last executing test programs: 26.484191843s ago: executing program 3 (id=1700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000f5ff00020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e0000000000000000001400000011"], 0x80}}, 0x0) 26.35173685s ago: executing program 3 (id=1703): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9e, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000000"], 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x5}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x74, 0x0, 0x0, 0x40000}]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xf7, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x9e, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000000"], 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x15, 0x0, 0x5, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x5}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x60}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$inet6(0xa, 0x80000, 0x1) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x74, 0x0, 0x0, 0x40000}]}) (async) 25.978204321s ago: executing program 3 (id=1707): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000003ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003a80)={&(0x7f0000000280)={0x3890, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1d78, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x74, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xb4, 0xcc}}, @challenge={0x10, 0x1, 0xaa}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x3, 0x0, {0x1000, 0x80, 0x0, 0x84, 0x0, 0x1, 0x1, 0x2}, 0x8, 0x5}}, @chsw_timing={0x68, 0x4, {0x101, 0x61}}, @perr={0x84, 0x2, {0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3c}, @peer_mgmt={0x75, 0x18, {0x0, 0x1ff, @val=0x1, @val=0x3f, @val="46b8617d7bf5710371f24a5da0b6362b"}}, @ht={0x2d, 0x1a, {0x386, 0x0, 0x7, 0x0, {0x400, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x1000}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x3b, 0xfffe}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1274, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xe8, 0x2, "3923d94a33e6d09067804cd8b3241dcbc14b791269cb059fc08f7b7afca0c7ad9a460d328c308074abb5562f1a63e0127b813194074c0504d081ca03018680092243b8de625071b8af9719b29ce318f41bab73bddd8ee6f5ee516123ecd0cc5eb277c427dfde971ae9c9174366c4e971513bc035b4de1cd6c45e5cd5da168b500e4c9d3c204d61109fbf9fd2d52ca89de99f606b936dfa87401fe965138e6b4a0e6033a2e140f0b182bb888a78431329b978be7a1577d0e4dac0c4c7d7d33d6a9876b23a6fcf8eda48e7decfa906760a6096062034fb813bf48090c52528701913460231"}, @NL80211_FTM_RESP_ATTR_LCI={0xc3, 0x2, "3d328deb32ba1240203a349aa868138b37d2d2b814518044dbb6a185802ebeb9093a8fb3c6182c8a64c1e11db7ded37029bf024aea7b8526da5a9b51a4d6d9f4c0a7db7de6012dbd8e9ba6e9e9c596ebaef0657c9e6a87a0cec501c6e4849ad6d37741da57abf50a27f286bcf994bacce9342e21c85919aca34303afa19f206806d39426d7f0d5f120a260785eb2a681a8c7c62bae44810fa4e749809cfae8dbd140d0e5c8ecfa11428604752cf665e129632c1748f88b7105177619744691"}, @NL80211_FTM_RESP_ATTR_LCI={0x4e, 0x2, "46747252e78f1c5a1e48b368222b9366a2fa1cd942dcd2c89634dc157ccc7774a7561cb5a8d175a2881fdc89bb1f27a6808fa74f679eb0f1f23f6673da22c6dfa645047d7f332a0a4fd6"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6a, 0x3, "1deaf8b90d11bd990799b0800d0e258bed50b5c4b5e241c1df5b3db71394f2fb1c31c8d8378ddf0968028a2cab6d82e9a3f03d81e63093bce3402e21a6226350a92db64d9c961c88ddc7cbb721168272035aac05a9a904904813abe45fb56d718a7cb000f13b"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x68, 0x80, [@chsw_timing={0x68, 0x4, {0x3, 0x800}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xb, 0xab, 0x1}}, @dsss={0x3, 0x1, 0x6c}, @prep={0x83, 0x1f, {{}, 0x2, 0x1, @device_a, 0x10001, @void, 0xffff8000, 0x3, @broadcast, 0x5}}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x8, {0x0, 0xff, @val, @val=0x22, @void}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x4, 0x0, {0x6, 0x5, 0x0, 0x5, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x5, 0x60}}, @chsw_timing={0x68, 0x4, {0xf72a, 0x8}}]}, @NL80211_ATTR_IE={0x4b, 0x2a, [@preq={0x82, 0x2b, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x33, 0x4, 0x9, @device_b, 0x5, @value=@broadcast, 0xfff, 0x6, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x100}]}}, @mic={0x8c, 0x18, {0x7ff, "4e83df771ab4", @long="a8779cc7fed1c4c41f5308d3c4bfaf53"}}]}, @NL80211_ATTR_IE={0xb2, 0x2a, [@measure_req={0x26, 0x6a, {0x3, 0x7, 0xc, "cdc6caf4e53a2ec9b3cfe94c6b3c4bdb8c4da4a75582b3b32492d2bbc6a9316e2741296b7b3b7635415887ae06ab044405252fd70487b001bd1d182b70d04df01d9f1ae31cac947937c53e6381ccc5bffcc943b38ea11ea7bd13e5556c479207ef3a211acc92e9"}}, @chsw_timing={0x68, 0x4, {0x7, 0xc}}, @erp={0x2a, 0x1}, @perr={0x84, 0x15, {0x3, 0x1, [{{0x0, 0x1}, @device_b, 0x44, @value, 0x3f}]}}, @chsw_timing={0x68, 0x4, {0x2, 0x3}}, @ht={0x2d, 0x1a, {0x400, 0x1, 0x1, 0x0, {0x7, 0x9, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x4}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x3, 0x2, 0x9, 0x4, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x8, 0x401, 0x10, 0x4, 0x2]}, @beacon_params=[@NL80211_ATTR_IE={0x199, 0x2a, [@ht={0x2d, 0x1a, {0x20ce, 0x1, 0x3, 0x0, {0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x8, 0x2}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2, 0x34}}, @perr={0x84, 0xa7, {0x8, 0x9, [{{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x38}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x19}, {{0x0, 0x1}, @device_a, 0x10, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x8000, @value, 0x1c}, {{0x0, 0x1}, @device_b, 0xe, @value=@broadcast, 0x12}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x12}, {{}, @device_b, 0x10000, @void, 0x2b}, {{0x0, 0x1}, @device_a, 0xe, @value=@device_b, 0x30}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x10}]}}, @measure_req={0x26, 0x3, {0xe8, 0xff, 0x5}}, @dsss={0x3, 0x1, 0xad}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0xf0, 0x8, @device_a, 0x988c, 0x5972, 0x9}}, @measure_req={0x26, 0x4, {0x5, 0x6, 0x0, "cc"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x2, [{0xc}, {0x24}]}, @measure_req={0x26, 0x94, {0xd, 0xa, 0x9, "28ff8f439a292693f226d2acf5aed72b189044996765edbc963850a540bf73ba4a8f5f9709704d0b1141b21e6d07f0fc558809a8851a409af1848d7cf898a5a2473806b996bbd2e46c6605c3dc3d63e3275ddbc6dc17bb287c2317a8020410a70dc4c971239d6d4faefb6ae3bb8c67ad5d17b84d3fcd2ac158adcf21aed4ee595bb628431343a8d36b75a6bd43134534ab"}}]}, @NL80211_ATTR_BEACON_HEAD={0x2a6, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4000}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x6}, @value=@ver_80211n={0x0, 0x25, 0x1, 0x3, 0x0, 0x2, 0x1}}, 0x7, @default, 0x4, @void, @val={0x1, 0x8, [{0x4}, {0x30, 0x1}, {0x30}, {0x2}, {0x3, 0x1}, {0x60}, {0x1}, {0x4, 0x1}]}, @val={0x3, 0x1, 0x6}, @val={0x4, 