87cb5b56055468f3848fc7f603c5680a5e05a2d46e324bfc5017eb5d2b776c52ae642a7e7e1c2f51fc35f390c9bc9820bd815792d5ab2e2561fdaee2f467a27413868ca5693a9efc6ea2221fdbd670f1e2b76e6f06cad09a151629ba3497ec54a8062cf59d239ea6d125920031bf811985edf5a23d1fbf4414b83ccb0c203f83525141c78ac703f3a50a4932d7366c38ebbc8448ea7aa6ab601454c5bc623c36cb365301dfe1a5c4509a5dd814b7a7b5f402252db450f2ce3b727f59868e1631e2e6de3ff03740dccb28d5f29b98ec43ed12d3ce6c793a1542b27c2cbf244d84567d4341682f885fdc7820885fbe193b7c34d3da02a70b4e9bf866131ee208a08ce41bf791d33722d14952fde7df796d8f89d24fccf3ab5eabe0d7bfd4f4f3781d0a1e6ccdb89755a3cc8e780866b56e8ef08945ce30888c2fae97b5274414f0d3a49a263770f8d7a87ee681b266408cc979d03b395fcc447a78d4ecda6de0ec9e9f47b118e1c6361f35f995a03aa16f8452744db0f76c6c05fa1441760e999f18e22cb782ae0abe46475789243194768c6cac3fe98ab07eb0586d499ae3616751ba7b2170c389660f31d70e0d8635ec26c5b524091ef3cc74e4acfaacac1c286e63c4d6983f09b77b011b9329dd6f48ca28768f57b651f0a9795cff31f1b7d6494fd62ddb95925ed4d99cfbfdcc856702f0e90846802d36ef1fcab22fac52a25d6768c96d97226799b3085713f6966e56543d20e80ba1620e8de2e73b5a0e12a383dbdf8ec1ce2e9ce000f6a975b03b5aa4fd819cd6efe85d276ad60beddca153ab80ef8b771d261faf0a7ca35b30c7888daf96050bdeb8a5ebbd4aa7e5e5d84824cfe58f924340c4427ed8a242783ee24163b5e354ee265dfa83151d1c9d4fd3bed0f259e0495891f99addfe0e2f472070850262a0c37cbbf53a5be0d6b5a80d1912056a78871f20d26839101bd5541ec02971ec515d9e8c28ec0b95e9eaede243cb4247a7c5d4f206e4deba2db59216540601f657831e7fa7dc27c35950b19a0be001565baa06fae2bc34359e3a9392dd88c0988240f273399f596e3a0350ad6602b8e9ec547dc14cf7df79c75246b482952d2a60556dda190c9ed53a28895534943d5838e87c8ad4707e7027adfb2577423848b8e700d1190cc02ae70a16a8ade665b12526cc607dbfba94151948d62775939686c5b91e75c2295eabfbbdbba48531693c3ebff1f8d9a51a114365522a648ce92af0ff31abf243dda5ca854900ae216e8aba81e2ec629b7bc27b2c305cf49f32e27c790729beb222130ef2ebba96bc835b787bfb9276fcb221537f11ed444b5536cd0197f5cf42a7010873e366713263b2877cd475ce9c4637496f4066817c39a403cbcf06486add53ccde84331b88a00105d965c731006957dfed2e463bd98c06ca6a5f583c5717a6f59c5e0dff099421f840344a379cdf94162a16528a0bc7ddb8c9526e47948b95ffb0ba79592d5c2417c06ef5ac367c4472f2a1dbc3ebe3ba2981e5e7c3b27037fdf74afb952ddddb17bbda7e050a9ca05e0d0791a63cf5de6c15dc2b3fef66e6b776b04ef0d32ac8fe5f6c26ccd61ff51a5211f8c56d3d1a9e3d3dd4d014ff2833f6e93df9f35ea7598ddf42929bc98dd1152a46924b084e7307b94db26e794863ded7c14c701650088c1811a6521d52ea97708b509bc852142e57b8dd2ed2a7f9aba3e1c2c3dda887814406de71951f4ffab5572c649741d8e577679aeba8e3871d1e1168eb6c830c95c569d44678fc9afd5f19457e39737db1ce902311d71effecf6304ba6421325eb4cc7915c62fcfb145c777fdb5ae1c074792055dd86ca82087de194d1a38da2aad0474d01c241280614b07b4f84ef3297784b1d6f9fdcf61cfe91dd2a479db11474a21bf940bacb80c4c3bc3da01edd9af579c763349ff0fb630a4a80194a4c3d62c40ab9a6c92d6bf9456c1b438026d86878c5a200387e6f96a6261da625872901be53503cad23596e3b6642bc35b82a96ec02bd82c39489c310ac43703f1ad38579084683929149f64d54d306dc092701da3b050e0910963bf5ccb9c7f7020627315df740261d5bc6187eabfede97c93d465aac275f9498fb63789aef41d3bbc1d9f306be240fb77a02a09bddd90c03cf742bf65977ff86b7e5c5c8d9b1ef7944458ce5332a9e11ca3a7ba0dd0f14bde10c1a385d7b70ee7acdb9d38dd26e94fa47bcac04c029c27f0f5dde85b75971b128a21a559f2fbc4930492b508ab8985ea95b86c76fba14532a6b69311208107ca0f933a03647298eb3cd405fa86f01d53d16a7074aca174dfd16126dc203ae9bba68864fa679e7e54272c83f5b5095ce14af31e6832b103b6a9219c7cfa76d10d560d3883a946e550369341dd3f182a8abe69f6dd0d0ac2b794d9211dc44e6fec5586f2d3b094198e7208f9c052b755ddeb04afa186b328ef16309c466343feb07565d1f741d0699c01bcd53485c770bcfe2142a0874cedf8dbe80d952598cf984487c5f21f2d788b682b6fbd665142565c63959340f601208719e1aedd0473211646f8d3cd632039d0e5949649068b4bf7dbf57ad663635a732411566c7d60c8523658f8bed47d3e7faca61825d1edb956f1b16f08c7ec58eae729ece3c773871cb2295c75cb044aec0bd7c570d44d80dfd6c309b4a93910e9f1832101ce8223b0a9d61895347f8e2cec9a0107ce3e5e8bc2ac777ac9e985091f7a771e2c8e0eb843f0eeca029a21884e9a788e41c1f3cdea18e53bb592201410952fb6ef70c701f1b3f6ecc33b6760956ec6e09b7baf97f0f285aa6f286f4f2640fb2dd93ee1380c0836887f1e8a51f092f5b9f45ee3e5782fa32cd8b41f012c8030b72f3531e8d64e7ce8237df8bd12ebff425def601cacc0ee06be924ed899992f50d76fe506ad43269da4b65dec249852ce3f7889018b485aa98ac5a7248fd27e12dcdaf0f6ba50efc366199be321192e91289b00f9bd1899f43575a8483c8a36d961c83079bc893067744549b4788247e4780bcb5570e5d23e916fac04fadbc9104ee40f2465ad7a189c5615ad22cfaa0b5172feee71f5d9b4bc24756b1447109923e0c97f301c9e723e5ced17be272500a41723c624baec90103440d71b5fbbf9960cd08607ee7c57d4a1cff51a0a1b1fd442413172665f9861a30dc986728e01ca562138fbea5a2328c44f9cd31cf50489bb89d557753be88c35c7aced6d8c6b8b01b5f01dfbd9ea1129eab24309c049e2baf49adeb35b87abdb11d1df30b04db24945e60f8070831f4d0556d159ebe7a5b55beab54ec9dac594cd8d896bfc95cdefedeed3828a2b1226c664f9c457468399d912385ad83bb15ff483f1b73ec761c0df87bfaf37c76cc0ddd4b7faf1881bb825930e50ca276895cd629526604b579a22114e44b2365eca3f91999125cf9b9adcea1adf83dd7bf6c939bf793c276c1ac5344769b4ae32faa422122d6de187dd36ba319f25665f9747d540ab0bed742c33d5ef812fb7955a214bafe0cf8f4716eba64a11a22591e58bc1783b0ce9a2f7f3ea088afc9418efcff963887a5c4028e1e4e47265230daece6f164a3b22929873cdc545403e82adbd154765fcce2d7ece9f0903378f7c323efb4872bfb0b9a9bbe64ed5a01fc2123ba73fa5114bc862e136d8952ae0ab8f9d2b97cd86c52587ed68f3ecd749f850e5be1f7e24f0f4b0d5651e77af63df3228f2e5297b877cb481af60b543fcb9a91c076ff0fa9cb7c1dd8b48adb6f559ba99776de64ac8f800bfd2d635ed6edec681f2fbe8f59fc3e09bae5aa9ed3cfb06eece6318a402aa8c90973b09a3e9f716d9eb53ed0a64c26c13834ce05ee923db42e0ac4806ceaab756f344620799aba84bc057889083f93f82a3bbc2bfc026415f1c2778f01e74563b5154c5293f7ca692ae9123475e5ca1e664e0e23fb9b98e5be44173219e3d09a8120083e5a480fbc58d973c4be039b65e9887b2d55072c385d975025f93dafd05d68e855a0c304c285805639293f3fadb2d4dae6d01c2cfdbc21acea7dba2ea9adc2133b953a4fb2b70488cd21080af5c44dd2fd4637fbffcd32caceaaff2aaa1f361f861c18dc9e56bfca6725e41704f6063bc3ceed7ca7bfb371f3dace6fca7ed0bb931d6435e116bd059cdf07d53eb7521a00fb302ab530b5df77ec28fb0cf6e31e5d40063c16ae893bb5e279b839fc9f113455448ec9acaa291b56b25a1f4d23283a7cbaa01affadb9dd02187d04a65430e8a702f790be1e6b7d3e81e1c51d1e76df81d8b66d2f8ad4d488cb851415531d8a3a53546e05127cd4ab37821d52dce949072b45db06d11ae55a87b74c4dab225e9453bc8d00638a229bf0d6d8b4e19b66a6aab940f34b94491a6aac6a44fe830abecf1bc0ea193124d348be6e5e4b8494286f092c93f4a942be70483ce7f4f8657c701726a41ba84af65a8f37c228a1d6d57113cd54439287b172ec049aaf69887def4cbc42dddbc562c07fc569e3503dbff001272bba1496b060ec73380833699dc65e08aa838571ef3776bbcde61f8ea0703e769738a82e772736416eee5e048b3338bb450120e43dadc1c33ff7e3410fefe65f409ba9c2e6c2d032d3c80e979018643781de02566c92246a2219a317c6836b06b06c9dc5797c9b9caab7ad5aaf3237a343610514ff31849e87c5fd4c29abc0f31333f32320d208ba4220e2c7eb34df73e5db6187dff5fd167083cb9bf95ed8688278ec92623ff8f114611d87790ac0ab037adaa6305fce517f81412702793836b9fc4db70a9d5724ac5c6f702fb144c760ab36b3269f0ad96cf02352bd7c2c7ff017e0664e91b078c03d45f6ee01b96164a4698bb55153397d72f50a5b82a1c23ca916f4f4a27e32aa34ca3059ecedcd58c8948240df0a9a454b33d8a3ed89151d3350a679fa3d4af9a0d365c69c700bb951f7432d91d155777e746a2d57c18f6b0f6856c844b2c7d96bcbb22e7c979612c29f8491469d5f139f6b2bfbc5f97ae4976ae16e41c0ebbc4c2aae47e1489bcc9fd479fe6479928fb914ed60db58e62c7f26e79ea76b712d990a4290b8757d9d4c5f49d58af145ed7a5b6f728b5fcf119fb873a04cfa937ab16c629ee0ff8686fdf62b1443f5060f8b409f503f67e025e85f5361c573d3b48d0b7b7a56e73d5926d0e8ee8caab9f185a576ab659c4b988b90913aeddb58748f5ec7a66a092ce38a4a7c57156a756a5ba3fca19742bcacf8fd83e651cb9827f08db3d967439bdb7dcdea4db300cc7e2ed8e29f630971b1f21b5302991be28f3db0a048bb043d30b57e4700f931ff639b77a8e6da69d45f4be9a8c609a66bf4d106e2496a04145d36c4db17481a1cab29a98ba23fa3b34037595fe58db9c55746f8f8e259dea40e7a095a28e50d9ec1dbdacb2e8667e"}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xffff, 0xd9, &(0x7f0000000440)=""/217, 0x41100, 0x36, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e45}, 0x94) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, 0x0, 0x8064) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 964.285338ms ago: executing program 3 (id=3703): socket$inet(0x2, 0x5, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x5a, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 958.600878ms ago: executing program 0 (id=3704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xf, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, 0x0, 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @tail_call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$TUNSETIFF(r2, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x1f6}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x1f6}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x67}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) (async) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000800000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 734.443072ms ago: executing program 0 (id=3705): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x19, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x5f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x19, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x5f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 692.521898ms ago: executing program 1 (id=3706): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvmmsg$unix(r0, &(0x7f0000001180)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)=""/171, 0xab}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f00000004c0)}], 0x8, &(0x7f0000000580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/115, 0x73}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/200, 0xc8}], 0x5, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000000c00), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/57, 0x39}, {&(0x7f0000000cc0)=""/132, 0x84}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/127, 0x7f}, {&(0x7f0000000f00)=""/148, 0x94}, {&(0x7f0000000fc0)=""/137, 0x89}], 0x6, &(0x7f0000001100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x3, 0x2000, &(0x7f0000001240)={0x77359400}) connect$inet(r14, &(0x7f0000001280)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000012c0)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r16, 0x114, 0x7, &(0x7f0000001380)={@nfc_llcp={0x27, r20, 0x1, 0x6, 0x6, 0xa, "1c204ee8c893d79b315d955c8383e770245fbb8ecc36caedbba7abe0d7a970c429042f7ff711acfb6b4cc5b1d1930e37ba64b1c86f1862614125eaab4ca42d", 0x2b}, {&(0x7f0000001300)=""/8, 0x8}, &(0x7f0000001340), 0x8}, 0xa0) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, r21, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4008084) openat$cgroup_ro(r15, &(0x7f0000001580)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r22 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r5) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000029c0)={&(0x7f0000001640)={0x1380, r22, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x1054, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1166b57f43517307357180ff294653292223bbdc3372ba201faf6e47b1df3eba"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "63555ca3afd65f20d34557f57024b6555b3a9904b922"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "896d8dd9d2b33b0b472fd84e4fc7966ce7d1843fbba365563eda307e48833899829656"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3b3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2469}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x57b87f0}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xb, @private1, 0x53f5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0xffff}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}]}]}, 0x1380}, 0x1, 0x0, 0x0, 0x4040044}, 0x84) clock_gettime(0x0, &(0x7f0000006d00)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000006b40)=[{{&(0x7f0000002a40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000003b00)=""/216, 0xd8}, 0x6a}, {{&(0x7f0000003c00)=@tipc=@name, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003c80)=""/141, 0x8d}], 0x1}, 0x80000001}, {{&(0x7f0000003d80)=@qipcrtr, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e00)=""/85, 0x55}, {&(0x7f0000003e80)}, {&(0x7f0000003ec0)=""/210, 0xd2}, {&(0x7f0000003fc0)=""/22, 0x16}], 0x4, &(0x7f0000004040)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000005040)=""/220, 0xdc}, {&(0x7f0000005140)}, {&(0x7f0000005180)}], 0x3, &(0x7f0000005200)=""/158, 0x9e}, 0x80}, {{&(0x7f00000052c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005340)=""/39, 0x27}, {&(0x7f0000005380)=""/102, 0x66}, {&(0x7f0000005400)=""/77, 0x4d}, {&(0x7f0000005480)=""/49, 0x31}, {&(0x7f00000054c0)=""/216, 0xd8}], 0x5, &(0x7f0000005640)=""/4096, 0x1000}, 0x7e5}, {{&(0x7f0000006640), 0x80, &(0x7f00000068c0)=[{&(0x7f00000066c0)=""/122, 0x7a}, {&(0x7f0000006740)}, {&(0x7f0000006780)=""/230, 0xe6}, {&(0x7f0000006880)}], 0x4, &(0x7f0000006900)=""/158, 0x9e}, 0xe}, {{&(0x7f00000069c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000006b00)=[{&(0x7f0000006a40)=""/143, 0x8f}], 0x1}, 0xfffffffb}], 0x7, 0x2000, &(0x7f0000006d40)={r23, r24+60000000}) ioctl$PPPIOCGIDLE32(r12, 0x8008743f, &(0x7f0000006d80)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000006e40)={r17, &(0x7f0000006dc0)="173ccd424d41a8da0c1cb633587b7aaee91e733c7f72bb9a81136769d215d011499c43c649ef6fc2", &(0x7f0000006e00)=@tcp=r11, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r18, 0x8933, &(0x7f0000006ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r13, &(0x7f0000006f80)={&(0x7f0000006e80)={0x10, 0x0, 0x0, 0xa5424000}, 0xc, &(0x7f0000006f40)={&(0x7f0000006f00)={0x30, r21, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r25}, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x80) read(0xffffffffffffffff, &(0x7f0000006fc0)=""/70, 0x46) sendmsg$kcm(r6, &(0x7f0000007380)={&(0x7f0000007040)=@in6={0xa, 0x4e21, 0x5, @remote, 0x67}, 0x80, &(0x7f0000007340)=[{&(0x7f00000070c0)="39ed3939157bde1ac1f174c8c781be3232ef9f0d5b1538e0827776660beb4dc3", 0x20}, {&(0x7f0000007100)="66f67a474f54a3eec7c51fe075f6d5c7b1617a0a34439c6d8e5701c213aa3ce7dc6ca6baf664ed7651bb5bdb16c7f1e8757943e4061912f48898a63b725d1592fc76f06ff754c23e40e6f2d217653681419fdb00e537df91bcbbe3a2fc588db883cc9a19e159e15c1dd5af", 0x6b}, {&(0x7f0000007180)="8a746f1777abfcb0ee46e8ba9bdd45cae9280788074f91aff4015403e569aa4bb99d32b4c497b4cb6296db68a4a3a3549e4c30e2dd90cb10922612c01592ec991325deb5a6bb7b199a20c88301b2d0479acd4191bc6e7bba0ca6fbacd1b618f0d51f0c4436b5bc7f645203a9f0bed37436b2e8d6da2f31e65910107b256fe0ef788b", 0x82}, {&(0x7f0000007240)="6b3cc858a75cc5eb3a2b32c18d47bc1632ad9fd5449fe538290fb04fc9ee1701111d3415dcaeb022b33e2b7eeda1b4f88c0a286c315b8023ca2a564692ad60a156528cf31aec79d398a9581533904f86609a3a718e6f3781c4afafdc874e96f803d66126d70e522f8f15ddaf25f0044a15abff5ff80396997798c0e088c8be1c1187e1a4484edce6b0b5ee479129d2b84665d0840b5d439a61ffa9fea4050d85e290bb89c1871cb7b3567813b52c27bae2454b7c5774c7d3e99af1642af2f6e496bdefb6fc7b75112c94c80139c5cbc39f0380631cb0abac0e515ff394054334", 0xe0}], 0x4}, 0x20000008) bind$unix(r4, &(0x7f00000073c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCADDRT(r18, 0x890b, &(0x7f0000007480)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @remote}, 0x204, 0x0, 0x0, 0x0, 0x2, &(0x7f0000007440)='ipvlan1\x00', 0x6, 0x8, 0x9}) r26 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(r26, 0x80049370, &(0x7f0000007500)) listen(r8, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000007600)={&(0x7f0000007540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000075c0)={&(0x7f0000007580)={0x18, r21, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x4000) sendto$ax25(r3, &(0x7f0000007640)="71513d76c050f1c64cd74c89f2d93b88fb1c0c92c6d5f22a9b7c0b4f95cc0a7c0031d33bd26da8acac1f91b98cb42b83c857bd3be2e7e992dffd2cc2a4", 0x3d, 0x2000, &(0x7f0000007680)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000007700)=@generic={0x0, 0x5, 0x3}) setsockopt$MRT6_TABLE(r19, 0x29, 0xcf, &(0x7f0000007740)=0x1, 0x4) bind$inet6(r16, &(0x7f0000007780)={0xa, 0x4e24, 0x3, @empty, 0x2}, 0x1c) r27 = openat$ppp(0xffffffffffffff9c, &(0x7f00000077c0), 0x0, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r27, 0x7434) 556.840822ms ago: executing program 3 (id=3707): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 386.240692ms ago: executing program 1 (id=3708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x16c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x118, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x88, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x55, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429934982873a3f054bcb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='macsec0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80) 385.861348ms ago: executing program 0 (id=3709): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x84, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12a}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 286.960718ms ago: executing program 3 (id=3710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2a6001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth1_to_bridge\x00', @broadcast}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) 219.742859ms ago: executing program 1 (id=3711): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x38, 0x40040}, 0x4004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x1b0, 0x30, 0x1, 0x0, 0x0, {}, [{0x19c, 0x1, [@m_sample={0x150, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x1b3, 0x8, 0xa364, 0xfffffff7}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0xf1, 