0x6, {0x4, 0x4, 0x8001, 0x4}}, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x0, 0x3c, 0x5a}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0xc9, 0x80}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @void, [{0xdd, 0xd0, "a5bfa90cf35827580afe2af51ffc6e942f9fdee6afe480bac39fbe1263bed892e03a8cffa38beae5b86280efc160150dd46cf6ef312b1aa3d513fccc9f9d6241fde0706b0a772b25d3ef5ccb1d8209ea57bbfa73050a3677432c4dc4fa2591426ce94197c2310b62cb8c45518779e73538b150bcdb2ce972c2f943bae5550eaa2b86f77bf55a4f299ea3211504e08b5e8ee44dc2b71cb2ec4afb912a1e31d32c2cfc56c8dbc6f6eb3092eaac38f1401d78f16fc0ec5dfc3e8391304d15832d3cc8a274674c1eb117f6f339eea981b069"}, {0xdd, 0x88, "42a022e868d9197544dd148580ba032ad4bfd584a4c0d39bed3f18cb1bc14502972b19132116278fe6ae805aee71f73e787c30c2e3e4b085cad2c7da20e8120e57075e3ce2e472ac870dd849ae61596136947f062e8fb1f819c88b01ebd6890ef77549492df8fe962c64fd054a94c0aca9709d5186a2c5d01c1f5fff4c998d888e83259385d9f584"}, {0xdd, 0x28, "2cc77c7a2b529153b9c5bfa1c14a8ddd93eeced9f8b3e4d16fffdaacce214c8629d52b51aded6fa5"}, {0xdd, 0x3c, "4ca9d546d652648bfd9794c03127e6870a5e648d495d09e39d8f21b25fe3553a366db169110592c11976b1d6c7f21d3f6179dd1ce753773aea144021"}, {0xdd, 0x7c, "33bfe0a05341ade6a1fcf89d3bcbd570e581b122b746b11e85cb86b6320cead19fee28ee48aac90ffaecba5e5c45aecbfd450bfde9c26696f78e0b8ce674eecd264badce7a83e40fa7430b0d845268436288cba7e332dcefc119727e220231655bd3c7b76408790d3e4494a93f40a7342734b80a2b4d917409004e22"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x12, 0x80, [@peer_mgmt={0x75, 0x4, {0x1, 0x8000, @void, @void, @void}}, @cf={0x4, 0x6, {0x0, 0x2, 0x100, 0x7f}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x401, 0xe5, 0xce6a]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x18c, 0x7f, [@fast_bss_trans={0x37, 0xe1, {0x3, 0x6, "a20ceb57fad6e3d67be79633b4c5de11", "d7278288fb68d6fb53727b02b138e3e129bda985b30056041c8b288ba7ef6d0b", "767ac6f661ecd86c9877edf78af474140696b60343a54002d28d3dd2e4f934cc", [{0x4, 0xf, "5331de5ee7f143ee2ae0de87664ef8"}, {0x4, 0x12, "b11caa572c36695e369c767528939c62516e"}, {0x1, 0x24, "a4cbea8934106818547fc3e46807c322f722f76853ba0b977a3c5adc3935689effbd1a64"}, {0x4, 0x7, "a1ea2aa5955f3d"}, {0x3, 0x25, "8bf77cde6052b5c791f45a3d419c2e5e987cb00a5146fd37524de487fdaf26f887008d87ac"}, {0x4, 0x12, "081f4b38a872f4b0ddcd89ecc79f7130ef5a"}]}}, @mesh_chsw={0x76, 0x6, {0x5, 0x6, 0x2d, 0x2}}, @random_vendor={0xdd, 0x9b, "73b5960952e0046a78a7ff8780da47ddd6781694da47477e094cc09c48c677d6042c381f1e717b7e736b23ff604d88de92f43f9cb539336b3ae2835825ae980f82028b5c17707140d7c40e2a41a11ac99ba7709a5949e6313ff6ec04ff8e60a9aab9e62201a74fdfe7bf2ebbdab2212dd7248f208bdc0af9a7be604e94fa8320cbc7759a2e8fe2ad12c00cba888d60e1c6987eef2b280285e33618"}]}, @NL80211_ATTR_IE={0x8f, 0x2a, [@cf={0x4, 0x6, {0x3, 0x0, 0x2, 0x8}}, @perr={0x84, 0x7c, {0x4, 0x8, [{{}, @device_a, 0x5, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x3}, {{}, @broadcast, 0x8, @void, 0xa}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_a, 0xcf31, @value=@broadcast, 0x13}, {{}, @device_a, 0xba, @void, 0x1}, {{}, @device_b, 0x1, @void, 0x37}, {{}, @device_b, 0x400, @void, 0x31}]}}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x40}}]}, @NL80211_ATTR_IE={0x142, 0x2a, [@mesh_chsw={0x76, 0x6, {0x51, 0x81, 0x37, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @fast_bss_trans={0x37, 0xbb, {0xf, 0x7, "8a05d4d661ecc8cc0ceec99f56af369a", "30be8161a29c87581da688c0424edb27b69adac451bdff3460e1baa173d4a06d", "c80f1707b94c7bb4db8829fc06af9ff194196a782cf3dd8bbb33963966dfc697", [{0x1, 0x14, "ad00adc26dab14395afc607581833192e6d1198d"}, {0x2, 0x16, "7af02b1c258c9b8426a4f7929072adfa19e440fcdb4a"}, {0x2, 0x2, "96b0"}, {0x4, 0x7, "b6c2cff9325e65"}, {0x3, 0x4, "a1db6ec7"}, {0x2, 0x17, "a6ff8defe92268cee39d5157c4394e8b3f919df2609bed"}, {0x1, 0xd, "a96ca2351468afff2659b7cfe2"}]}}, @preq={0x82, 0x51, {{}, 0xf8, 0x9, 0x8ff, @device_b, 0x7, @void, 0x4, 0x4, 0x5, [{{}, @device_a, 0x7}, {{}, @device_a, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x48000000}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {}]}}, @mic={0x8c, 0x18, {0xab, "94fcb24abd31", @long="11b0d170dccab36ffd6bb92816606476"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0xe4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe0, 0x3, "ecd2cfff490468ec20236868dea0017b4b08ac46bc84b491ec4699c6537a1909f7c855b028fe0c596da00468d657ce1fdbeea75e7d2ee829f1491d1554d037d251ea6e0922248968089187d515f39c53595c42becf44d95134409ea9c0c8bda15ba03c821c096653e67acd3b579b604a9c181e920ed45127f71385b600ffb1088abc8d880c78844e54239d5629efd3dae12128baec062b11c5b7e29d36327a5e5aa8bf80bf575fa33ee455fcdf3be1670d70de3514a6c7dc07a44aad24cdcb21fe9e3aeb13cc4825c6279fc58b5a9ad8d0620eeeffd2928e8d575466"}]}], @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x8, 0x7f, [@ibss={0x6, 0x2, 0x7f}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9, 0x20}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1, 0x7, 0x4838]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x38, 0x7f, [@mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x5, 0x0, {0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x5, 0x3}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x9}}, @erp={0x2a, 0x1, {0x1}}, @ibss={0x6, 0x2, 0xbc}]}]]}, @NL80211_ATTR_CSA_IES={0xfa8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x4, 0x6]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x65, 0x80, [@link_id={0x65, 0x12, {@random="aa1a7b57ec7a"}}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x3, 0xe, 0x6000000, @device_a, 0x9, @value, 0x1, 0x6a70, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0xffff8000}]}}, @supported_rates={0x1, 0x8, [{0xc, 0x1}, {0x5}, {0x24, 0x1}, {0x36, 0x1}, {0x75}, {0xb, 0x1}, {0x60, 0x1}, {0x3, 0x1}]}, @peer_mgmt={0x75, 0x14, {0x0, 0xecc, @void, @void, @val="ba47d0d8f7a707caa576522b977778b9"}}]}, @NL80211_ATTR_PROBE_RESP={0x1a9, 0x91, "4c4c4a6622c2bdc7a737c9469ce5797bf10b811c7063a73e7649b234e6f47fed8a2819441134073a7c7194fd59e23c4806c958734e3a359361fc188d1ef5d4e5125c8240fa5e1d85e8e3e8d9c2d9874a539a59227e3c91e770052731abe967476652154490c046ba5c278cd7e0259201c47a55f4e2b1492f53c4a06cdacf4ebd04f2a9e055d9b4cfa5fca1981ed4674377f041c57a3c528967bbdc894b7f010afb396248c425af564c868597592650b128a49b8c071972441d70514c7daed7c129033db4907f017b91abad10e737b6cd7bc81fd52b23b1499f810893f1848684b718095803d93be52548594b6da68c6724123a8dd393ee8b65c22c404f9b7798b27eac6e70fcb15a4bec7541d383b3efbd74aabb462332c3568ea73bb2a0f5c33d62e1e30cd7a9fdf7236c8cf4d09fce6041674efed7e33aac3756ef5106509e0189af169892b30ce7c661a69b06a0e4ad5c75deaadb8b8713d7e46d08a1b2753961376aa2c6a055e2a3ec6aa80eb602d79decc5fd77191af831909a39470a339f4bc36318b15b64aaaab11ae2653aecbe8695a85a9bdd42bb9f8499b75bb7236784c8b779"}, @NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@supported_rates={0x1, 