0x6, "26224b929cdbcd3c7e3d454fcb97758eb19a41b4272d1265cd523102793cc9dd5256f4d4607ef73538be7ac95c09a78dcfbab503d652f5b5d9e34d7e78595b709ce8b8a8e462546ef0dc25322022aee5278d7468b053637fe5de81e3f55e0afaf252f8dd4059d0745a84815de42e5f46553bbe9b17e82e0ef4298e984cfd9a415588826faf35fec08b4a7605d814b38de46ea50a8c19a7bd129f678933a39ef0aeb24469e54c3ba6640bfe925ab3cbd37cac5cc7f55383ff31c9ae6115d4897a0f84b847dd9312fd2d34ae6b11407b78ae1276f256b949df33c255766da829f71c524ff96a4891278af96209f3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x1b0}}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) accept$alg(r5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$ax25(0x3, 0x4, 0xcc) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 50.470172ms ago: executing program 3 (id=3712): syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600000400fc020000000000000000f8ffffff0000ff020000000000000000000000000001b589bbfc326e2af473dcec753bc37f4e9948401d1ccf21d28f626c79b5e4998a0c233f011b3ee80693587e3adbfdba6643"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x24004000) r3 = socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) listen(r0, 0xfffffffe) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4002810}, 0x24000840) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 0s ago: executing program 1 (id=3713): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="6105070f0305b4f36d5052050000004f250d4f01010b0604f2"], 0x19) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x20000040) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e2, &(0x7f0000000300)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x0) r10 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r10, &(0x7f0000000040), 0x6) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="0800b700b4000000080026006ced0000"], 0x2c}}, 0x0) r12 = socket(0x10, 0x803, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r12) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="00858ebb", @ANYRES16=r13, @ANYBLOB="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"], 0x404}, 0x1, 0x0, 0x0, 0x20059095}, 0x4004) getpeername$packet(r12, 0x0, 0x0) kernel console output (not intermixed with test programs): t [0, 0] type 1 family 0 port 8472 - 0 [ 300.678962][ T2987] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.693463][ T2987] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.714237][ T2987] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.903017][T12790] netlink: 'syz.2.1982': attribute type 4 has an invalid length. [ 301.383979][ T7007] IPVS: starting estimator thread 0... [ 301.399198][T12819] netlink: 'syz.0.1988': attribute type 2 has an invalid length. [ 301.490498][T12821] IPVS: using max 26 ests per chain, 62400 per kthread [ 301.613509][T12832] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 301.676792][T12833] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 301.680319][T12832] netlink: 'syz.1.1992': attribute type 4 has an invalid length. [ 301.723097][T12833] netlink: 'syz.1.1992': attribute type 4 has an invalid length. [ 301.765664][T12833] siw: device registration error -23 [ 301.804657][T12841] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 301.955553][T12841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 302.069012][T12848] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 302.514513][T12868] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.812803][T12879] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 302.820878][T12879] netlink: 'syz.2.2008': attribute type 4 has an invalid length. [ 302.828638][T12879] __nla_validate_parse: 8 callbacks suppressed [ 302.828656][T12879] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2008'. [ 302.882453][T12882] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2009'. [ 303.002194][T12887] netlink: 'syz.0.2010': attribute type 4 has an invalid length. [ 303.018914][T12887] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2010'. [ 303.087239][T12890] openvswitch: netlink: IPv4 tun info is not correct [ 304.057834][T12877] lo speed is unknown, defaulting to 1000 [ 305.300356][T12976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.677706][T12990] nbd: must specify a size in bytes for the device [ 305.873264][T13001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2038'. [ 306.167450][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 306.183681][T13017] netlink: 'syz.4.2043': attribute type 39 has an invalid length. [ 306.358708][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.418317][T13027] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2045'. [ 306.617453][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 306.767268][T13041] dvmrp1: entered allmulticast mode [ 306.965445][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 307.108259][T13057] openvswitch: netlink: Unknown key attributes 2 [ 307.123215][T13057] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.262758][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2058'. [ 307.286992][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2058'. [ 307.981796][T13108] pim6reg1: entered promiscuous mode [ 308.046334][T13108] pim6reg1: entered allmulticast mode [ 308.368983][ T3498] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.399953][ T3498] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.420008][ T3498] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.434755][ T3498] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.857611][T13153] __nla_validate_parse: 3 callbacks suppressed [ 308.857651][T13153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2086'. [ 309.330798][T13152] infiniband syz2: set down [ 309.335530][T13152] infiniband syz2: added bond_slave_0 [ 309.385919][T13152] RDS/IB: syz2: added [ 309.390153][T13152] smc: adding ib device syz2 with port count 1 [ 309.396444][T13152] smc: ib device syz2 port 1 has pnetid [ 309.580042][T13182] netlink: 'syz.3.2092': attribute type 1 has an invalid length. [ 309.597887][T13182] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2092'. [ 309.635511][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 309.833942][T13192] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 310.250422][T13205] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2100'. [ 310.264599][T13202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.272967][T13202] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 310.310779][T13202] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 311.213965][T13250] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2113'. [ 311.595720][T13258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.726774][T13276] bond0: entered allmulticast mode [ 311.739197][T13276] bond_slave_0: entered allmulticast mode [ 311.761834][T13276] bond_slave_1: entered allmulticast mode [ 312.117266][T13292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2121'. [ 312.246049][T13300] netlink: 'syz.3.2124': attribute type 8 has an invalid length. [ 312.526862][T13319] netlink: 'syz.3.2128': attribute type 11 has an invalid length. [ 312.585018][T13319] netlink: 'syz.3.2128': attribute type 11 has an invalid length. [ 312.624412][T13319] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2128'. [ 313.064437][T13341] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 313.113031][T13341] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 313.221490][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 313.384113][T13361] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2136'. [ 313.440204][T13361] unsupported nlmsg_type 40 [ 314.047050][T13379] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2141'. [ 314.074311][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2139'. [ 314.078929][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 314.194670][T13379] vlan0: entered allmulticast mode [ 314.225977][T13379] bridge0: entered allmulticast mode [ 314.255703][T13379] bridge4: port 1(vlan0) entered blocking state [ 314.281425][T13379] bridge4: port 1(vlan0) entered disabled state [ 314.321184][T13379] vlan0: entered promiscuous mode [ 314.337419][T13379] bridge0: entered promiscuous mode [ 314.522523][T13396] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2145'. [ 314.772374][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 314.854707][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 315.103644][T13430] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2151'. [ 315.522607][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2153'. [ 315.733492][T13452] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 315.791518][T13452] netlink: 'syz.4.2155': attribute type 1 has an invalid length. [ 316.026583][T13467] tipc: Enabled bearer , priority 0 [ 316.086787][T13467] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 316.104068][T13467] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 316.140867][T13467] tipc: Resetting bearer [ 316.182719][T13471] tipc: Enabled bearer , priority 0 [ 316.255972][T13469] syzkaller0: entered promiscuous mode [ 316.264268][T13469] syzkaller0: entered allmulticast mode [ 316.273404][T13469] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 316.340580][T13486] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 316.348372][T13486] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2163'. [ 316.396284][T13471] tipc: Resetting bearer [ 316.485037][T13468] tipc: Resetting bearer [ 316.566103][T13468] tipc: Disabling bearer [ 316.810787][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 316.827759][T13509] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 316.845571][T13507] netlink: 'syz.4.2169': attribute type 2 has an invalid length. [ 316.860588][T13507] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 317.758161][T13554] dvmrp0: entered allmulticast mode [ 317.796119][T13554] dvmrp0: left allmulticast mode [ 317.809059][T13554] dvmrp1: left allmulticast mode [ 318.423427][T13581] !: renamed from dummy0 [ 318.621685][T13596] netlink: 'syz.1.2194': attribute type 10 has an invalid length. [ 318.657835][T13596] team0: Device gtp1 is of different type [ 318.753278][T13598] tipc: Enabled bearer , priority 0 [ 318.767190][T13598] syzkaller0: entered promiscuous mode [ 318.799404][T13598] syzkaller0: entered allmulticast mode [ 318.847524][T13598] tipc: Resetting bearer [ 318.888773][T13597] tipc: Resetting bearer [ 318.932763][T13597] tipc: Disabling bearer [ 319.140254][T13628] netlink: 'syz.3.2202': attribute type 8 has an invalid length. [ 319.881932][T13670] __nla_validate_parse: 9 callbacks suppressed [ 319.881952][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2211'. [ 320.235633][T13688] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2217'. [ 320.268273][T13691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2219'. [ 320.311298][T13691] netlink: 'syz.3.2219': attribute type 7 has an invalid length. [ 320.340278][T13691] netlink: 'syz.3.2219': attribute type 8 has an invalid length. [ 320.348063][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 320.867345][T13722] syzkaller1: entered promiscuous mode [ 320.884105][T13722] syzkaller1: entered allmulticast mode [ 321.022490][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2234'. [ 321.055702][T13735] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2233'. [ 321.072003][T13735] netlink: 'syz.4.2233': attribute type 6 has an invalid length. [ 321.334005][T13754] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 321.351978][T13754] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2238'. [ 321.516564][T13759] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2240'. [ 321.558707][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2240'. [ 321.648990][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2240'. [ 321.893041][T13780] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.913845][T13783] netlink: 'syz.0.2250': attribute type 1 has an invalid length. [ 322.485722][ T3498] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.510949][ T3498] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.642930][ T3498] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.682601][ T3498] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.233280][T13858] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 323.280004][T13858] dummy0: entered promiscuous mode [ 323.317322][T13858] bridge0: port 3(dummy0) entered blocking state [ 323.356713][T13858] bridge0: port 3(dummy0) entered disabled state [ 323.405572][T13858] dummy0: entered allmulticast mode [ 323.444789][T13871] netlink: 'syz.1.2271': attribute type 33 has an invalid length. [ 323.445121][T13858] dummy0: left allmulticast mode [ 323.472312][T13858] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 323.542779][T13866] block nbd2: server does not support multiple connections per device. [ 323.588099][T13866] block nbd2: shutting down sockets [ 323.627011][T13875] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 324.001885][T13900] netlink: 'syz.0.2278': attribute type 11 has an invalid length. [ 324.412474][T13914] tipc: Enabled bearer , priority 0 [ 324.570691][T13914] syzkaller0: entered promiscuous mode [ 324.577535][T13914] syzkaller0: entered allmulticast mode [ 324.600689][T13914] tipc: Resetting bearer [ 324.705114][T13919] geneve3: entered promiscuous mode [ 324.722036][T13919] geneve3: entered allmulticast mode [ 324.749331][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.770760][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.801055][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.848051][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.328872][T13949] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 325.386967][T13950] __nla_validate_parse: 139 callbacks suppressed [ 325.386983][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2289'. [ 325.873347][T13909] tipc: Resetting bearer [ 326.170548][T13954] xt_socket: unknown flags 0xe4 [ 326.197874][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2291'. [ 327.722723][T13909] tipc: Disabling bearer [ 327.734799][T13949] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 327.954940][T13980] tc_dump_action: action bad kind [ 328.294918][T14003] netlink: 'syz.2.2303': attribute type 64 has an invalid length. [ 328.325621][T14003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 328.387684][T14012] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2305'. [ 328.537051][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2308'. [ 328.608621][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 328.824875][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2311'. [ 329.242560][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 329.803361][T14088] tipc: Enabled bearer , priority 0 [ 329.835495][T14088] tipc: Resetting bearer [ 329.954379][T14097] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 330.092784][T14097] 8021q: adding VLAN 0 to HW filter on device bond11 [ 330.198543][T14087] tipc: Disabling bearer [ 330.236462][T14097] vlan2: entered promiscuous mode [ 330.247978][T14097] bond11: entered promiscuous mode [ 330.253485][T14097] vlan2: entered allmulticast mode [ 330.258970][T14097] bond11: entered allmulticast mode [ 331.134152][T14139] lo speed is unknown, defaulting to 1000 [ 331.521041][T14179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 331.533824][T14179] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2352'. [ 331.772291][T14196] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2355'. [ 331.865040][T14202] netlink: 'syz.2.2356': attribute type 16 has an invalid length. [ 331.892244][T14202] netlink: 'syz.2.2356': attribute type 17 has an invalid length. [ 332.010320][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.069607][T14207] netlink: 'syz.3.2359': attribute type 1 has an invalid length. [ 332.087111][T14202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.116406][T14202] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.157688][T14202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.189893][ T6995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.210148][T14204] batadv_slave_0: left promiscuous mode [ 332.252798][T14204] ip6gre1: left allmulticast mode [ 332.280927][T14204] veth9: left promiscuous mode [ 333.083685][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.359560][T14209] lo speed is unknown, defaulting to 1000 [ 333.489052][T14235] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 334.120751][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.141583][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.219185][T14261] netlink: 'syz.0.2371': attribute type 21 has an invalid length. [ 334.262156][T14261] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2371'. [ 334.451655][T14273] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 334.523796][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 334.707753][T14273] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.079855][ T6992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.081167][T14276] bond5 (unregistering): Released all slaves [ 335.417730][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 335.417730][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 335.516365][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2377'. [ 335.783844][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 336.067786][T14316] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 336.215681][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'. [ 336.737651][T14355] netlink: 'syz.1.2396': attribute type 11 has an invalid length. [ 336.752705][T14355] __nla_validate_parse: 2 callbacks suppressed [ 336.752726][T14355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2396'. [ 336.871880][T14354] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20003 [ 