0x8, [{0x6c, 0x1}, {0x6}, {0x1b, 0x1}, {0x12, 0x1}, {0x1b, 0x1}, {0x12}, {0x60}, {0x48}]}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x3, 0x20}}, @cf={0x4, 0x6, {0xfa, 0x5, 0xfff, 0x9}}, @mic={0x8c, 0x10, {0x807, "78dcdbae0f0b", @short="8df24a49ec31f7c2"}}]}, @NL80211_ATTR_BEACON_TAIL={0x4f, 0xf, [@prep={0x83, 0x1f, {{}, 0x2, 0x92, @broadcast, 0x903, @void, 0x8, 0x7, @broadcast, 0x386}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x0, 0x0, {0x5, 0x9, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x8, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x95, 0x1}}, @cf={0x4, 0x6, {0x9d, 0x54, 0x5, 0x3}}]}, @NL80211_ATTR_FTM_RESPONDER={0x220, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x57, 0x2, "fcd793d67795f7f0676f7ea899e1d679fe00b2adb19fec110bd30373587eb71b9a4bbc85f45c2656584daca5bef128eac832c4d6e23cf302c3370bbfb756bf690d5582ca12920629ed3047c66cee5efaac0ae7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "c099f0e64cd8606a5659f826bf11a63a0661dbb309bbd22bf9c16618d02047455906629f8a807846fc3b0b21cba4fef65d82913fe1d5dd3f5ecde27d80f0cd13909bac0f57a4515a2c84c269d4d6b09bf7a9bf1f706c91fe339d0a1082e724b4df6cf62b490d9560251cfe954f539a3ab24b59106d05b4ca6ce8ee44a93340172b97f9d22949c6f48212583aab923939b4"}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "82738eeff5e6eee38a0eecdc9da80a1935b9dc3bd4bdf41993c4c0f1ddaf73548a1a6f9fe6c81f7fac808c3361e18aeb5c7d5c05ddafd87dee397ffd4ce367018a53e130ddf4bf1779fcb7e179951d28d1c696da2a5bc18dbb633401935cfc4a775e35be9bb2484c03fa3d218373a7413c086f095f6ea0755ec6658828006b9171423bcde7c64ae48ac0ef26e0ec884f"}, @NL80211_FTM_RESP_ATTR_LCI={0x98, 0x2, "0fa03bfbb85948cdb1b0b2b7c3606bbf51b033823b9d5c4b027a023552d4126479ffe957097787be67b0bddd116f4f5b1e1f9cccef6b57bfd80fc4be10bb8a630303c8359ae99efa9312acffbaf4d2f4774fdc64a32d570972b74a56fa18d8c11ec3521323560b70778e8455464b294961dd8683f6e1f5855e0c57a8160836672594ee49cf932491b34c9147e48280b8f4cfc700"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7d, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x2, @device_b, 0x401, @value=@device_b, 0xb36, 0xff, @broadcast, 0x5}}, @supported_rates={0x1, 0x5, [{0x1}, {0x6c, 0x1}, {0x5}, {0x63, 0x1}, {0x5, 0x1}]}, @preq={0x82, 0x46, {{0x1, 0x1}, 0xf8, 0x18, 0x8, @device_a, 0x7, @void, 0x7f, 0xff800000, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_a, 0x48000}]}}, @challenge={0x10, 0x1, 0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x5, 0x3b28, 0x1000, 0x8000, 0x40, 0x4, 0x800, 0x9]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x1f, 0xf, [@ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x40, 0x75}}, @ssid={0x0, 0x4, @random="9f43292f"}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1d1, 0x7f, [@erp={0x2a, 0x1, {0x0, 0x1}}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x4, 0x0, {0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0xfffff000, 0x2}}, @random_vendor={0xdd, 0xd4, "d1250b70ef30f18f1442e5befd79458c1a1524888ffd62a6fd5292fbbe9b4ce6451627e00725ce2491d348769b112726f1e8fb522f11a7eae869ec4bdc13c878895c6547f116617fafcc77670b3f1f96c9c49b9ad42a71dc1b50b03d8a8e21540f0e44ddf56f44d3122ba2196e4a243093253fb028123d787f4f0dafc9a781afd7fabae8313fa216bc2bb1852032a29cb8790f16155243e74da9871c0c1c45dc2f44ff8e1042e7353b71ef302d35ffde6923141fbc8817ee22d6713538221ddd311fe67fd02aef994cc1c5266fcb50db2bf4d5ab"}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0xc6, {0x8, 0x5, 0xe, "1bb79beef85c5b78019b8703db7ca475b951e746b12cea796dddf59f2808d93f706e149e0377779b820be211510b35cebddc720fcc1a1c77c380c33c92654ee47fce7edcc5556e242dff86d7e93fe4d45914aa3be8835108a13b90860d75c02cd440f018299f1e88fbd24c29a710e868978503a6c90d984594716710ae652e7a62407a3de835d87f22a848b7fc674954bb1d07619162b8d18e89084edd10c55490b9c7a67858d9d59d972d6899f2105d1ed4dbd1841a2f77cbfb8e61782db083dcffd1"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x1bb, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac, {0x0, 0x4}, @value=@ver_80211n={0x0, 0x81, 0x3, 0x2, 0x0, 0x1}}, 0x1, @random=0x8, 0x2, @void, @val={0x1, 0x2, [{0x36}, {0x51}]}, @void, @void, @void, @val={0x5, 0xe9, {0xfd, 0x20, 0x68, "c50d65fc32c905e61ca8a331754d52833ced01104c323376a66f8b253d09abb90bf87820c9f7e7e47cc0f0ad06423c5999a0fdaa7c4301200e99b25ab9faf60d100c2cccf53b38d9351c1d954a894fddcb8cdb280494a273b888aab98adb375f84faadbd7c05a4ba40d0633202de1f7efa71bf29963ce710a3b1f93c6696628be90acbd48d3d5ba15cec06c77b4b344c050a6884859c5a0b29b1f7a730736ac5e36332bbf1a8a7a27645bdeefbf610ed35794e01b12db9c88f21b94c1863991c26ffb6c9d89ebae219799408101d0fa02c4230071ffc59121eee2e936fc19c3a4aabda8c7899"}}, @val={0x25, 0x3, {0x1, 0x75, 0x3}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48}}, @void, [{0xdd, 0x67, "f0d23f7c26c4c02ae54911e9ad1fb0cfedae942e43d8c9cb357f2b8530676208452d3d05f4a9e8456ba37644c8ba636c0b4ecb269179db0fae0f33489c9659c6858be72dbcc4fa4080b07e507b8b37f3eb839821ff7c4be3541c638f03fe939722dd82b2d4f807"}, {0xdd, 0x24, "7adbc7ccaadcb69aebd852d9d2b10247ecdd46f68526b3f2e101db769fdef1d5236786ec"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@sec_chan_ofs={0x3e, 0x1}, @mesh_chsw={0x76, 0x6, {0xa, 0x8, 0x2d, 0xa2}}]}, @NL80211_ATTR_IE={0x21e, 0x2a, [@mesh_chsw={0x76, 0x6, {0xc, 0x3, 0x27, 0x101}}, @rann={0x7e, 0x15, {{0x1, 0xf}, 0x6, 0x0, @device_a, 0xffff8000, 0x3}}, @cf={0x4, 0x6, {0xae, 0x7c, 0x1, 0x9}}, @perr={0x84, 0xa2, {0x8, 0xa, [{{}, @device_a, 0x7, @void, 0x3b}, {{0x0, 0x1}, @broadcast, 0x45, @value, 0x9}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x17}, {{0x0, 0x1}, @broadcast, 0x200, @value=@device_b, 0x6}, {{0x0, 0x1}, @device_a, 0x80000000, @value=@device_b, 0x2}, {{}, @device_a, 0x7, @void, 0x1f}, {{0x0, 0x1}, @broadcast, 0xcd50, @value=@device_b, 0x30}, {{}, @broadcast, 0x5, @void, 0x2f}, {{}, @device_a, 0x6, @void, 0x1a}, {{}, @device_b, 0x2, @void, 0x27}]}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x7, 0x6, @device_b, 0x7, 0x9, 0x2}}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x77}, 0x7, 0xd, @device_a, 0x8ef, 0x8, 0x5}}, @tim={0x5, 0xc7, {0xbc, 0x5f, 0xa, "06e90c0315862e3e2910994c999beb9061f5f2f6e04a61e17b334815ecb5f7b48b7caaedd1b30d62540a96541fa66f54fedd4595fd854426a4041f6c2b2b9b15fd11b96b4aeb7e02ea6b65b83d3fcb5de7c98f06c0283ea3cd35198705104f8ea9609718cf3c18e494927d09b124cdedf78db5bb7482dd09f5189e11924f6378d6403f2e43ff26dad03a27e3fb0f051d6c469e36eb410b1f921a4653dcfcf8135ca56093267c42e00db9f27efdfe9e461a82754190ac1f35d5a6319d3bf12943d0e2d911"}}, @random_vendor={0xdd, 0x4e, "a507d150773e23b5dcb622d60fd22215fd6fc75945d7420972a8893928f7938729002057d7aba22e49aee47ac5a91b2dd3fd11ad4192257303c94ec0adef68dd671f89a8398b3e6b511b81d3fc33"}]}, @NL80211_ATTR_PROBE_RESP={0x425, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x40, 0x3, 0x8, 0x4, 0x8, 0x3, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x3d77, 0x0, 0x8, 0xfffb, 0x8000]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x8, 0x0, 0x400, 0x2, 0x7]}]}, @NL80211_ATTR_CSA_IES={0xb34, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0xd71, 0x8, 0x7ff, 0xfffa, 0x0, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xff, 0x593, 0x5, 0xfff]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x5aa, 0x91, "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"}, @NL80211_ATTR_IE={0xa7, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xfc1b72bf1786fc02, 0x9}}, @link_id={0x65, 0x12, {@random="0bd041c2fda4", @broadcast, @device_b}}, @challenge={0x10, 0x1, 0x74}, @dsss={0x3, 0x1, 0x34}, @measure_req={0x26, 0x47, {0x8, 0x2, 0x6, "304d858fe272364ba6feb2daa490bb66230a0753c96b64b2bfccc0843b24f03e3de38a945d54a29bed949788db03780d80a0ac191217a64be79c235b7db28feae765454f"}}, @erp={0x2a, 0x1, {0x1}}, @mesh_chsw={0x76, 0x6, {0x6, 0x4, 0x15, 0x10}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8}}, @preq={0x82, 0x25, {{0x0, 0x1}, 0x2, 0xc, 0x2864, @device_b, 0x6, @void, 0x0, 0x9, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x6}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x152, 0x80, [@random={0x4, 0xa7, "ec27b68744e36a56fd6dbca4876735527ccd441bbdb582e0e3503f7104be0b562904381ff4f1073de258e9ef1f899cc92a2ea33747812d0f7ed3dee4dc8cbafc401522563f9213e341ee3840144838833fd77e369902800b8e5a43de2b4d6bd49847aec69f4a2517a900aa3c5013865d1565be70c1966920986a4b0493c32218e57a94c937d6ca6c1d5f29d42e8f4b836e701d3d727bd00f3bb22c564bffac012e7d0ad881a405"}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x81, 0xf8, 0x14, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x25, 0x60}}, @supported_rates, @preq={0x82, 0x57, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x7, 0x4, @device_b, 0x6, @value=@broadcast, 0x7, 0x0, 0x5, [{{0x1, 0x0, 0x1}, @broadcast, 0x7bb}, {{}, @broadcast, 0xff}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0xffffffff}, {{0x1}, @broadcast, 0x4}]}}, @challenge={0x10, 0x1, 0x24}, @mic={0x8c, 0x10, {0x906, "3b2bfc20e0b0", @short="cfef13bc93d49bea"}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x2, 0x0, {0x401, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0x7, 0x9}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x246, 0x80, [@mesh_chsw={0x76, 0x6, {0x3, 0x4, 0x0, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xd, 0x5, 0x58}}, @tim={0x5, 0xdf, {0xce, 0x72, 0x3, "51950c09963410f727cedfddf83b83710523601bb611dde979ab92ec131c1b0ab06bf1d431e1191405a1f07d4bb65351fa5b982f3ff9528877e8d1530fd9605d599ab7102fe5a6b34b95aacdcb7f5f7898abef8f1a680d8d7ec2d622a0528da8ed023cbd107217fdc8495da250da8c65acc5da81bee53f30b1504e536073c4b73a152210035cf417147268d75d12d94abddd563f13d5d9c6a8ef89854a167a32fbbee5694e53cf90c9685230bf46ea38ed677063dfd16a26ce9675ba1cc096acbc22b8d6e95c077c9deb260995086b6f2071b1a95fd739ed6b35288e"}}, @preq={0x82, 0x51, {{0x1}, 0x8, 0x7, 0x84, @device_a, 0x2, @void, 0x0, 0x3, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0xb4}, {{0x0, 0x0, 0x1}, @broadcast, 0x2}, {{}, @device_a, 0x10000}, {{0x1, 0x0, 0x1}, @device_a, 0x7}]}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x3}}, @perr={0x84, 0xdb, {0x5, 0xd, [{{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x6}, {{0x0, 0x1}, @device_a, 0xb, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_b, 0x31d1, @value, 0x32}, {{}, @broadcast, 0xab0a, @void, 0x40}, {{}, @broadcast, 0x7, @void, 0x42}, {{}, @broadcast, 0x200, @void, 0x26}, {{}, @device_a, 0x10000, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0x40, @value=@device_b, 0xe}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x11}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2c}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x4}, {{}, @device_b, 0x8, @void, 0x42}, {{0x0, 0x1}, @device_b, 0xfaa, @value=@broadcast, 0x31}]}}, @mic={0x8c, 0x18, {0xe58, "104916f8180d", @long="e71cd02a1caac4288c69b6ec85281876"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x6a, 0x80, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0x8, 0x6, 0x19, 0x7720}}, @perr={0x84, 0x42, {0x1, 0x4, [{{}, @device_a, 0x0, @void, 0x3d}, {{}, @broadcast, 0x8000, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x1b}]}}, @link_id={0x65, 0x12, {@random="38225de39ea3", @broadcast}}, @dsss={0x3, 0x1, 0x9d}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@preq={0x82, 0x6d, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0xb, 0x6, 0x10, @device_b, 0x8, @value, 0x0, 0x9, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0xfd}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_a, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0xc}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}, @supported_rates={0x1, 0x4, [{0x16, 0x1}, {0x3, 0x1}, {0x30}, {0x4, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x7f, 0x2, 0x32, 0x5}}, @random={0x5, 0x30, "533ef60ec5a0483492387c33e47c86f7be67aa91aac59f620d180177d4858bee91c482ff5ff88414634a0b1d2586d34e"}, @ibss={0x6, 0x2, 0x6}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4a}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9d}]}, 0x3890}, 0x1, 0x0, 0x0, 0x804}, 0x40080) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x28, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4811}, 0x40018) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000003c80)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000003d40)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000003d80)={r6, @in6={{0xa, 0x4e24, 0x2, @private2, 0x5}}, 0x6, 0x5, 0x101, 0x80, 0x12, 0x5, 0x3}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003e80)={0x0, @initdev, @multicast1}, &(0x7f0000003ec0)=0xc) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000003f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003f40)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003f80)={0x0, @broadcast, @local}, &(0x7f0000003fc0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004040)={'syztnl1\x00', &(0x7f0000004000)={'tunl0\x00', 0x0, 0x8, 0x1, 0x8, 0xf0, {{0x8, 0x4, 0x2, 0x3, 0x20, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @local, {[@noop, @cipso={0x86, 0xa, 0xfffffffffffffffc, [{0x2, 0x4, "ef12"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004100)={0x1, 0x58, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000004140)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000004180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000041c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000004200)={'wg2\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000004240)=0x0, &(0x7f0000004280)=0x4) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000004540)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0xb8533daecc471679}, 