336.949233][T14359] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2397'. [ 337.077829][T14370] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2400'. [ 337.114232][T14370] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2400'. [ 337.221158][T14376] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 337.556486][T14400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.602417][T14400] netlink: 'syz.4.2407': attribute type 10 has an invalid length. [ 337.622563][T14400] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2407'. [ 337.703851][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2407'. [ 337.708187][T14400] team0: Port device geneve0 added [ 337.766141][ T5986] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.836583][ T5986] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.860295][ T5986] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.868557][ T5986] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.895072][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2415'. [ 337.927398][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2415'. [ 337.993469][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2414'. [ 338.241620][T14437] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2419'. [ 338.279618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.448338][T14454] sit2: entered promiscuous mode [ 338.465507][T14454] sit2: entered allmulticast mode [ 338.777089][T14472] tipc: Enabled bearer , priority 0 [ 338.791638][T14472] syzkaller0: entered promiscuous mode [ 338.802818][T14472] syzkaller0: entered allmulticast mode [ 338.831651][T14472] tipc: Resetting bearer [ 338.967981][T14450] netlink: 'syz.3.2424': attribute type 21 has an invalid length. [ 338.988940][T14471] tipc: Resetting bearer [ 339.040961][T14471] tipc: Disabling bearer [ 339.810367][T14528] Unsupported xt match [ 339.810388][T14528] unable to load match [ 340.618273][T14532] lo speed is unknown, defaulting to 1000 [ 340.912998][T14573] netlink: 'syz.0.2455': attribute type 5 has an invalid length. [ 340.920989][T14572] netlink: 'syz.0.2455': attribute type 5 has an invalid length. [ 341.028072][T14582] netlink: 'syz.4.2458': attribute type 83 has an invalid length. [ 341.510479][T14608] netlink: 'syz.2.2466': attribute type 11 has an invalid length. [ 341.942732][T14628] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.074212][T14637] sch_tbf: peakrate 32768 is lower than or equals to rate 4294967294 ! [ 342.697494][T14653] __nla_validate_parse: 21 callbacks suppressed [ 342.697515][T14653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2476'. [ 342.870517][T14657] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 343.221894][T14657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 343.369677][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'. [ 343.721491][T14697] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 343.757748][T14694] sctp: [Deprecated]: syz.2.2484 (pid 14694) Use of int in maxseg socket option. [ 343.757748][T14694] Use struct sctp_assoc_value instead [ 343.833652][T14704] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2490'. [ 344.191989][T14718] sctp: [Deprecated]: syz.1.2493 (pid 14718) Use of int in maxseg socket option. [ 344.191989][T14718] Use struct sctp_assoc_value instead [ 344.482067][T14726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2494'. [ 344.516304][T14726] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2494'. [ 345.048068][T14758] sit2: entered promiscuous mode [ 345.098780][T14762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.122001][T14758] sit2: entered allmulticast mode [ 345.134387][T14762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2501'. [ 345.323108][T14767] syzkaller0: entered promiscuous mode [ 345.329585][T14767] syzkaller0: entered allmulticast mode [ 345.385144][T14767] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 345.676944][T14781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.708917][T14783] netlink: 'syz.4.2509': attribute type 21 has an invalid length. [ 345.723576][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2510'. [ 345.732904][T14783] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2509'. [ 345.808743][T14790] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2513'. [ 345.868602][T14795] º: renamed from veth1_vlan [ 345.998535][T14798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 346.219593][T14817] IPv6: NLM_F_REPLACE set, but no existing node found! [ 346.365650][T14827] netlink: 'syz.2.2525': attribute type 12 has an invalid length. [ 346.548098][T14840] bridge_slave_1: left allmulticast mode [ 346.579188][T14840] bridge_slave_1: left promiscuous mode [ 346.599605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.603865][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.690238][T14840] bridge_slave_0: left allmulticast mode [ 346.707424][T14840] bridge_slave_0: left promiscuous mode [ 346.736582][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.852485][T14844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.437025][T14885] netlink: 'syz.1.2543': attribute type 5 has an invalid length. [ 347.460490][T14885] geneve3: entered promiscuous mode [ 347.472562][T14885] geneve3: entered allmulticast mode [ 347.496862][ T3498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 347.524270][ T3498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 347.540447][ T3498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 347.564034][ T3498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 347.758780][T14900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.780001][T14897] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 347.791224][T14904] netlink: 'syz.1.2551': attribute type 1 has an invalid length. [ 347.793965][T14897] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 347.808443][T14897] tipc: Resetting bearer [ 347.809019][T14904] openvswitch: netlink: IP tunnel TTL not specified. [ 348.195541][T14925] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 348.497122][T14949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.630302][T14959] 8021q: VLANs not supported on lo [ 348.748787][T14964] __nla_validate_parse: 11 callbacks suppressed [ 348.748809][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 348.794848][T14964] netlink: 'syz.1.2568': attribute type 3 has an invalid length. [ 348.953445][T14979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.992714][T14980] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2571'. [ 349.097755][T14985] tun0: tun_chr_ioctl cmd 1074025675 [ 349.111711][T14985] tun0: persist disabled [ 349.174994][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2575'. [ 349.696211][T15021] pimreg: entered allmulticast mode [ 350.098203][T15046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2588'. [ 350.357406][T15052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.443161][T15054] netlink: 'syz.2.2590': attribute type 8 has an invalid length. [ 350.469586][T15052] FAULT_INJECTION: forcing a failure. [ 350.469586][T15052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.495669][T15052] CPU: 0 UID: 0 PID: 15052 Comm: syz.3.2591 Not tainted syzkaller #0 PREEMPT(full) [ 350.495701][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.495720][T15052] Call Trace: [ 350.495728][T15052] [ 350.495739][T15052] dump_stack_lvl+0x189/0x250 [ 350.495771][T15052] ? __pfx____ratelimit+0x10/0x10 [ 350.495795][T15052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.495822][T15052] ? __pfx__printk+0x10/0x10 [ 350.495866][T15052] should_fail_ex+0x414/0x560 [ 350.495906][T15052] _copy_to_user+0x31/0xb0 [ 350.495939][T15052] simple_read_from_buffer+0xe1/0x170 [ 350.495978][T15052] proc_fail_nth_read+0x1b3/0x220 [ 350.496008][T15052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.496038][T15052] ? rw_verify_area+0x2a6/0x4d0 [ 350.496065][T15052] ? __lock_acquire+0xab9/0xd20 [ 350.496096][T15052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.496124][T15052] vfs_read+0x200/0xa30 [ 350.496152][T15052] ? fdget_pos+0x247/0x320 [ 350.496177][T15052] ? __pfx___mutex_lock+0x10/0x10 [ 350.496203][T15052] ? __pfx_vfs_read+0x10/0x10 [ 350.496234][T15052] ? __fget_files+0x2a/0x420 [ 350.496259][T15052] ? __fget_files+0x3a0/0x420 [ 350.496277][T15052] ? __fget_files+0x2a/0x420 [ 350.496307][T15052] ksys_read+0x145/0x250 [ 350.496339][T15052] ? __pfx_ksys_read+0x10/0x10 [ 350.496364][T15052] ? rcu_is_watching+0x15/0xb0 [ 350.496401][T15052] ? do_syscall_64+0xbe/0x3b0 [ 350.496431][T15052] do_syscall_64+0xfa/0x3b0 [ 350.496452][T15052] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.496474][T15052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.496495][T15052] ? clear_bhb_loop+0x60/0xb0 [ 350.496520][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.496545][T15052] RIP: 0033:0x7fef9bf8d5bc [ 350.496564][T15052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 350.496579][T15052] RSP: 002b:00007fef9a1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.496598][T15052] RAX: ffffffffffffffda RBX: 00007fef9c1d5fa0 RCX: 00007fef9bf8d5bc [ 350.496610][T15052] RDX: 000000000000000f RSI: 00007fef9a1f60a0 RDI: 0000000000000006 [ 350.496620][T15052] RBP: 00007fef9a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.496633][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.496643][T15052] R13: 00007fef9c1d6038 R14: 00007fef9c1d5fa0 R15: 00007ffe832faa28 [ 350.496670][T15052] [ 350.802573][ T1149] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.811756][ T1149] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.820249][ T1149] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.828729][ T1149] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.897936][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 350.941904][T15069] sctp: [Deprecated]: syz.3.2597 (pid 15069) Use of int in max_burst socket option. [ 350.941904][T15069] Use struct sctp_assoc_value instead [ 351.122484][T15075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.215477][T15083] : entered promiscuous mode [ 351.341085][T15091] tipc: Enabling of bearer rejected, already enabled [ 351.369270][T15091] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 351.382125][T15091] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 351.429821][T15091] tipc: Resetting bearer [ 351.460516][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2605'. [ 351.525015][T15104] netlink: 'syz.4.2607': attribute type 1 has an invalid length. [ 351.536546][T15104] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2607'. [ 351.643403][T15108] tipc: Enabled bearer , priority 0 [ 351.681969][T15108] syzkaller0: entered promiscuous mode [ 351.698513][T15108] syzkaller0: entered allmulticast mode [ 351.751622][T15108] tipc: Resetting bearer [ 351.763612][T15115] netlink: 'syz.4.2612': attribute type 10 has an invalid length. [ 351.772347][T15107] tipc: Resetting bearer [ 351.790511][T15107] tipc: Disabling bearer [ 351.797807][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 351.860207][T15115] team0: Port device dummy0 added [ 351.967076][T15128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'. [ 352.003923][T15130] netlink: 556 bytes leftover after parsing attributes in process `syz.2.2613'. [ 352.053490][T15130] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 352.958705][T15190] tipc: Enabling of bearer rejected, failed to enable media [ 354.006182][T15237] ip6gre1: entered allmulticast mode [ 354.304337][T15246] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 354.314478][T15257] __nla_validate_parse: 2 callbacks suppressed [ 354.314498][T15257] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2656'. [ 354.383933][T15246] geneve3: left promiscuous mode [ 354.389039][T15246] geneve3: left allmulticast mode [ 354.415238][ T1149] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.424552][T15259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2655'. [ 354.426056][ T1149] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.450195][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 354.502443][ T1149] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.520118][ T1149] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.731099][T15282] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 354.782446][T15290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2661'. [ 354.802344][T15282] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.802947][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 355.181978][T15308] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2670'. [ 355.206308][T15314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.321664][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 355.565531][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 355.670477][T15340] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 355.718912][T15340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.743212][T15347] openvswitch: netlink: IPv6 tunnel dst address is zero [ 355.795580][T15349] bond7: (slave geneve2): making interface the new active one [ 355.806791][T15349] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 355.823612][ T3498] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.854342][ T3498] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.893070][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.911526][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.936222][T15357] veth0: entered promiscuous mode [ 355.949719][T15354] veth0: left promiscuous mode [ 356.048778][T15367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.300721][T15384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2693'. [ 356.689315][T15412] sctp: [Deprecated]: syz.2.2701 (pid 15412) Use of int in maxseg socket option. [ 356.689315][T15412] Use struct sctp_assoc_value instead [ 356.833729][T15420] tipc: Enabling of bearer rejected, already enabled [ 356.857006][T15419] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 356.914383][T15424] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 357.188678][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2711'. [ 357.234878][T15448] netlink: 'syz.0.2712': attribute type 10 has an invalid length. [ 357.247763][T15445] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2710'. [ 357.276911][T15445] nbd: illegal input index -8454144 [ 357.324176][T15448] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 357.338104][T15448] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 357.356050][T15448] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 357.517872][T15465] netlink: 'syz.4.2717': attribute type 1 has an invalid length. [ 357.594468][T15470] netlink: 'syz.1.2718': attribute type 1 has an invalid length. [ 357.837734][T15498] netlink: 'syz.4.2727': attribute type 15 has an invalid length. [ 358.229932][T15517] tipc: Enabled bearer , priority 0 [ 358.268196][T15512] tipc: Enabling of bearer rejected, already enabled [ 358.288997][T15517] netlink: 'syz.2.2730': attribute type 1 has an invalid length. [ 358.291325][T15522] netlink: 'syz.2.2730': attribute type 1 has an invalid length. [ 358.403896][T15512] bond5: (slave gretap2): making interface the new active one [ 358.451465][T15512] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 358.499050][T15531] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 358.512250][T15510] tipc: Disabling bearer [ 358.551545][T15539] tipc: Enabled bearer , priority 0 [ 358.643887][T15529] syzkaller0: entered promiscuous mode [ 358.664657][T15529] syzkaller0: entered allmulticast mode [ 358.720041][T15529] tipc: Resetting bearer [ 358.773367][T15528] tipc: Resetting bearer [ 358.855463][T15528] tipc: Disabling bearer [ 359.765190][T15610] __nla_validate_parse: 14 callbacks suppressed [ 359.765211][T15610] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2756'. [ 359.878974][T15616] netlink: 'syz.0.2758': attribute type 3 has an invalid length. [ 359.890746][T15616] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2758'. [ 359.999783][T15631] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2761'. [ 360.025095][T15631] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2761'. [ 360.129640][T15638] netlink: 'syz.2.2764': attribute type 64 has an invalid length. [ 360.130486][T15635] netlink: 'syz.4.2763': attribute type 25 has an invalid length. [ 360.159422][T15638] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2764'. [ 360.178828][T15636] netlink: 'syz.4.2763': attribute type 25 has an invalid length. [ 360.198289][T15638] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 360.208137][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 360.315437][T15638] netlink: 'syz.2.2764': attribute type 1 has an invalid length. [ 360.324773][T15638] netlink: 'syz.2.2764': attribute type 3 has an invalid length. [ 360.337079][T15638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2764'. [ 360.346599][T15638] NCSI netlink: No device for ifindex 0 [ 360.361690][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 360.391889][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 360.664698][T15671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2775'. [ 360.918588][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2778'. [ 361.032226][T15684] team0: Device vti0 is of different type [ 361.184010][T15665] lo speed is unknown, defaulting to 1000 [ 361.351021][T15698] tipc: Enabling of bearer rejected, already enabled [ 361.392911][T15698] bridge_slave_0: invalid flags given to default FDB implementation [ 362.013117][T15719] syzkaller1: entered promiscuous mode [ 362.041182][T15719] syzkaller1: entered