0xc, &(0x7f0000004500)={&(0x7f00000042c0)={0x20c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008800) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000004680)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004640)={&(0x7f00000045c0)={0x68, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004780)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)=@gettaction={0x24, 0x32, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20084) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r17, 0x541b, &(0x7f00000047c0)) (async, rerun: 64) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004840), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000004940)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004900)={&(0x7f0000004880)={0x58, r18, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x48}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x887}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x99d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x14e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x980}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r17, 0x8983, &(0x7f0000004980)) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000004d00)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004a80)={0x214, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "7be9553fc07141827df3b2578a77a4287b82f89c9650989672b5eb1538688a606aa36811d530a8638f7386f61cbd9c7975540024c3b481f255798dd2bc0bb913b522e8967fc6b036e1e51b681ef9cf78a67908348a940bc0fb4f5ce34adea4f197c9ef8b459e72dfefc8d93993"}, @ETHTOOL_A_BITSET_MASK={0x62, 0x5, "b40b31e1f82aa53f6e99f6f56ffbf2d9e65e23ad0e0aa117c9f300606455f2ad6832c237ff48eb8b35b88bcfcf14655f9911fea402ff36b2416606e02e0e0b0e794264594aed7e5c9d9c1163fb0c30b8c9debec316e509470e67491696f6"}, @ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "5917a2cb35891051ee10448c5f0b717da1dd2e1a24890332b3dfb5fc02fac7903675ca0ca277ca210c497003a4fa4f0525e5ff488f6bd747b35dc182d20899a48a5b3aa24767930ce84a5cd16717e217dc8d22fe5a883e7f03c9970c2dc3a547749215cd59f8ed899adfd32bb5f85fdf6f40c26d260a35b032f9925ed49c02dfd481daadd679768e8e35f5ae9a6c38c95a70ece713ff4759b914f2c02da4f5d06dd16ba029c46be6c5256ec5a5427811c4f60199a0de7d740ef297eae1a2168fd58667da45802f947dcd6572280cf99efb628c866e4e1211e3b6c31d9898f7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x214}}, 0x1) 25.896410991s ago: executing program 3 (id=1710): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002a0009000000af00000000000400002c240011002e"], 0x38}, 0x1, 0x3000000}, 0x40) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, &(0x7f0000001000)={0xa, 0x4e25, 0x40, @local, 0xe08}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) listen(r1, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x2, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x6, 0x5, 0x82}}}}}}, 0x0) 19.771267749s ago: executing program 3 (id=1710): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002a0009000000af00000000000400002c240011002e"], 0x38}, 0x1, 0x3000000}, 0x40) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, &(0x7f0000001000)={0xa, 0x4e25, 0x40, @local, 0xe08}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) listen(r1, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x2, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x6, 0x5, 0x82}}}}}}, 0x0) 9.948400819s ago: executing program 3 (id=1710): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002a0009000000af00000000000400002c240011002e"], 0x38}, 0x1, 0x3000000}, 0x40) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom$inet6(r4, 0x0, 0x0, 0x40000000, &(0x7f0000001000)={0xa, 0x4e25, 0x40, @local, 0xe08}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) listen(r1, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x2, 0xc000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3f, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x6, 0x5, 0x82}}}}}}, 0x0) 3.251305142s ago: executing program 0 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14141008000700e010030a08000a00", @ANYRES32], 0x48}}, 0x0) 2.991785943s ago: executing program 0 (id=1985): nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f0000000300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x10000, 0x6, 0x3}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x7, 0x5, 0x7}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000004c0)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000500)=0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%ps \x00'}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4000}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r9, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="220590dbf7120000", @ANYRESOCT=r8, @ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x16, &(0x7f0000000380)=@raw=[@alu={0x7, 0x0, 0x2ec322bdb0e9561, 0x2, 0x0, 0x30, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x92}, @generic={0xca, 0x3, 0x9, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x17, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000940)='syzkaller\x00', 0xfbf9, 0x0, 0x0, 0x41000, 0x40, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x3, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r6, r7, r9, r10, r11], &(0x7f00000008c0)=[{0x2, 0x4, 0xf, 0xb}], 0x10, 0x3, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000001380)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xf}, @random="37e7fdd84dc1", @broadcast, @initial, {0x4, 0x9}}, @random="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"}, 0x1b7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r13}, 0x10) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r14, 0x800448f0, &(0x7f00000000c0)={0x0, 0xfffc, '\x00', 0x0, 0xfd}) socket$nl_audit(0x10, 0x3, 0x9) 2.727951879s ago: executing program 4 (id=1988): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0xe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6(0xa, 0xa, 0xf) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = accept4$rose(r3, &(0x7f0000000240)=@full={0xb, @remote, @remote, 0x0, [@netrom, @default, @remote, @bcast, @rose, @rose]}, &(0x7f0000000280)=0x40, 0x800) sendmsg$unix(r4, &(0x7f0000000300)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="01effebae80a632597667b2d02de85a0f07148c83a354f104097ce2e0fe66444f877e6310880f6d9b52d9d2086c3478fc3f33b84cc91cbddd56755bf41f9695093e0d20aca80b4e3524022ae32208d47bfbf699079c922340a5bf8", 0x5b}, {&(0x7f00000001c0)="a9d7a2b5fe606b91cf0bd6554a649279e00c2ee2ba71a348f0e245d53647576e", 0x20}], 0x2, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [r5, r2, r1, r1, r1, r6]}}], 0x28, 0x40000058}, 0xc000) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r0}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000380), 0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5133ae8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x84) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5133ae8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r5, 0x35, 0x0, 0x401, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r7, r7, 0x22, 0x2000, r7, @value=r7, @void, @void, @void, r9}, 0x20) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000600)='pim6reg0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x1f, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2c}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x58, 0xa2, &(0x7f0000000780)=""/162, 0x1f00, 0x4, '\x00', 0x0, @cgroup_skb=0x1, r7, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x0, 0xa, 0x4}, 0x10, 0xffffffffffffffff, r8, 0x9, &(0x7f00000008c0)=[r7], &(0x7f0000000900)=[{0x4, 0x1, 0xe, 0x1}, {0x5, 0x2, 0xe, 0x7}, {0x4, 0x4, 0x3, 0x3}, {0x1, 0x3, 0xa, 0xe}, {0x5, 0x5, 0x0, 0x6}, {0x2, 0x5, 0x7}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x4, 0x9, 0x7}, {0x4, 0x5, 0x5, 0x3}], 0x10, 0x9, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x1f, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2c}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x58, 0xa2, &(0x7f0000000780)=""/162, 0x1f00, 0x4, '\x00', 0x0, @cgroup_skb=0x1, r7, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x0, 0xa, 0x4}, 0x10, 0xffffffffffffffff, r8, 0x9, &(0x7f00000008c0)=[r7], &(0x7f0000000900)=[{0x4, 0x1, 0xe, 0x1}, {0x5, 0x2, 0xe, 0x7}, {0x4, 0x4, 0x3, 0x3}, {0x1, 0x3, 0xa, 0xe}, {0x5, 0x5, 0x0, 0x6}, {0x2, 0x5, 0x7}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x4, 0x9, 0x7}, {0x4, 0x5, 0x5, 0x3}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x0, 0x3, 0x7, 0x40, {{0x25, 0x4, 0x3, 0x4, 0x94, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x1a, [@rand_addr=0x64010102, @rand_addr=0x64010101, @local]}, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x9, [{@multicast2, 0x10001}, {@local, 0x3ff}, {@multicast2, 0x8}, {@multicast2, 0x125}]}, @noop, @timestamp_prespec={0x44, 0x34, 0x59, 0x3, 0x0, [{@loopback, 0x2}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x6}, {@loopback, 0x7}, {@remote, 0x5}, {@multicast2, 0x7fffffff}]}, @lsrr={0x83, 0x7, 0xab, [@multicast2]}, @end, @lsrr={0x83, 0xb, 0x23, [@empty, @remote]}]}}}}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)={@ifindex=r11, r8, 0x76, 0xc, r10, @void, @value=r7, @void, @void, r9}, 0x20) accept4$unix(r4, &(0x7f0000000bc0), &(0x7f0000000c40)=0x6e, 0x800) (async) accept4$unix(r4, &(0x7f0000000bc0), &(0x7f0000000c40)=0x6e, 0x800) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000c80)=0x3, 0x4) setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f0000000cc0), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000d00)={r3, 0xb, 0x2, 0xfa}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000d40), &(0x7f0000000d80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r7, 0x0, 0x4f, 0x4a, &(0x7f0000000dc0)="ca43b25cabc8d29a170c6b6f8c9dc5de04151c11dca398f82f5258342d54d0ee36c2533017443be6080a51afb19b23d6fe96b206c519da962779fe35fea4d479418139f2bbbfd5c450c80ffbb882e0", &(0x7f0000000e40)=""/74, 0xb, 0x0, 0x4, 0x98, &(0x7f0000000ec0)="bd95e286", &(0x7f0000000f00)="0be5ecbe5dce08f2de1d074733792fd52291e67962ea93395ec76662b34e53ec3cb1a5a1cb82b3ccbccb2f094b4fd8a5358220f259d1c5b00ae1a98090c4f98f75c916194ef3356eaa92c360eb839a10bf551d40bf9c72f725827d3385901c5afafc5e5ed131dcfc334005a6dc0d3873847a2668ae043c3bd9492be37de24ffe093185b775f9aabd4e00db89dde8c50595eaeac319705703", 0x5, 0x0, 0x8}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc8bb, '\x00', r12, r8, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc8bb, '\x00', r12, r8, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@initdev, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000001200)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@initdev, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000001200)=0xe8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2.604060111s ago: executing program 2 (id=1989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) close(r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f1401002abd70f0fadbdf2508000100000000000800450073726c04"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) (async, rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.396167415s ago: executing program 4 (id=1990): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x190, 0xa, 0x148, 0x0, 0x10, 0x3a0, 0x2a8, 0x2a8, 0x3a0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'virt_wifi0\x00'}, 0x0, 0x120, 0x190, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0xa359e000}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x0, 0x30, 0x0, 0x0, 0x7fff, 0x1ff}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x498) r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/130, 0x82}], 0x2, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}, 0x40010101) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000880)={0x6c, @rand_addr=0x64010101, 0x4e22, 0x2, 'none\x00', 0x0, 0x0, 0x62}, 0x2c) 2.080036215s ago: executing program 4 (id=1992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000600630148000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.982265535s ago: executing program 4 (id=1993): r0 = socket$kcm(0x10, 0x2, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24004895}, 0x40000) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYRES16=r4], 0x74}}, 0x1) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x2004091) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delqdisc={0x54, 0x25, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {0xfff1, 0xfff2}, {0x3, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x3f, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048095}, 0x20000010) 1.655762323s ago: executing program 2 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r2, @ANYBLOB="89040400000000003800128008000100736974002c00028006000f000000000008000200ac14140006000f0007"], 0x58}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000e9819e00000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r8, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0x1f4, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x78, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eda503551852a332a902644d57b1ba303a4a47c57159fba05b5400544a5dd388"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd6384c8ec33193edf57b8cbb22d716890c74ecc736cbfdacf269a846524318f"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a544e03bf0fd429d5721246705701197"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3ff59cb93234c21dc25dd6a8ad335e04"}]}, @NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "db4447aa5623f810e0037e7b63bafd8c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "04ab6519d34480dd7a6a25f097a48d40"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c5ad4b2c91a3b27f683100ceb7f18e608c7154ccb4c0c66237e0fb7fc122bb3e"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x60000000}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e86005ca1efb5565f1983a7136f9d9c9"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1f4}}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r5, 