allmulticast mode [ 362.676849][T15751] IPVS: Scheduler module ip_vs_sip not found [ 362.776520][T15759] syzkaller1: entered promiscuous mode [ 362.782992][T15759] syzkaller1: entered allmulticast mode [ 362.891028][T15764] bond6: entered promiscuous mode [ 362.896383][T15764] bond6: entered allmulticast mode [ 362.902010][T15764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.164029][T15777] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.292838][T15779] netlink: 'syz.4.2808': attribute type 16 has an invalid length. [ 363.494066][T15790] netlink: 'syz.2.2812': attribute type 21 has an invalid length. [ 364.455447][T15797] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 364.551621][T15832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.996369][T15858] __nla_validate_parse: 15 callbacks suppressed [ 364.996389][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 365.046503][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2832'. [ 365.271917][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'. [ 365.290289][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 365.348064][T15880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2840'. [ 365.799590][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 365.812253][T15908] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2848'. [ 366.073951][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 366.172656][T15930] pim6reg1: entered promiscuous mode [ 366.178018][T15930] pim6reg1: entered allmulticast mode [ 366.346455][T15942] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20001 [ 366.360592][T15941] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 367.175803][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.186799][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.208192][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.240018][ T5879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.247958][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.295170][T15973] tipc: New replicast peer: 255.255.255.255 [ 367.305079][T15973] tipc: Enabled bearer , priority 10 [ 367.747527][T16001] nbd: must specify at least one socket [ 367.771808][T16004] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2877'. [ 367.781576][T16005] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2877'. [ 367.841045][T15970] lo speed is unknown, defaulting to 1000 [ 368.240034][T16025] bridge_slave_1: left allmulticast mode [ 368.246009][T16025] bridge_slave_1: left promiscuous mode [ 368.285627][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.294440][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'. [ 368.332877][T16025] bridge_slave_0: left allmulticast mode [ 368.364406][T16025] bridge_slave_0: left promiscuous mode [ 368.382073][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.541606][T16037] netlink: 'syz.3.2884': attribute type 5 has an invalid length. [ 369.320938][ T5879] Bluetooth: hci5: command tx timeout [ 369.648176][T15970] chnl_net:caif_netlink_parms(): no params data found [ 369.921556][T16105] netlink: 'syz.2.2902': attribute type 12 has an invalid length. [ 369.933632][T15970] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.941977][T15970] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.956090][T15970] bridge_slave_0: entered allmulticast mode [ 369.972600][T15970] bridge_slave_0: entered promiscuous mode [ 369.991621][T15970] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.004018][T15970] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.017228][T15970] bridge_slave_1: entered allmulticast mode [ 370.043279][T15970] bridge_slave_1: entered promiscuous mode [ 370.057308][T16114] __nla_validate_parse: 7 callbacks suppressed [ 370.057330][T16114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2904'. [ 370.165819][T15970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.184554][T16120] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2908'. [ 370.210407][T16124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2908'. [ 370.222285][T15970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.331581][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2910'. [ 370.397096][T15970] team0: Port device team_slave_0 added [ 370.421789][T15970] team0: Port device team_slave_1 added [ 370.548585][T16138] netlink: 'syz.2.2912': attribute type 1 has an invalid length. [ 370.563831][T15970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.575330][T16138] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2912'. [ 370.588637][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.638480][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2912'. [ 370.648908][T15970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.662494][T15970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.688928][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.721529][T15970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.776586][T16147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2916'. [ 370.786486][T16148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2916'. [ 370.908234][T15970] hsr_slave_0: entered promiscuous mode [ 370.928419][T15970] hsr_slave_1: entered promiscuous mode [ 370.941529][T16150] tipc: Enabled bearer , priority 0 [ 370.978827][T16158] syzkaller0: entered promiscuous mode [ 371.004192][T16158] syzkaller0: entered allmulticast mode [ 371.088670][T16150] tipc: Resetting bearer [ 371.201091][T16170] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.2923'. [ 371.386921][T16149] tipc: Resetting bearer [ 371.407615][ T5879] Bluetooth: hci5: command tx timeout [ 371.415265][T16149] tipc: Disabling bearer [ 371.542449][T15970] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.651509][T15970] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.738563][T16191] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 371.757955][T15970] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.781583][T16192] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 371.788766][T16192] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 371.828483][T16192] tipc: Resetting bearer [ 371.839016][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 371.861974][T15970] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.907406][T16192] tipc: Enabling of bearer rejected, already enabled [ 371.950334][T16192] veth0: entered promiscuous mode [ 372.003901][T16192] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 372.099015][T16189] veth0: left promiscuous mode [ 372.699012][T16245] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 372.838909][T15970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.859245][T16245] sctp: [Deprecated]: syz.0.2941 (pid 16245) Use of int in max_burst socket option deprecated. [ 372.859245][T16245] Use struct sctp_assoc_value instead [ 372.907797][T15970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.953757][T15970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 372.968091][T16214] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.986870][T15970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 372.998874][T16214] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 373.064089][T16214] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.089432][T16214] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 373.133898][T16214] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 373.155538][T16214] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 373.193025][T16214] tipc: Resetting bearer [ 373.350477][T16214] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 373.363365][T16214] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 373.479293][T15970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.508245][T15970] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.546551][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.553766][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.624648][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.631867][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.036336][T16325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.417633][T15970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.115596][T16382] vlan0: left allmulticast mode [ 375.123404][T16381] __nla_validate_parse: 26 callbacks suppressed [ 375.123440][T16381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2967'. [ 375.150845][T16382] bridge0: left allmulticast mode [ 375.155932][T16382] vlan0: left promiscuous mode [ 375.179637][T16382] bridge0: left promiscuous mode [ 375.190441][T16382] bridge4: port 1(vlan0) entered disabled state [ 375.223409][T16382] bond5: (slave gretap2): Releasing active interface [ 375.295191][T16385] netlink: 'syz.0.2969': attribute type 3 has an invalid length. [ 375.521222][T16402] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2973'. [ 375.551782][T16404] syz_tun: entered allmulticast mode [ 375.632573][T16402] batadv0: entered promiscuous mode [ 375.639264][T16402] batadv0: left promiscuous mode [ 375.747855][T16404] syz_tun: left allmulticast mode [ 375.777536][T15970] veth0_vlan: entered promiscuous mode [ 375.793545][T16421] netlink: 'syz.1.2975': attribute type 17 has an invalid length. [ 375.801846][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2975'. [ 375.812338][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2975'. [ 375.834055][T15970] veth1_vlan: entered promiscuous mode [ 375.988090][T16426] tap0: tun_chr_ioctl cmd 1074025677 [ 376.007066][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 376.019110][T16426] tap0: linktype set to 65534 [ 376.027116][T15970] veth0_macvtap: entered promiscuous mode [ 376.111983][T15970] veth1_macvtap: entered promiscuous mode [ 376.133723][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'. [ 376.174885][T16435] netlink: 'syz.1.2980': attribute type 10 has an invalid length. [ 376.209642][T15970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.222230][T15970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.257593][ T3498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.319546][ T3498] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.328331][ T3498] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.331676][T16445] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 376.361937][T16445] netlink: 'syz.0.2983': attribute type 2 has an invalid length. [ 376.383168][ T3498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.395771][T16445] netlink: 'syz.0.2983': attribute type 1 has an invalid length. [ 376.412101][T16445] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.2983'. [ 376.446583][T16452] 8021q: VLANs not supported on ip6tnl0 [ 376.709446][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.733928][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.823246][T16475] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2987'. [ 376.901107][T16459] openvswitch: netlink: Key type 16144 is out of range max 32 [ 377.023311][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.043358][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.122946][T16478] tipc: Enabled bearer , priority 0 [ 377.224259][T16491] sctp: [Deprecated]: syz.1.2991 (pid 16491) Use of int in max_burst socket option. [ 377.224259][T16491] Use struct sctp_assoc_value instead [ 377.251689][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 377.299763][T16492] sctp: [Deprecated]: syz.1.2991 (pid 16492) Use of int in max_burst socket option. [ 377.299763][T16492] Use struct sctp_assoc_value instead [ 377.405430][T16471] tipc: Disabling bearer [ 377.565234][T16508] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 377.659995][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2996'. [ 377.722125][T16511] netlink: 'syz.3.2997': attribute type 83 has an invalid length. [ 377.938420][T16515] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 378.118861][T16523] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 378.249917][T16527] tipc: Started in network mode [ 378.254856][T16527] tipc: Node identity 1a70a0c3a347, cluster identity 4711 [ 378.279912][T16527] tipc: Enabled bearer , priority 0 [ 378.335563][T16527] syzkaller0: entered promiscuous mode [ 378.378644][T16527] syzkaller0: entered allmulticast mode [ 378.460790][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.471052][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.479611][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.491970][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.503443][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.578945][T16527] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 378.745231][T16527] tipc: Resetting bearer [ 378.816152][T16554] team1: entered promiscuous mode [ 378.819941][ T6992] IPVS: starting estimator thread 0... [ 378.837615][T16554] team1: entered allmulticast mode [ 378.862946][T16524] tipc: Resetting bearer [ 378.913021][T16524] tipc: Disabling bearer [ 378.923284][T16561] IPVS: using max 25 ests per chain, 60000 per kthread [ 378.941109][T16568] netlink: 'syz.3.3011': attribute type 9 has an invalid length. [ 378.974736][T16565] IPv6: sit2: Disabled Multicast RS [ 378.981396][T16565] sit2: entered allmulticast mode [ 379.952708][T16540] lo speed is unknown, defaulting to 1000 [ 380.535975][T16650] __nla_validate_parse: 6 callbacks suppressed [ 380.535995][T16650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3028'. [ 380.603011][ T5879] Bluetooth: hci0: command tx timeout [ 381.357682][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 381.535219][T16676] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.543057][T16676] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.812617][T16676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.853254][T16676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.119503][ T3498] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.141576][ T3498] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.172020][ T3498] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.252101][ T3498] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.347477][T16727] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 382.380899][T16721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3045'. [ 382.453329][T16721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3045'. [ 382.679614][ T5879] Bluetooth: hci0: command tx timeout [ 382.944475][T16540] chnl_net:caif_netlink_parms(): no params data found [ 383.367799][T16540] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.384651][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.396339][T16540] bridge_slave_0: entered allmulticast mode [ 383.429241][T16540] bridge_slave_0: entered promiscuous mode [ 383.441343][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.448740][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.456842][T16540] bridge_slave_1: entered allmulticast mode [ 383.466196][T16540] bridge_slave_1: entered promiscuous mode [ 383.707786][T16540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.752298][T16540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.792959][T16806] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3058'. [ 383.969208][T16540] team0: Port device team_slave_0 added [ 384.003611][T16540] team0: Port device team_slave_1 added [ 384.037882][T16813] netlink: 'syz.1.3060': attribute type 11 has an invalid length. [ 384.248055][T16540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.266480][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.297815][T16826] netlink: 'syz.1.3063': attribute type 1 has an invalid length. [ 384.315220][T16540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.316596][T16826] netlink: 'syz.1.3063': attribute type 2 has an invalid length. [ 384.342086][T16540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.374965][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.376268][T16826] netlink: 'syz.1.3063': attribute type 1 has an invalid length. [ 384.401863][T16540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.460146][T16826] netlink: 'syz.1.3063': attribute type 2 has an invalid length. [ 384.468796][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3057'. [ 384.490061][T16826] netlink: 'syz.1.3063': attribute type 2 has an invalid length. [ 384.628546][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 384.642208][T16540] hsr_slave_0: entered promiscuous mode [ 384.664473][T16540] hsr_slave_1: entered promiscuous mode [ 384.685918][T16540] debugfs: 'hsr0' already exists in 'hsr' [ 384.704608][T16540] Cannot create hsr debugfs directory [ 384.760246][ T5879] Bluetooth: hci0: command tx timeout [ 384.766794][T16842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.976176][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3066'. [ 385.155373][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'. [ 385.235696][T16864] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 385.346780][T16864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3070'. [ 385.573241][T16880] tipc: Enabled bearer , priority 0 [ 385.585348][T16878] syzkaller0: entered promiscuous mode [ 385.594433][T16878] syzkaller0: entered allmulticast mode [ 385.624227][T16886] __nla_validate_parse: 2 callbacks suppressed [ 385.624245][T16886] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3076'. [ 385.668605][T16878] tipc: Resetting bearer [ 385.784911][T16877] tipc: Resetting bearer [ 385.819068][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3077'. [ 385.862419][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3078'. [ 385.872524][T16877] tipc: Disabling bearer [ 386.319489][T16916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3084'. [ 386.331925][T16540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.364040][T16540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.403479][T16540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.458677][T16540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.839884][ T5879] Bluetooth: hci0: command tx timeout [ 386.866686][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.894899][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.915856][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.923099][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.933934][T16951] openvswitch: netlink: Actions may not be safe on all matching packets [ 387.001690][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.008924][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.091690][T16956] netlink: 'syz.1.3092': attribute type 1 has an invalid length. [ 387.113369][T16956] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3092'. [ 387.387035][T16968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3095'. [ 387.668513][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 387.697655][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3100'. [ 387.941840][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.108484][T16540] veth0_vlan: entered promiscuous mode [ 388.193844][T16540] veth1_vlan: entered promiscuous mode [ 388.355022][T16540] veth0_macvtap: entered promiscuous mode [ 388.393856][T17021] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 388.405501][T16540] veth1_macvtap: entered promiscuous mode [ 388.484007][T17030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.486662][T17021] 8021q: adding VLAN 0 to HW filter on device bond12 [ 388.526007][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.583554][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.635145][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.664171][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.687416][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.747758][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.915209][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.949288][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.039967][T17044] netlink: 'syz.3.3115': attribute type 13 has an invalid length. [ 389.065007][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.074741][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 389.097734][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.134156][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.142935][T17044] netlink: 'syz.3.3115': attribute type 13 has an invalid length. [ 389.142960][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'. [ 389.204063][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.226258][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.293918][ T1149] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.467393][ T1149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.504403][ T1149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.561841][T17067] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 389.591437][ T1149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.646467][ T1149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.773947][T17076] Unsupported ieee802154 address type: 0 [ 390.008524][T17083] netlink: 'syz.4.3124': attribute type 4 has an invalid length. [ 390.056024][T17074] lo speed is unknown, defaulting to 1000 [ 390.245842][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 390.267131][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 390.280955][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 390.295668][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 390.305088][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.535435][T17093] netlink: 'syz.3.3129': attribute type 21 has an invalid length. [ 390.551725][T17083] can: request_module (can-proto-4) failed. [ 390.629312][T17095] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 390.800529][T17101] __nla_validate_parse: 2 callbacks suppressed [ 390.800550][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3132'. [ 390.863730][T17104] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3131'. [ 391.016702][T17116] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3135'. [ 391.223738][T17087] lo speed is unknown, defaulting to 1000 [ 391.413451][T17132] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3140'. [ 391.645490][T17141] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3143'. [ 391.829710][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 392.058405][T17162] netlink: 'syz.0.3150': attribute type 8 has an invalid length. [ 392.166241][T17166] bond0: (slave rose0): Enslaving as an active interface with an up link [ 392.240597][T17172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3153'. [ 392.263972][T17176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3154'. [ 392.274053][T17173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3153'. [ 392.360902][ T51] Bluetooth: hci4: command tx timeout [ 392.385542][T17175] sctp: [Deprecated]: syz.0.3154 (pid 17175) Use of int in max_burst socket option. [ 392.385542][T17175] Use struct sctp_assoc_value instead [ 392.552998][T17190] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 392.578633][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3157'. [ 392.763593][T17188] bond1 (unregistering): Released all slaves [ 393.040914][T17197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.652643][T17087] chnl_net:caif_netlink_parms(): no params data found [ 393.673980][T17239] Bluetooth: MGMT ver 1.23 [ 393.836863][T17087] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.845677][T17087] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.853641][T17087] bridge_slave_0: entered allmulticast mode [ 393.861695][T17087] bridge_slave_0: entered promiscuous mode [ 393.870213][T17087] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.877491][T17087] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.885516][T17087] bridge_slave_1: entered allmulticast mode [ 393.893215][T17087] bridge_slave_1: entered promiscuous mode [ 393.932671][T17087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.945224][T17087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.003592][T17087] team0: Port device team_slave_0 added [ 394.013540][T17087] team0: Port device team_slave_1 added [ 394.074102][T17087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.089771][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.119304][T17087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.134204][T17087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.141580][T17087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.170351][T17087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.245793][T17087] hsr_slave_0: entered promiscuous mode [ 394.255914][T17087] hsr_slave_1: entered promiscuous mode [ 394.266118][T17087] debugfs: 'hsr0' already exists in 'hsr' [ 394.272066][T17087] Cannot create hsr debugfs directory [ 394.439868][ T51] Bluetooth: hci4: command tx timeout [ 394.467243][T17087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 394.545186][T17087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 394.625887][T17087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 394.715830][T17087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 394.856732][T17087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.868292][T17087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 394.881132][T17087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 394.892434][T17087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.982059][T17087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.008220][T17087] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.023591][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.030774][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.047518][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.054726][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.273760][T17087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.324394][T17087] veth0_vlan: entered promiscuous mode [ 395.335999][T17087] veth1_vlan: entered promiscuous mode [ 395.374400][T17087] veth0_macvtap: entered promiscuous mode [ 395.384385][T17087] veth1_macvtap: entered promiscuous mode [ 395.406328][T17087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.421622][T17087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.442448][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.453712][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.467553][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.476790][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.545422][ T5986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.556787][ T5986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.587408][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.596834][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.522935][ T51] Bluetooth: hci4: command tx timeout [ 398.600376][ T5879] Bluetooth: hci4: command tx timeout [ 405.339012][T17262] syzkaller1: entered promiscuous mode [ 405.344786][T17262] syzkaller1: entered allmulticast mode [ 406.168055][T17297] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 406.286165][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.299508][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.308772][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.346383][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.356724][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.699270][T17319] vlan3: entered promiscuous mode [ 406.709819][T17319] bridge0: entered promiscuous mode [ 406.728107][T17324] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 406.784495][T17329] netlink: 'syz.0.3193': attribute type 15 has an invalid length. [ 406.864560][T17326] vlan3: entered promiscuous mode [ 406.941174][T17330] tipc: Enabling of bearer rejected, failed to enable media [ 407.026242][T17338] __nla_validate_parse: 7 callbacks suppressed [ 407.026262][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3195'. [ 407.075789][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3194'. [ 407.175263][T17345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.282680][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 407.873093][ T5879] block nbd0: Receive control failed (result -32) [ 407.930216][T17301] lo speed is unknown, defaulting to 1000 [ 408.440525][ T5879] Bluetooth: hci1: command tx timeout [ 408.539048][T17377] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3206'. [ 408.913394][T17391] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3210'. [ 409.738795][ T1149] dvmrp1 (unregistering): left allmulticast mode [ 410.232925][ T1149] bond0 (unregistering): Released all slaves [ 410.333888][ T1149] bond1 (unregistering): Released all slaves [ 410.431514][ T1149] bond2 (unregistering): Released all slaves [ 410.533774][ T5879] Bluetooth: hci1: command tx timeout [ 410.542316][ T1149] bond3 (unregistering): Released all slaves [ 410.645780][ T1149] bond4 (unregistering): Released all slaves [ 410.663757][ T1149] bond5 (unregistering): Released all slaves [ 410.765989][ T1149] bond6 (unregistering): Released all slaves [ 410.784294][ T1149] bond7 (unregistering): Released all slaves [ 411.612620][ T1149] tipc: Disabling bearer [ 411.639023][ T1149] tipc: Left network mode [ 411.835103][T17440] Unsupported ieee802154 address type: 0 [ 411.881519][T17406] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 411.893708][T17440] netlink: 'syz.4.3223': attribute type 9 has an invalid length. [ 412.014451][T17301] chnl_net:caif_netlink_parms(): no params data found [ 412.072588][T17451] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3226'. [ 412.288932][T17459] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3228'. [ 412.599561][ T5879] Bluetooth: hci1: command tx timeout [ 412.773879][T17301] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.820029][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.827373][T17301] bridge_slave_0: entered allmulticast mode [ 412.870187][T17301] bridge_slave_0: entered promiscuous mode [ 412.914440][T17301] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.925134][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.940496][T17301] bridge_slave_1: entered allmulticast mode [ 412.995772][T17301] bridge_slave_1: entered promiscuous mode [ 413.028072][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3233'. [ 413.095896][T17475] batadv_slave_1: entered promiscuous mode [ 413.346807][T17471] batadv_slave_1: left promiscuous mode [ 413.425661][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.453133][T17491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3235'. [ 413.554257][ T1149] pimreg (unregistering): left allmulticast mode [ 414.258118][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.408341][T17301] team0: Port device team_slave_0 added [ 414.441780][T17301] team0: Port device team_slave_1 added [ 414.561718][T17505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3241'. [ 414.674000][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.685139][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.699640][ T5879] Bluetooth: hci1: command tx timeout [ 414.740396][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.756454][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3242'. [ 414.814781][T17512] sctp: [Deprecated]: syz.4.3244 (pid 17512) Use of int in max_burst socket option deprecated. [ 414.814781][T17512] Use struct sctp_assoc_value instead [ 414.831633][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.838727][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.899538][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.923351][T17518] syzkaller0: entered promiscuous mode [ 414.928875][T17518] syzkaller0: entered allmulticast mode [ 414.973093][T17498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3238'. [ 415.143754][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 415.203391][T17301] hsr_slave_0: entered promiscuous mode [ 415.226246][T17301] hsr_slave_1: entered promiscuous mode [ 415.242439][T17301] debugfs: 'hsr0' already exists in 'hsr' [ 415.253049][T17301] Cannot create hsr debugfs directory [ 415.267896][ T1149] IPVS: stop unused estimator thread 0... [ 415.313827][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 415.331359][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 415.423674][T17534] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 415.785525][T17553] netlink: 'syz.3.3257': attribute type 1 has an invalid length. [ 415.847145][T17558] pimreg: entered allmulticast mode [ 415.983431][T17553] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 416.043712][T17555] veth9: entered promiscuous mode [ 416.385920][T17585] netlink: 'syz.4.3268': attribute type 11 has an invalid length. [ 416.418236][T17587] 8021q: VLANs not supported on gre0 [ 416.560944][T17301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.733824][T17301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.769285][T17301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.807813][T17301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.176753][T17632] __nla_validate_parse: 5 callbacks suppressed [ 417.176774][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3281'. [ 417.194772][T17301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.214106][T17630] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3279'. [ 417.295085][T17301] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.327516][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.334736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.363380][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.370602][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.422637][T17636] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3282'. [ 417.491688][T17645] team_slave_0: mtu greater than device maximum [ 417.573783][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 418.052000][T17674] tipc: Enabled bearer , priority 0 [ 418.066772][T17674] syzkaller0: entered promiscuous mode [ 418.086716][T17674] syzkaller0: entered allmulticast mode [ 418.235044][T17674] tipc: Resetting bearer [ 418.254516][T17679] bond0: entered allmulticast mode [ 418.267019][T17679] bond_slave_0: entered allmulticast mode [ 418.289502][T17679] bond_slave_1: entered allmulticast mode [ 418.303945][T17664] tipc: Resetting bearer [ 418.325141][T17664] tipc: Disabling bearer [ 418.343914][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'. [ 418.351365][T17679] tipc: Started in network mode [ 418.359050][T17679] tipc: Node identity b2c29cfb5c09, cluster identity 4711 [ 418.376129][T17679] tipc: Enabled bearer , priority 0 [ 418.478124][T17681] syzkaller0: entered promiscuous mode [ 418.485703][T17681] syzkaller0: entered allmulticast mode [ 418.494181][T17681] tipc: Resetting bearer [ 418.514811][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3297'. [ 418.518045][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.718407][ T1149] tipc: Resetting bearer [ 418.743527][T17678] tipc: Resetting bearer [ 419.462933][ T7007] tipc: Node number set to 4006321403 [ 419.470156][T17692] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 420.380454][T17678] tipc: Disabling bearer [ 420.566616][T17301] veth0_vlan: entered promiscuous mode [ 420.621916][T17301] veth1_vlan: entered promiscuous mode [ 420.646826][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 