0x1, 0x0, 0x0, {0x5}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) 1.573343941s ago: executing program 4 (id=1996): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000015000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b055803e25bc00ae0c63c7f9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606f3eb5e01b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a777bc0b80e80eae8f5e64be2c9d2d29dbff36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000f08a798b4f7458d1863cc67c4c6a06e828e5216f601b19db1ad0f062137dff030000000000001fdbbd4e97d62ecc645e143a60f10800000000000000826151e2b42bcae952390300a2a730a00c87c493dbfa60e63fda97a29682881eb8c9cf74a4207a931a156ad2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28dd6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f5057e2eb062ed71a8c73be72a3d817b324d6e41734c33501cada0600000000000000d588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b9990995000a006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e9962ead4ecac42c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfbc5652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de57f9c4af1e094fa4e3f05528c2a165996efaab5a430c08dd810bc9796f2119e04aeaa71288d9341f11de01753c7532ef177223dd90e5e9a46e87015f2d7758a3a689d232ead3131be6fdc7a4d4bb2ccb79cf169ff86b366f0c0ed6e396944b0fdfdca5e0d75b0cb552fe53e4d126c811b0bcfc6e42677d2e97dd74ead49d8f43d65d58bc62eb12127f105a9d4f63dbd91b73ec50d70810c49952ddbf73833d74ca4d86d7fcd2cffc93c4bf6e7e151a5acb6d8b79e35ee4785ebca16f849fe4ddb1d62283b646d353200518ac37994eba5a9a6e212d4135a200c01371535c6"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x1f9, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece13310aa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.552084035s ago: executing program 0 (id=1997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000400)="1333", 0x2}], 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rxrpc_connect_call\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000"], 0xb0}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) (async) listen(r4, 0xffffffff) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x9}, &(0x7f0000000080)=0x8) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES32=r2], 0x7c}}, 0x0) (async) unshare(0x6020400) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000240)={0x1d, r7, 0x2, {0x1}}, 0x18) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64=r6], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1.471159457s ago: executing program 1 (id=1998): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0xfffffffffffffffd, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x34}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0009"], 0x34}}, 0xc000) clock_gettime(0xfffffffffffffffd, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048800, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xf, "1291371129fcbea6ef261f1096a374"}, &(0x7f0000000240)=0x17) 1.304110806s ago: executing program 0 (id=1999): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@remote, 0x57, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x30, 0x9, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x28}}, 0x0) read(r4, &(0x7f0000000100)=""/168, 0xa8) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x2a) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r1, 0x100000000) 1.272055554s ago: executing program 2 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r3, &(0x7f0000001280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="38000000010003", 0x7) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfc1}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000003c0)={r4, 0x5}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x8800) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) unshare(0x20000800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r6, @ANYBLOB="37a46c4d8d8fea000043000000000000000000"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) sendto(r5, &(0x7f0000000440), 0x0, 0x1c5ff606d0aebf6b, &(0x7f0000000480)=@llc={0x1a, 0x206, 0x32, 0xa3, 0xe, 0x8}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000001c0)=0xc) 1.16380845s ago: executing program 4 (id=2001): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r2], 0x24}}, 0x0) (async, rerun: 64) write(r0, &(0x7f0000000000)="3b000200", 0x4) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000280)=""/97, 0x61, 0x0, &(0x7f00000004c0)=""/142, 0x8e}}, 0x10) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRES64=r3, @ANYRESDEC=r3, @ANYRESOCT=r4], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r5}, 0x8) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7ff, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4d, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xa8}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r9, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100040000000800070000000000080003"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611220000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.096316181s ago: executing program 1 (id=2002): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x48000000}, 0x0) 865.035022ms ago: executing program 1 (id=2003): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000700630148000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 792.333023ms ago: executing program 2 (id=2004): socket$rxrpc(0x21, 0x2, 0x2) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='\x00e\xa9f\x9e\xbbT}\x15\x91H\x93sW\x94\b\xa2\xf0Es&\xc7\xf8\x8c\xc8\xb1&\x12\xebS\x98\xf3C]A\xf5$\x1e\xf5g|a\xc0\r\x00\x00', 0xff1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22ffff) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x45, 0x6, 0xb, 0xc, 0x3, 0x81}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x5761, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r4, 0x114, 0x271d, 0x0, 0x20000008) setsockopt$rose(r4, 0x104, 0x6, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$rose(r4, 0x104, 0x6, &(0x7f0000000040)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 595.829169ms ago: executing program 1 (id=2005): r0 = socket(0x1f, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f00000004c0)=""/199, 0xc7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {0x3ff}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xe4b, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="be", 0x1}], 0x1}}], 0x1, 