420.723159][T17301] veth0_macvtap: entered promiscuous mode [ 420.762616][T17301] veth1_macvtap: entered promiscuous mode [ 420.905613][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.933549][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.001340][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.029021][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.059755][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.074035][T17729] netlink: zone id is out of range [ 421.086523][T17729] netlink: zone id is out of range [ 421.098694][T17729] netlink: zone id is out of range [ 421.106923][T17729] netlink: zone id is out of range [ 421.119720][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.137345][T17729] netlink: zone id is out of range [ 421.148754][T17733] netlink: 'syz.3.3309': attribute type 39 has an invalid length. [ 421.194826][T17729] netlink: zone id is out of range [ 421.215497][T17729] netlink: zone id is out of range [ 421.250366][T17729] netlink: zone id is out of range [ 421.266563][T17729] netlink: zone id is out of range [ 421.352355][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.377410][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.442580][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.462378][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.538088][T17743] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.568490][T17743] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.588948][T17743] gretap1: entered promiscuous mode [ 421.596811][T17743] gretap1: entered allmulticast mode [ 422.109844][T17767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3321'. [ 422.123724][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3321'. [ 422.450985][T17774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3323'. [ 422.715233][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.731866][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.745471][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.755647][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.773730][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.161945][ T1149] tipc: Subscription rejected, illegal request [ 423.464472][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 423.598724][T17785] lo speed is unknown, defaulting to 1000 [ 424.618477][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 424.698922][T17842] netlink: 'syz.0.3340': attribute type 1 has an invalid length. [ 424.752774][T17842] netlink: 'syz.0.3340': attribute type 2 has an invalid length. [ 424.851215][ T51] Bluetooth: hci2: command tx timeout [ 425.152554][T17852] net_ratelimit: 61 callbacks suppressed [ 425.152575][T17852] netlink: set zone limit has 8 unknown bytes [ 425.260694][T17854] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 425.291687][T17852] netlink: 'syz.2.3343': attribute type 58 has an invalid length. [ 425.299769][T17852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3343'. [ 425.428415][T17785] chnl_net:caif_netlink_parms(): no params data found [ 426.368053][T17882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.421774][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.440573][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.448050][T17785] bridge_slave_0: entered allmulticast mode [ 426.466091][T17785] bridge_slave_0: entered promiscuous mode [ 426.540726][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.548011][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.588565][T17785] bridge_slave_1: entered allmulticast mode [ 426.618832][T17785] bridge_slave_1: entered promiscuous mode [ 426.813389][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.831450][T17896] openvswitch: netlink: IPv4 tun info is not correct [ 426.846713][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.869185][T17896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3354'. [ 426.954301][ T51] Bluetooth: hci2: command tx timeout [ 427.023741][T17785] team0: Port device team_slave_0 added [ 427.033029][T17785] team0: Port device team_slave_1 added [ 427.111956][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3355'. [ 427.179043][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.195324][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.223680][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.244082][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3355'. [ 427.284904][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.318173][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.348598][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.427256][T17901] batman_adv: batadv0: Adding interface: macsec2 [ 427.438024][T17901] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.472307][T17901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.487817][T17901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.499065][T17901] batman_adv: batadv0: Interface activated: macsec2 [ 427.558949][T17785] hsr_slave_0: entered promiscuous mode [ 427.571813][T17785] hsr_slave_1: entered promiscuous mode [ 427.578541][T17785] debugfs: 'hsr0' already exists in 'hsr' [ 427.593869][T17785] Cannot create hsr debugfs directory [ 427.688479][T17904] netlink: 'syz.4.3357': attribute type 8 has an invalid length. [ 427.716306][T17904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3357'. [ 427.793145][T17904] veth0: entered promiscuous mode [ 427.820627][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3357'. [ 427.858595][T17904] veth0 (unregistering): left promiscuous mode [ 428.128287][T17785] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.241358][ T6989] IPVS: starting estimator thread 0... [ 428.264486][T17785] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.361097][T17921] IPVS: using max 24 ests per chain, 57600 per kthread [ 428.427446][T17785] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.569119][T17935] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3364'. [ 428.609091][T17785] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.665752][T17784] Set syz1 is full, maxelem 65536 reached [ 428.993449][T17785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.000471][ T51] Bluetooth: hci2: command tx timeout [ 429.040156][T17785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.066421][T17785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.086050][T17785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.324987][ T1149] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 429.356844][T17978] geneve2: entered promiscuous mode [ 429.369870][T17978] geneve2: entered allmulticast mode [ 429.373093][T17976] tipc: Failed to remove unknown binding: 66,1,1/0:633021049/633021051 [ 429.384796][T17976] tipc: Failed to remove unknown binding: 66,1,1/0:633021049/633021051 [ 429.395545][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 429.424510][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 429.508088][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3378'. [ 429.518137][T17967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.546378][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 429.594298][T17994] bond1 (unregistering): Released all slaves [ 429.641188][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.677276][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.699678][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.706904][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.738699][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.745956][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.748966][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3378'. [ 430.036581][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.116404][T17785] veth0_vlan: entered promiscuous mode [ 430.129237][T17785] veth1_vlan: entered promiscuous mode [ 430.210617][T17785] veth0_macvtap: entered promiscuous mode [ 430.237568][T17785] veth1_macvtap: entered promiscuous mode [ 430.304321][T17785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.327956][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.347390][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.367608][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.394811][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.450331][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.590831][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.619974][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.657730][T18018] netlink: 'syz.0.3386': attribute type 83 has an invalid length. [ 430.682654][T18018] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3386'. [ 430.692000][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.701012][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.919200][T18030] netlink: 'syz.2.3389': attribute type 1 has an invalid length. [ 430.940466][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 430.959157][T18030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3389'. [ 431.080321][ T51] Bluetooth: hci2: command tx timeout [ 431.090705][T17967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.135353][T17967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 431.416281][T17967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.435003][T17967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 431.462679][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 431.498789][T18042] netlink: 'syz.4.3390': attribute type 4 has an invalid length. [ 431.547955][T18044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3393'. [ 431.633618][T17967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.659436][T17967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 431.700881][T18053] netlink: 'syz.4.3395': attribute type 1 has an invalid length. [ 432.010429][ T1149] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 432.018749][ T1149] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 432.060922][ T1149] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 432.069241][ T1149] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 432.139572][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 432.179206][ T37] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 432.237159][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 432.276273][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 432.477362][T18081] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 432.758243][T18085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.805314][T18096] netlink: 'syz.2.3407': attribute type 1 has an invalid length. [ 432.876773][T18096] bond1: entered promiscuous mode [ 432.884057][T18096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.244906][T18085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.302458][T18103] __nla_validate_parse: 2 callbacks suppressed [ 433.302484][T18103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3408'. [ 433.331446][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 433.368352][T18085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.434230][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3414'. [ 433.503320][T18085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.527797][T18136] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3416'. [ 433.542469][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 433.551708][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 433.666641][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3416'. [ 433.700057][T18139] netlink: 'syz.2.3417': attribute type 2 has an invalid length. [ 433.711173][T18139] netlink: 'syz.2.3417': attribute type 2 has an invalid length. [ 433.825981][T18141] openvswitch: netlink: IP tunnel TTL not specified. [ 433.910637][ T2987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.934670][ T2987] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.006751][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.081472][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.154460][T18156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3423'. [ 434.326082][T18162] openvswitch: netlink: Missing key (keys=40, expected=80) [ 434.499195][T18175] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 434.513855][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3429'. [ 434.529608][T18175] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3431'. [ 435.053957][T18215] vlan2: entered allmulticast mode [ 435.065414][T18215] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 435.140882][T18221] netlink: 'syz.0.3443': attribute type 12 has an invalid length. [ 435.575767][T18241] tipc: Started in network mode [ 435.580835][T18241] tipc: Node identity e2168c832749, cluster identity 4711 [ 435.588315][T18241] tipc: Enabled bearer , priority 0 [ 435.621439][T18244] syzkaller0: entered promiscuous mode [ 435.627057][T18244] syzkaller0: entered allmulticast mode [ 435.635507][T18243] C: renamed from team_slave_0 (while UP) [ 435.645482][T18243] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 435.653790][T18243] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 435.704635][T18246] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 435.735887][T18246] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 435.766300][ T6989] IPVS: starting estimator thread 0... [ 435.834875][T18244] tipc: Resetting bearer [ 435.865616][T18251] IPVS: using max 30 ests per chain, 72000 per kthread [ 435.891359][T18244] tipc: Disabling bearer [ 436.523238][T18282] netlink: 'syz.1.3465': attribute type 29 has an invalid length. [ 436.562294][T18282] bridge0: entered promiscuous mode [ 436.919739][ T51] Bluetooth: hci2: command tx timeout [ 436.965044][T18299] team0: Device gtp0 is of different type [ 437.218728][T18321] netlink: 'syz.1.3479': attribute type 2 has an invalid length. [ 437.270492][T18325] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 437.402421][T18325] bond2: (slave gretap1): making interface the new active one [ 437.411220][T18333] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 437.420554][T18325] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 437.749881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea34400: rx timeout, send abort [ 438.250950][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea34000: rx timeout, send abort [ 438.259819][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea34400: abort rx timeout. Force session deactivation [ 438.389734][T18394] __nla_validate_parse: 20 callbacks suppressed [ 438.389755][T18394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3494'. [ 438.437885][T18380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.523824][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3497'. [ 438.576751][T18386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.759267][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ea34000: abort rx timeout. Force session deactivation [ 438.773967][T18409] FAULT_INJECTION: forcing a failure. [ 438.773967][T18409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.797907][T18409] CPU: 1 UID: 0 PID: 18409 Comm: syz.1.3502 Not tainted syzkaller #0 PREEMPT(full) [ 438.797937][T18409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.797963][T18409] Call Trace: [ 438.797971][T18409] [ 438.797982][T18409] dump_stack_lvl+0x189/0x250 [ 438.798015][T18409] ? __pfx____ratelimit+0x10/0x10 [ 438.798039][T18409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.798065][T18409] ? __pfx__printk+0x10/0x10 [ 438.798095][T18409] ? __might_fault+0xb0/0x130 [ 438.798138][T18409] should_fail_ex+0x414/0x560 [ 438.798177][T18409] _copy_from_iter+0x1de/0x1790 [ 438.798212][T18409] ? rcu_is_watching+0x15/0xb0 [ 438.798236][T18409] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 438.798269][T18409] ? __pfx__copy_from_iter+0x10/0x10 [ 438.798297][T18409] ? __build_skb_around+0x257/0x3e0 [ 438.798326][T18409] ? netlink_sendmsg+0x642/0xb30 [ 438.798354][T18409] ? skb_put+0x11b/0x210 [ 438.798383][T18409] netlink_sendmsg+0x6b2/0xb30 [ 438.798416][T18409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.798443][T18409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 438.798466][T18409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.798490][T18409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.798513][T18409] __sock_sendmsg+0x21c/0x270 [ 438.798549][T18409] ____sys_sendmsg+0x505/0x830 [ 438.798582][T18409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.798618][T18409] ? import_iovec+0x74/0xa0 [ 438.798649][T18409] ___sys_sendmsg+0x21f/0x2a0 [ 438.798678][T18409] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.798744][T18409] ? __fget_files+0x2a/0x420 [ 438.798763][T18409] ? __fget_files+0x3a0/0x420 [ 438.798794][T18409] __x64_sys_sendmsg+0x19b/0x260 [ 438.798825][T18409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.798862][T18409] ? __pfx_ksys_write+0x10/0x10 [ 438.798889][T18409] ? rcu_is_watching+0x15/0xb0 [ 438.798915][T18409] ? do_syscall_64+0xbe/0x3b0 [ 438.798945][T18409] do_syscall_64+0xfa/0x3b0 [ 438.798967][T18409] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.798990][T18409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.799008][T18409] ? clear_bhb_loop+0x60/0xb0 [ 438.799032][T18409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.799051][T18409] RIP: 0033:0x7f406bb8eba9 [ 438.799071][T18409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.799090][T18409] RSP: 002b:00007f406ca8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.799115][T18409] RAX: ffffffffffffffda RBX: 00007f406bdd5fa0 RCX: 00007f406bb8eba9 [ 438.799131][T18409] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 438.799145][T18409] RBP: 00007f406ca8b090 R08: 0000000000000000 R09: 0000000000000000 [ 438.799158][T18409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.799171][T18409] R13: 00007f406bdd6038 R14: 00007f406bdd5fa0 R15: 00007ffcb3cb1e48 [ 438.799207][T18409] [ 439.081067][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030298400: rx timeout, send abort [ 439.171060][T18417] netlink: 'syz.0.3501': attribute type 9 has an invalid length. [ 439.220706][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3500'. [ 439.523284][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076806000: rx timeout, send abort [ 439.573478][T18440] IPv6: sit1: Disabled Multicast RS [ 439.587133][T18440] sit1: entered allmulticast mode [ 439.589772][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030298400: abort rx timeout. Force session deactivation [ 439.628873][T18446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 439.683816][T18447] netlink: 'syz.2.3509': attribute type 2 has an invalid length. [ 440.031576][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076806000: abort rx timeout. Force session deactivation [ 440.215157][T18474] bridge0: port 3(syz_tun) entered blocking state [ 440.223758][T18474] bridge0: port 3(syz_tun) entered disabled state [ 440.230599][T18474] syz_tun: entered allmulticast mode [ 440.238725][T18474] syz_tun: entered promiscuous mode [ 440.246277][T18474] bridge0: port 3(syz_tun) entered blocking state [ 440.253961][T18474] bridge0: port 3(syz_tun) entered forwarding state [ 440.287464][T18475] bond1: entered allmulticast mode [ 440.293546][T18475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.302119][T18475] bridge0: port 4(bond1) entered blocking state [ 440.308654][T18475] bridge0: port 4(bond1) entered disabled state [ 440.319635][T18475] bond1: entered promiscuous mode [ 440.325661][T18475] bridge0: port 4(bond1) entered blocking state [ 440.332450][T18475] bridge0: port 4(bond1) entered forwarding state [ 440.447733][T18481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.490748][T18483] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3520'. [ 440.534211][T18487] tipc: Enabled bearer , priority 0 [ 440.542512][T18487] syzkaller0: entered promiscuous mode [ 440.548106][T18487] syzkaller0: entered allmulticast mode [ 440.560566][T18487] tipc: Resetting bearer [ 440.569896][T18486] tipc: Resetting bearer [ 440.594501][T18486] tipc: Disabling bearer [ 440.629092][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3524'. [ 440.763203][T18494] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 440.899084][T18502] netlink: 'syz.3.3528': attribute type 32 has an invalid length. [ 440.918705][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 440.945227][T18502] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 441.046699][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580c9800: rx timeout, send abort [ 441.125680][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'. [ 441.147735][T18517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'. [ 441.198089][T18517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3531'. [ 441.263807][ T2987] bridge0: port 4(bond1) entered disabled state [ 441.423192][T18526] ip6erspan0: entered promiscuous mode [ 441.446073][T18526] ip6erspan0: entered allmulticast mode [ 441.546841][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030280800: rx timeout, send abort [ 441.555242][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580c9800: abort rx timeout. Force session deactivation [ 441.605508][T18542] FAULT_INJECTION: forcing a failure. [ 441.605508][T18542] name failslab, interval 1, probability 0, space 0, times 0 [ 441.649232][T18542] CPU: 0 UID: 0 PID: 18542 Comm: syz.1.3540 Not tainted syzkaller #0 PREEMPT(full) [ 441.649264][T18542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.649277][T18542] Call Trace: [ 441.649286][T18542] [ 441.649298][T18542] dump_stack_lvl+0x189/0x250 [ 441.649329][T18542] ? __pfx____ratelimit+0x10/0x10 [ 441.649351][T18542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.649378][T18542] ? __pfx__printk+0x10/0x10 [ 441.649412][T18542] ? __pfx___might_resched+0x10/0x10 [ 441.649433][T18542] ? fs_reclaim_acquire+0x7d/0x100 [ 441.649460][T18542] should_fail_ex+0x414/0x560 [ 441.649498][T18542] should_failslab+0xa8/0x100 [ 441.649531][T18542] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 441.649562][T18542] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 441.649594][T18542] ? __alloc_skb+0x112/0x2d0 [ 441.649622][T18542] __alloc_skb+0x112/0x2d0 [ 441.649651][T18542] rtmsg_ifinfo_build_skb+0x84/0x260 [ 441.649695][T18542] rtmsg_ifinfo+0x8c/0x1a0 [ 441.649736][T18542] netif_close_many+0x27f/0x410 [ 441.649757][T18542] ? __pfx___mutex_trylock_common+0x10/0x10 [ 441.649787][T18542] ? __pfx_netif_close_many+0x10/0x10 [ 441.649807][T18542] ? rcu_is_watching+0x15/0xb0 [ 441.649830][T18542] ? trace_contention_end+0x39/0x120 [ 441.649862][T18542] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 441.649896][T18542] ? stack_depot_save_flags+0x40/0x860 [ 441.649944][T18542] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 441.649980][T18542] ? unregister_netdevice_queue+0x1b3/0x380 [ 441.650014][T18542] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 441.650056][T18542] ? __nla_parse+0x40/0x60 [ 441.650083][T18542] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 441.650113][T18542] rtnl_dellink+0x488/0x710 [ 441.650144][T18542] ? __pfx_rtnl_dellink+0x10/0x10 [ 441.650180][T18542] ? kasan_quarantine_put+0xdd/0x220 [ 441.650206][T18542] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.650318][T18542] ? __pfx_rtnl_dellink+0x10/0x10 [ 441.650340][T18542] rtnetlink_rcv_msg+0x7cc/0xb70 [ 441.650369][T18542] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 441.650391][T18542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.650412][T18542] ? ref_tracker_free+0x63a/0x7d0 [ 441.650434][T18542] ? __asan_memcpy+0x40/0x70 [ 441.650458][T18542] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.650493][T18542] netlink_rcv_skb+0x208/0x470 [ 441.650519][T18542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.650544][T18542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.650581][T18542] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.650614][T18542] netlink_unicast+0x82f/0x9e0 [ 441.650660][T18542] ? __pfx_netlink_unicast+0x10/0x10 [ 441.650696][T18542] ? netlink_sendmsg+0x642/0xb30 [ 441.650718][T18542] ? skb_put+0x11b/0x210 [ 441.650747][T18542] netlink_sendmsg+0x805/0xb30 [ 441.650783][T18542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.650812][T18542] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.650836][T18542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.650861][T18542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.650885][T18542] __sock_sendmsg+0x21c/0x270 [ 441.650923][T18542] ____sys_sendmsg+0x505/0x830 [ 441.650957][T18542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.650996][T18542] ? import_iovec+0x74/0xa0 [ 441.651030][T18542] ___sys_sendmsg+0x21f/0x2a0 [ 441.651074][T18542] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.651145][T18542] ? __fget_files+0x2a/0x420 [ 441.651164][T18542] ? __fget_files+0x3a0/0x420 [ 441.651196][T18542] __x64_sys_sendmsg+0x19b/0x260 [ 441.651227][T18542] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.651267][T18542] ? __pfx_ksys_write+0x10/0x10 [ 441.651294][T18542] ? rcu_is_watching+0x15/0xb0 [ 441.651322][T18542] ? do_syscall_64+0xbe/0x3b0 [ 441.651351][T18542] do_syscall_64+0xfa/0x3b0 [ 441.651373][T18542] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.651395][T18542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.651416][T18542] ? clear_bhb_loop+0x60/0xb0 [ 441.651443][T18542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.651464][T18542] RIP: 0033:0x7f406bb8eba9 [ 441.651483][T18542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.651502][T18542] RSP: 002b:00007f406ca8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.651525][T18542] RAX: ffffffffffffffda RBX: 00007f406bdd5fa0 RCX: 00007f406bb8eba9 [ 441.651540][T18542] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 441.651554][T18542] RBP: 00007f406ca8b090 R08: 0000000000000000 R09: 0000000000000000 [ 441.651567][T18542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.651581][T18542] R13: 00007f406bdd6038 R14: 00007f406bdd5fa0 R15: 00007ffcb3cb1e48 [ 441.651616][T18542] [ 442.103440][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d757800: rx timeout, send abort [ 442.111697][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030280800: abort rx timeout. Force session deactivation [ 442.395292][T18559] veth1_to_bond: entered allmulticast mode [ 442.490034][T18559] bond0: (slave bond_slave_1): Releasing backup interface [ 442.547168][T18559] veth1_to_bond (unregistering): left allmulticast mode [ 442.620866][T18569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.326429][T18588] syzkaller1: entered promiscuous mode [ 454.333266][T18588] syzkaller1: entered allmulticast mode [ 454.702335][T18617] __nla_validate_parse: 6 callbacks suppressed [ 454.702355][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 455.165024][T18625] IPVS: Scheduler module ip_vs_sip not found [ 455.319628][T18644] sctp: [Deprecated]: syz.0.3571 (pid 18644) Use of int in maxseg socket option. [ 455.319628][T18644] Use struct sctp_assoc_value instead [ 455.407523][T18642] IPv6: sit1: Disabled Multicast RS [ 455.442047][T18642] sit1: entered allmulticast mode [ 455.503355][T18657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3575'. [ 456.433949][T18672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3577'. [ 456.483541][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 456.513453][T18678] FAULT_INJECTION: forcing a failure. [ 456.513453][T18678] name failslab, interval 1, probability 0, space 0, times 0 [ 456.549883][T18678] CPU: 1 UID: 0 PID: 18678 Comm: syz.3.3580 Not tainted syzkaller #0 PREEMPT(full) [ 456.549916][T18678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.549930][T18678] Call Trace: [ 456.549939][T18678] [ 456.549949][T18678] dump_stack_lvl+0x189/0x250 [ 456.549981][T18678] ? __pfx____ratelimit+0x10/0x10 [ 456.550005][T18678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.550033][T18678] ? __pfx__printk+0x10/0x10 [ 456.550060][T18678] ? netlink_unicast+0x82f/0x9e0 [ 456.550095][T18678] ? ___sys_sendmsg+0x21f/0x2a0 [ 456.550122][T18678] ? do_syscall_64+0xfa/0x3b0 [ 456.550159][T18678] should_fail_ex+0x414/0x560 [ 456.550199][T18678] should_failslab+0xa8/0x100 [ 456.550234][T18678] kmem_cache_alloc_noprof+0x73/0x3c0 [ 456.550263][T18678] ? skb_clone+0x212/0x3a0 [ 456.550297][T18678] skb_clone+0x212/0x3a0 [ 456.550331][T18678] __netlink_deliver_tap+0x404/0x850 [ 456.550370][T18678] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.550396][T18678] netlink_deliver_tap+0x19c/0x1b0 [ 456.550421][T18678] netlink_sendskb+0x68/0x140 [ 456.550459][T18678] netlink_unicast+0x397/0x9e0 [ 456.550491][T18678] ? __asan_memcpy+0x40/0x70 [ 456.550526][T18678] ? __pfx_netlink_unicast+0x10/0x10 [ 456.550579][T18678] netlink_rcv_skb+0x28c/0x470 [ 456.550605][T18678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.550631][T18678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.550668][T18678] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.550701][T18678] netlink_unicast+0x82f/0x9e0 [ 456.550746][T18678] ? __pfx_netlink_unicast+0x10/0x10 [ 456.550783][T18678] ? netlink_sendmsg+0x642/0xb30 [ 456.550804][T18678] ? skb_put+0x11b/0x210 [ 456.550834][T18678] netlink_sendmsg+0x805/0xb30 [ 456.550870][T18678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.550899][T18678] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.550924][T18678] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.550948][T18678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.550974][T18678] __sock_sendmsg+0x21c/0x270 [ 456.551011][T18678] ____sys_sendmsg+0x505/0x830 [ 456.551046][T18678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.551086][T18678] ? import_iovec+0x74/0xa0 [ 456.551120][T18678] ___sys_sendmsg+0x21f/0x2a0 [ 456.551151][T18678] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.551222][T18678] ? __fget_files+0x2a/0x420 [ 456.551240][T18678] ? __fget_files+0x3a0/0x420 [ 456.551272][T18678] __x64_sys_sendmsg+0x19b/0x260 [ 456.551305][T18678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.551345][T18678] ? __pfx_ksys_write+0x10/0x10 [ 456.551371][T18678] ? rcu_is_watching+0x15/0xb0 [ 456.551401][T18678] ? do_syscall_64+0xbe/0x3b0 [ 456.551430][T18678] do_syscall_64+0xfa/0x3b0 [ 456.551453][T18678] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.551475][T18678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.551497][T18678] ? clear_bhb_loop+0x60/0xb0 [ 456.551525][T18678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.551553][T18678] RIP: 0033:0x7f89ad78eba9 [ 456.551573][T18678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.551593][T18678] RSP: 002b:00007f89ae5f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.551617][T18678] RAX: ffffffffffffffda RBX: 00007f89ad9d6090 RCX: 00007f89ad78eba9 [ 456.551634][T18678] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003 [ 456.551649][T18678] RBP: 00007f89ae5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 456.551663][T18678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.551676][T18678] R13: 00007f89ad9d6128 R14: 00007f89ad9d6090 R15: 00007fffb9af82c8 [ 456.551712][T18678] [ 456.927338][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3582'. [ 456.937071][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3582'. [ 457.290641][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3589'. [ 457.300293][T18706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3588'. [ 457.309247][T18703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3587'. [ 457.314252][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3589'. [ 457.344919][T18703] netlink: 'syz.3.3587': attribute type 12 has an invalid length. [ 457.584626][T18723] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.782961][T18737] FAULT_INJECTION: forcing a failure. [ 457.782961][T18737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.868180][T18737] CPU: 1 UID: 0 PID: 18737 Comm: syz.0.3595 Not tainted syzkaller #0 PREEMPT(full) [ 457.868212][T18737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.868226][T18737] Call Trace: [ 457.868235][T18737] [ 457.868244][T18737] dump_stack_lvl+0x189/0x250 [ 457.868276][T18737] ? __pfx____ratelimit+0x10/0x10 [ 457.868300][T18737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.868327][T18737] ? __pfx__printk+0x10/0x10 [ 457.868373][T18737] should_fail_ex+0x414/0x560 [ 457.868420][T18737] _copy_to_user+0x31/0xb0 [ 457.868454][T18737] simple_read_from_buffer+0xe1/0x170 [ 457.868493][T18737] proc_fail_nth_read+0x1b3/0x220 [ 457.868522][T18737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.868552][T18737] ? rw_verify_area+0x2a6/0x4d0 [ 457.868579][T18737] ? __lock_acquire+0xab9/0xd20 [ 457.868611][T18737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.868638][T18737] vfs_read+0x200/0xa30 [ 457.868666][T18737] ? fdget_pos+0x247/0x320 [ 457.868692][T18737] ? __pfx___mutex_lock+0x10/0x10 [ 457.868717][T18737] ? __pfx_vfs_read+0x10/0x10 [ 457.868749][T18737] ? __fget_files+0x2a/0x420 [ 457.868774][T18737] ? __fget_files+0x3a0/0x420 [ 457.868793][T18737] ? __fget_files+0x2a/0x420 [ 457.868824][T18737] ksys_read+0x145/0x250 [ 457.868856][T18737] ? __pfx_ksys_read+0x10/0x10 [ 457.868882][T18737] ? rcu_is_watching+0x15/0xb0 [ 457.868911][T18737] ? do_syscall_64+0xbe/0x3b0 [ 457.868941][T18737] do_syscall_64+0xfa/0x3b0 [ 457.868963][T18737] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.868986][T18737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.869008][T18737] ? clear_bhb_loop+0x60/0xb0 [ 457.869036][T18737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.869058][T18737] RIP: 0033:0x7f6975b8d5bc [ 457.869078][T18737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 457.869097][T18737] RSP: 002b:00007f6973df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.869121][T18737] RAX: ffffffffffffffda RBX: 00007f6975dd6090 RCX: 00007f6975b8d5bc [ 457.869138][T18737] RDX: 000000000000000f RSI: 00007f6973df60a0 RDI: 0000000000000005 [ 457.869152][T18737] RBP: 00007f6973df6090 R08: 0000000000000000 R09: 0000000000000000 [ 457.869167][T18737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.869180][T18737] R13: 00007f6975dd6128 R14: 00007f6975dd6090 R15: 00007ffce5ef3cb8 [ 457.869221][T18737] [ 458.328072][T18757] netlink: 'syz.1.3604': attribute type 2 has an invalid length. [ 458.336642][T18751] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 458.735240][T18777] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 458.887979][T18784] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 458.904578][T18784] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 458.957330][T18781] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.234138][T18787] gretap1: entered promiscuous mode [ 459.263890][T18787] bond2: (slave gretap1): making interface the new active one [ 459.280135][T18787] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 459.301962][T18777] macvlan2: entered promiscuous mode [ 459.307434][T18777] macvlan2: entered allmulticast mode [ 459.315475][T18777] bond2: entered promiscuous mode [ 459.322590][T18777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.362602][T18777] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 459.380086][T18777] bond2: left promiscuous mode [ 459.398736][T18802] netlink: 'syz.1.3616': attribute type 11 has an invalid length. [ 459.517842][T18781] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.621418][T18781] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.701005][T18815] netlink: 'syz.0.3619': attribute type 23 has an invalid length. [ 459.730526][T18781] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.033238][T18815] v: renamed from veth0_macvtap [ 460.074211][T18843] __nla_validate_parse: 12 callbacks suppressed [ 460.074235][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'. [ 460.157280][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.184270][T18846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3626'. [ 460.207318][ T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.251394][T18846] batadv_slave_0: entered promiscuous mode [ 460.295761][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.317468][T18845] batadv_slave_0: left promiscuous mode [ 460.405121][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.486781][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 460.567856][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 460.693639][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3633'. [ 460.751249][T18868] macvtap1: entered promiscuous mode [ 460.762799][T18868] vlan0: entered promiscuous mode [ 460.769204][T18868] macvtap1: entered allmulticast mode [ 460.777094][T18868] vlan0: entered allmulticast mode [ 460.783674][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 460.794589][T18868] veth0_vlan: entered allmulticast mode [ 460.828471][T18874] macvtap2: entered promiscuous mode [ 460.837400][T18874] macvtap2: entered allmulticast mode [ 460.885721][T18871] netlink: 'syz.4.3634': attribute type 5 has an invalid length. [ 460.982703][T18879] tipc: Enabled bearer , priority 0 [ 460.998612][T18880] tipc: Enabling of bearer rejected, already enabled [ 461.024441][T18878] tipc: Disabling bearer [ 461.034039][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 461.118688][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3638'. [ 461.194680][T18888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3639'. [ 461.394883][T18899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.453229][T18906] netlink: 'syz.1.3643': attribute type 33 has an invalid length. [ 461.581598][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'. [ 461.641344][T18917] syzkaller0: entered promiscuous mode [ 461.646880][T18917] syzkaller0: entered allmulticast mode [ 461.994350][ T6992] IPVS: starting estimator thread 0... [ 462.109671][T18938] IPVS: using max 25 ests per chain, 60000 per kthread [ 462.179088][T18947] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 462.415820][T18964] delete_channel: no stack [ 462.750357][T18984] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 462.791737][T18983] netlink: 'syz.3.3667': attribute type 4 has an invalid length. [ 463.137109][T19009] tipc: Enabling of bearer rejected, failed to enable media [ 463.605533][T19034] sit1: entered promiscuous mode [ 463.622272][T19034] sit1: entered allmulticast mode [ 463.875041][T19048] netlink: 'syz.1.3683': attribute type 1 has an invalid length. [ 463.944509][T19016] lo speed is unknown, defaulting to 1000 [ 464.170437][T19061] netlink: 'syz.3.3690': attribute type 5 has an invalid length. [ 465.142299][T19108] netlink: 'syz.1.3702': attribute type 1 has an invalid length. [ 465.186670][T19108] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 465.528722][T19122] __nla_validate_parse: 18 callbacks suppressed [ 465.528744][T19122] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3707'. [ 465.867761][T19100] lo speed is unknown, defaulting to 1000 [ 465.951918][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.967717][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.031018][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.061560][T19126] [ 466.063927][T19126] ====================================================== [ 466.070947][T19126] WARNING: possible circular locking dependency detected [ 466.077973][T19126] syzkaller #0 Not tainted [ 466.082405][T19126] ------------------------------------------------------ [ 466.089418][T19126] syz.0.3709/19126 is trying to acquire lock: [ 466.095484][T19126] ffffffff8e21e7e8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 466.105090][T19126] [ 466.105090][T19126] but task is already holding lock: [ 466.112490][T19126] ffff888024c96c98 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 466.122783][T19126] [ 466.122783][T19126] which lock already depends on the new lock. [ 466.122783][T19126] [ 466.133198][T19126] [ 466.133198][T19126] the existing dependency chain (in reverse order) is: [ 466.142332][T19126] [ 466.142332][T19126] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 466.150953][T19126] lock_acquire+0x120/0x360 [ 466.156007][T19126] blk_alloc_queue+0x538/0x620 [ 466.161317][T19126] __blk_mq_alloc_disk+0x15c/0x340 [ 466.166959][T19126] nbd_dev_add+0x46c/0xae0 [ 466.171900][T19126] nbd_init+0x168/0x1f0 [ 466.176594][T19126] do_one_initcall+0x233/0x820 [ 466.181887][T19126] do_initcall_level+0x104/0x190 [ 466.187354][T19126] do_initcalls+0x59/0xa0 [ 466.192215][T19126] kernel_init_freeable+0x334/0x4b0 [ 466.197962][T19126] kernel_init+0x1d/0x1d0 [ 466.202841][T19126] ret_from_fork+0x436/0x7d0 [ 466.207969][T19126] ret_from_fork_asm+0x1a/0x30 [ 466.213265][T19126] [ 466.213265][T19126] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 466.220837][T19126] lock_acquire+0x120/0x360 [ 466.225882][T19126] fs_reclaim_acquire+0x72/0x100 [ 466.231345][T19126] prepare_alloc_pages+0x153/0x610 [ 466.236989][T19126] __alloc_frozen_pages_noprof+0x123/0x370 [ 466.243317][T19126] __alloc_pages_noprof+0xa/0x30 [ 466.248779][T19126] pcpu_populate_chunk+0x182/0xb30 [ 466.254427][T19126] pcpu_alloc_noprof+0xcbf/0x1720 [ 466.259999][T19126] bpf_map_alloc_percpu+0xbc/0x1b0 [ 466.265642][T19126] prealloc_init+0x225/0x630 [ 466.270760][T19126] htab_map_alloc+0x6ce/0xc70 [ 466.275961][T19126] map_create+0xaa0/0x14d0 [ 466.280917][T19126] __sys_bpf+0x60f/0x870 [ 466.285687][T19126] __x64_sys_bpf+0x7c/0x90 [ 466.290712][T19126] do_syscall_64+0xfa/0x3b0 [ 466.295742][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.302248][T19126] [ 466.302248][T19126] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 466.310011][T19126] validate_chain+0xb9b/0x2140 [ 466.315300][T19126] __lock_acquire+0xab9/0xd20 [ 466.320510][T19126] lock_acquire+0x120/0x360 [ 466.325561][T19126] __mutex_lock+0x187/0x1350 [ 466.330680][T19126] pcpu_alloc_noprof+0x286/0x1720 [ 466.336237][T19126] sbitmap_init_node+0x1e1/0x630 [ 466.341703][T19126] sbitmap_queue_init_node+0x3e/0x4d0 [ 466.347599][T19126] blk_mq_init_tags+0x110/0x280 [ 466.352992][T19126] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 466.358978][T19126] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 466.365317][T19126] nbd_start_device+0x17f/0xb10 [ 466.370690][T19126] nbd_genl_connect+0x135b/0x18f0 [ 466.376247][T19126] genl_family_rcv_msg_doit+0x212/0x300 [ 466.382351][T19126] genl_rcv_msg+0x60e/0x790 [ 466.387416][T19126] netlink_rcv_skb+0x208/0x470 [ 466.392719][T19126] genl_rcv+0x28/0x40 [ 466.397246][T19126] netlink_unicast+0x82f/0x9e0 [ 466.402546][T19126] netlink_sendmsg+0x805/0xb30 [ 466.407861][T19126] __sock_sendmsg+0x21c/0x270 [ 466.413077][T19126] ____sys_sendmsg+0x505/0x830 [ 466.418375][T19126] ___sys_sendmsg+0x21f/0x2a0 [ 466.423586][T19126] __x64_sys_sendmsg+0x19b/0x260 [ 466.429055][T19126] do_syscall_64+0xfa/0x3b0 [ 466.434103][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.440525][T19126] [ 466.440525][T19126] other info that might help us debug this: [ 466.440525][T19126] [ 466.450758][T19126] Chain exists of: [ 466.450758][T19126] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 466.450758][T19126] [ 466.464420][T19126] Possible unsafe locking scenario: [ 466.464420][T19126] [ 466.471876][T19126] CPU0 CPU1 [ 466.477261][T19126] ---- ---- [ 466.482642][T19126] lock(&q->q_usage_counter(io)#51); [ 466.488025][T19126] lock(fs_reclaim); [ 466.494534][T19126] lock(&q->q_usage_counter(io)#51); [ 466.502436][T19126] lock(pcpu_alloc_mutex); [ 466.506951][T19126] [ 466.506951][T19126] *** DEADLOCK *** [ 466.506951][T19126] [ 466.515096][T19126] 6 locks held by syz.0.3709/19126: [ 466.520300][T19126] #0: ffffffff8f59f5b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 466.528595][T19126] #1: ffffffff8f59f3c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 466.537572][T19126] #2: ffff888024d5a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 466.548983][T19126] #3: ffff888024d5a0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 466.559963][T19126] #4: ffff888024c96c98 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 466.570688][T19126] #5: ffff888024c96cd0 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 466.581668][T19126] [ 466.581668][T19126] stack backtrace: [ 466.587557][T19126] CPU: 1 UID: 0 PID: 19126 Comm: syz.0.3709 Not tainted syzkaller #0 PREEMPT(full) [ 466.587579][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.587591][T19126] Call Trace: [ 466.587599][T19126] [ 466.587608][T19126] dump_stack_lvl+0x189/0x250 [ 466.587634][T19126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.587656][T19126] ? __pfx__printk+0x10/0x10 [ 466.587683][T19126] ? print_lock_name+0xde/0x100 [ 466.587709][T19126] print_circular_bug+0x2ee/0x310 [ 466.587731][T19126] check_noncircular+0x134/0x160 [ 466.587755][T19126] validate_chain+0xb9b/0x2140 [ 466.587784][T19126] __lock_acquire+0xab9/0xd20 [ 466.587815][T19126] ? pcpu_alloc_noprof+0x286/0x1720 [ 466.587842][T19126] lock_acquire+0x120/0x360 [ 466.587868][T19126] ? pcpu_alloc_noprof+0x286/0x1720 [ 466.587901][T19126] __mutex_lock+0x187/0x1350 [ 466.587921][T19126] ? pcpu_alloc_noprof+0x286/0x1720 [ 466.587951][T19126] ? kasan_save_track+0x4f/0x80 [ 466.587973][T19126] ? kasan_save_track+0x3e/0x80 [ 466.587995][T19126] ? __kasan_kmalloc+0x93/0xb0 [ 466.588018][T19126] ? blk_mq_init_tags+0x85/0x280 [ 466.588043][T19126] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 466.588061][T19126] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 466.588082][T19126] ? pcpu_alloc_noprof+0x286/0x1720 [ 466.588109][T19126] ? nbd_genl_connect+0x135b/0x18f0 [ 466.588125][T19126] ? genl_family_rcv_msg_doit+0x212/0x300 [ 466.588151][T19126] ? genl_rcv_msg+0x60e/0x790 [ 466.588175][T19126] ? __pfx___mutex_lock+0x10/0x10 [ 466.588195][T19126] ? ____sys_sendmsg+0x505/0x830 [ 466.588218][T19126] ? do_syscall_64+0xfa/0x3b0 [ 466.588238][T19126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.588263][T19126] pcpu_alloc_noprof+0x286/0x1720 [ 466.588296][T19126] sbitmap_init_node+0x1e1/0x630 [ 466.588319][T19126] ? __kasan_kmalloc+0x93/0xb0 [ 466.588345][T19126] sbitmap_queue_init_node+0x3e/0x4d0 [ 466.588368][T19126] blk_mq_init_tags+0x110/0x280 [ 466.588394][T19126] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 466.588417][T19126] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 466.588444][T19126] ? kfree+0x18e/0x440 [ 466.588480][T19126] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 466.588510][T19126] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 466.588539][T19126] ? sysfs_add_file_mode_ns+0x259/0x300 [ 466.588571][T19126] nbd_start_device+0x17f/0xb10 [ 466.588591][T19126] ? device_create_file+0xf4/0x1c0 [ 466.588613][T19126] nbd_genl_connect+0x135b/0x18f0 [ 466.588633][T19126] ? __pfx_nbd_genl_connect+0x10/0x10 [ 466.588656][T19126] ? __nla_parse+0x40/0x60 [ 466.588676][T19126] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 466.588705][T19126] genl_family_rcv_msg_doit+0x212/0x300 [ 466.588733][T19126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.588764][T19126] ? stack_trace_save+0x9c/0xe0 [ 466.588787][T19126] genl_rcv_msg+0x60e/0x790 [ 466.588813][T19126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.588836][T19126] ? __pfx_nbd_genl_connect+0x10/0x10 [ 466.588859][T19126] netlink_rcv_skb+0x208/0x470 [ 466.588876][T19126] ? __lock_acquire+0xab9/0xd20 [ 466.588902][T19126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.588926][T19126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.588951][T19126] ? down_read+0x1ad/0x2e0 [ 466.588972][T19126] genl_rcv+0x28/0x40 [ 466.588994][T19126] netlink_unicast+0x82f/0x9e0 [ 466.589025][T19126] ? __pfx_netlink_unicast+0x10/0x10 [ 466.589053][T19126] ? netlink_sendmsg+0x642/0xb30 [ 466.589070][T19126] ? skb_put+0x11b/0x210 [ 466.589092][T19126] netlink_sendmsg+0x805/0xb30 [ 466.589115][T19126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.589134][T19126] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.589153][T19126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.589172][T19126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.589193][T19126] __sock_sendmsg+0x21c/0x270 [ 466.589222][T19126] ____sys_sendmsg+0x505/0x830 [ 466.589246][T19126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.589272][T19126] ? import_iovec+0x74/0xa0 [ 466.589302][T19126] ___sys_sendmsg+0x21f/0x2a0 [ 466.589326][T19126] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.589363][T19126] ? __fget_files+0x2a/0x420 [ 466.589378][T19126] ? __fget_files+0x3a0/0x420 [ 466.589397][T19126] __x64_sys_sendmsg+0x19b/0x260 [ 466.589420][T19126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.589453][T19126] ? rcu_is_watching+0x15/0xb0 [ 466.589472][T19126] ? do_syscall_64+0xbe/0x3b0 [ 466.589493][T19126] do_syscall_64+0xfa/0x3b0 [ 466.589511][T19126] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.589529][T19126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.589546][T19126] ? clear_bhb_loop+0x60/0xb0 [ 466.589566][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.589583][T19126] RIP: 0033:0x7f6975b8eba9 [ 466.589600][T19126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.589616][T19126] RSP: 002b:00007f6976946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.589635][T19126] RAX: ffffffffffffffda RBX: 00007f6975dd5fa0 RCX: 00007f6975b8eba9 [ 466.589648][T19126] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 466.589661][T19126] RBP: 00007f6975c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 466.589672][T19126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.589683][T19126] R13: 00007f6975dd6038 R14: 00007f6975dd5fa0 R15: 00007ffce5ef3cb8 [ 466.589703][T19126] [ 467.106559][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.248978][ T51] block nbd2: Receive control failed (result -32) [ 467.255920][ T51] block nbd2: Receive control failed (result -32) [ 467.262601][ T51] block nbd2: Receive control failed (result -32) [ 467.269077][ T51] block nbd2: Receive control failed (result -32) [ 467.275598][ T51] block nbd2: Receive control failed (result -32) [ 467.282735][ T5879] block nbd2: Receive control failed (result -32) [ 467.282747][ T5865] block nbd2: Receive control failed (result -32) [ 467.319833][T19126] nbd2: detected capacity change from 0 to 63 [ 467.337075][T19127] block nbd0: NBD_DISCONNECT [ 467.357765][T19127] block nbd0: Send disconnect failed -32 [ 467.372369][T19127] block nbd0: shutting down sockets [ 467.440395][T19141] netlink: 'syz.3.3714': attribute type 11 has an invalid length. [ 467.453520][T19141] netlink: 'syz.3.3714': attribute type 4 has an invalid length. [ 467.465861][T19141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3714'. [ 467.475386][T19145] netlink: 'syz.3.3714': attribute type 12 has an invalid length. [ 467.500148][T19145] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 467.536271][T19138] base_sock_release(ffff88804d404200) sk=ffff888053b65000 [ 467.833065][ T13] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 467.942832][ T13] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 467.968398][ T13] bond10 (unregistering): (slave gretap3): Releasing active interface [ 468.452062][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.461430][ T13] bond_slave_0: left allmulticast mode [ 468.467738][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.477225][ T13] bond_slave_1: left allmulticast mode [ 468.483267][ T13] bond0 (unregistering): Released all slaves [ 468.494589][ T13] bond1 (unregistering): Released all slaves [ 468.589602][ T13] bond2 (unregistering): Released all slaves [ 468.599235][ T13] bond3 (unregistering): Released all slaves [ 468.696235][ T13] bond4 (unregistering): (slave bond5): Releasing backup interface [ 468.704770][ T13] bond4 (unregistering): Released all slaves [ 468.797446][ T13] bond5 (unregistering): Released all slaves [ 468.807287][ T13] bond6 (unregistering): Released all slaves [ 468.817958][ T13] bond7 (unregistering): Released all slaves [ 468.827798][ T13] bond8 (unregistering): Released all slaves [ 468.928720][ T13] bond9 (unregistering): Released all slaves [ 468.939338][ T13] bond10 (unregistering): Released all slaves [ 469.044193][ T13] bond11 (unregistering): Released all slaves [ 469.141714][ T13] bond12 (unregistering): Released all slaves [ 469.199245][ T13] : left promiscuous mode [ 469.243758][ T13] tipc: Disabling bearer [ 469.257223][ T13] tipc: Left network mode [ 469.555321][ T13] hsr_slave_0: left promiscuous mode [ 469.561340][ T13] hsr_slave_1: left promiscuous mode [ 469.618787][ T13] pimreg (unregistering): left allmulticast mode [ 470.026718][ T13] team0 (unregistering): Port device team_slave_1 removed [ 470.063295][ T13] team0 (unregistering): Port device team_slave_0 removed [ 470.071136][ T61] smc: removing ib device !yz! [ 470.370081][ T2987] smc: removing ib device syz0