0x24008094) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b0028"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) 567.396565ms ago: executing program 2 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x9, 0x0, 0x1, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2a00}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xff}}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0x0) 389.24687ms ago: executing program 0 (id=2007): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xc1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000000000000020062ac2439097c548dd52cf71686eb510951f71c072fed99b72eb76a858df8cc462b50b7515bcb82d66c17d510fcd87b7742ff4d97e0535ae10262fcd4a788791453f284d2ddff8263994a9d11db2ce645a682472822c95e8b3a61c38fb2403b317b219b165c2f0c73a2c8977a088558d47f833423def58c0198dc05f298b99301a0105610b3ee32b517e302b422ebcd0c8f3ca896387150b829ebad33704321371c91f2f42064d09174b4d782367aa11f80922841b0ed8b331c4472dafe6869cc7a53ceb5f74b837", @ANYRES64=r0, @ANYRES32, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe000000008500000028000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5071bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 275.737215ms ago: executing program 1 (id=2008): clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x7e1, 0x7, 0x7fffffff, 0x4, 0x0, 0x6, 0x9, 0x80000000}, &(0x7f0000000040)={0x100000001, 0x4, 0xfffffffffffff810, 0x9, 0xc, 0x5, 0x101, 0x5}, &(0x7f0000000080)={0xac24, 0x6000, 0x6, 0xd4d, 0xc, 0xff, 0x2}, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f0000000240)={&(0x7f0000000180)={[0x400]}, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010000000000000000000a005100", @ANYRES32, @ANYBLOB="0000eaff070002"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='xdp_devmap_xmit\x00', r2, 0x0, 0xfffe000000000000}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000002c00)="6774dc8a9bef3da86465cebde7c61ba29b8d643f4592888264cb8d56652fcbcb5b179e24d9f53f5ac9c1c868361ff4de2adf00eaba06249a38eec12ca9e0643daf528234d9c37d458f5be6c4fe4cac38e018084156ca9e", 0x57) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10201}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/66, 0x42}], 0x1, &(0x7f00000004c0)=""/191, 0xbf}, 0x8}, {{&(0x7f0000000440)=@caif=@util, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000340)=""/182, 0xb6}}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/156, 0x9c}, {&(0x7f0000000a80)=""/229, 0xe5}, {&(0x7f0000000b80)=""/32, 0x20}, {&(0x7f0000000640)=""/94, 0xfffffffffffffe4f}], 0x4}, 0x6}, {{&(0x7f0000000c80)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/229, 0xe5}], 0x1, &(0x7f0000000840)=""/255, 0xff}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000f40)=""/180, 0xb4}, {&(0x7f0000001000)=""/120, 0x78}, {&(0x7f0000001080)=""/190, 0xbe}, {&(0x7f0000001140)=""/196, 0xc4}, {&(0x7f0000000580)=""/59, 0x32}, {&(0x7f0000001280)=""/128, 0x80}], 0x6}, 0xb}, {{&(0x7f0000001380)=@x25={0x9, @remote}, 0x80, &(0x7f0000001440), 0x1, &(0x7f0000001480)=""/190, 0xbe}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001540)=""/250, 0xfa}], 0x1, &(0x7f0000001680)=""/196, 0xc4}, 0x101}, {{&(0x7f0000001780)=@sco, 0x80, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/125, 0x7d}], 0x1, &(0x7f00000019c0)=""/4096, 0x1000}, 0x3}], 0x8, 0x80000000, &(0x7f0000002bc0)={0x77359400}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x80) 254.1205ms ago: executing program 0 (id=2009): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0x52}, [@NDA_IFINDEX={0x8, 0x8, r4}]}, 0x24}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x800}}, 0x80) 81.784097ms ago: executing program 2 (id=2010): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) 0s ago: executing program 1 (id=2011): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000640)="19150e883e874f00e6dfc0aebd1f92f0292019cf9df0f56876e58d42cfb13b504ddeaa107312839767201de41ee922e1fdf91c9a4e165b33db923fb1cefe214330f4c5b3843438593e04e25bd91d7a15ef5938535a6ea9a413dc3eb85cfc6b6ec27547f0e0c88f93dab3645c51a53204a96a736ee1d53f8c15ee43700aafda822ce6e7fe49f942b911827cf2d9449f1841982897011264721b5299c12055c2dc0c3a93f35d58c22ee4d8726939d4dc66709f7fae164aef74aa75eb42a62994fc7b5a6d4d6e589f9c045f8b2dd8ad42b5238503089d2c548ec349f8e815c3e2eac91825e0aade52d847951970a1506d9e1ca31f20e9dbd6a451efd051061782be28d00bd091fc1563bc823cc84276eaedf0d7d56f3b1c91675317d866fab33e7248ad4fed9ae50f44fdb87c00c945aed09b5a7496e98784320a520f8d72fbca9ea5a2cc6eb433161a79e4292b290b41a9e43d4f3ebd31a16a47175a52c222565bff8a64b5dcf4a3238a9fc6b7c56bf5e6b5f033cb0faaa90b423a0a2f86b1a31d4c2357ce2485d557106b932f42f25463552e5812e7225fc6be2756327d70bd0b6558d7b99e1c8fd025cf7abe9f894886a3023932e9ec2b4f76a7131c2a3a6b3739c25a2e449e2b4b130181078bef7f4ff42ad44ae624b51d8c2b1127c8430090671e01bace1916234101b024391d3730fa70e02b5987f1883e5d9c50c11f2d1ba2958a0a2e75ffa2a24c5b5f698f813cc2148bda70dbbe36617bd4ef5d9411391f5089faf69a025078d0aa808ac0ec394d7b216bf84b8f55e5fc288d44e37f3f068a1c23e10d1cb507f29f6a7fbe4a493392d6fca46b9c7a73eb718c672fde5abff2c68dc50c32884a08c5187154127f7b185902a5d15d1a0818e2966800bc43c46001a7dd9342112b5f1e2818a993a11668bda6e580b9b0ea4f1d622d633685571be1dd46207c9dcaa1823050f886ad659dac312847c1a3ad6387d7ba0af70afbebf21afb79800603db0464c25d3f14a2ad303b04842a403a56718cb76571ac36db281d4428ddc69f091dea6b675b42288fb603cc328b3176dac3d179fcf9436b8e633e841cb5d561b1c6d5249d869ebb2143a0551ee9a9188e8e0188fd8bfd962f62fa321077c295eda8ad9da04a34be235926274a28c59971b8c0446cabb552725ccc4a4a24d7eaff6dc9ddb1829be325aa06ffb8b16ea5d743a682027d72193e6268f9bace59fcafb3b303521dce31946102aa567386a0226fbfcbb0c75a2dcb06f3e8b4155ad38518abdc17d0579d38f6ea2e62c54d633aec9123e2473843e3d772d9fc9a3295147a476d6f0d1ac3a7599f0fe88ac4b425f34452a6538537ca528826cb6b4b43741b4c43b0f0adfb2fb602c5a484c2410e0a8b15657a8c37f97b55c0d9db3aaccd85b47f0cc9c7db8fed1040a3ef9ceef53c9a5b2973c09b0049541f5c03b000f199625ac1829d46a4c14d2aaf6c2b7d74cdf1108fd4bf611550883e8069fcab9a951af0084d7f276a7a481ee82d04eda61471f09e30b153c0de283f3d6e69c74a95f2dd7b9ca525329eb5533bd26334874f2ee90bcd24306d30d97cff5a54ba0036ac35043f3f87a518d344b7f12fd4d19e1047148b3d1fbb8f589daca7ec574aa2f980b7ea14d64e37fe3e770afb57fb125c8f5b57d7e2ba5cd7f74b17cc3f03a56c506d2b7acb1ae07cde76760d1d06a0e2774bc9cc0c8a341fab4270d4cc793d65996525cf9e91ccf85a83e67463250a834cfff3b50dfcd6939507b6b0225f362334a80791f4f5a061d5798ac589ca30b318b59221e2bc6c3430bc40ba3d70268c92e1d6d85e4731729ce1ffb11487c8536c52cc7d8838bebcc7aab6700682d88f4e4fa4766c9251550c68c1a3521d264d8062b5835b5087bf71fcafcd0e0a9080d84be059410ac3ab5acb6fe4448a1b0feed7bf0733897022d209113414fb5c74cb70aa8846740d85f865a972e24802bfaac101d56fe99f4be4bc79861c7d7e3bb091494a6079e2b6a2c572415d0f0ae7652b6d3c87321a8148634ff5fac4c5ef0e11f73afd8dc05b8fa9babda482a9286fcde045b92e82d936accf73bcd1baa334941afb606e8ddf761fc811f73c39091560bf529ba485b4ad70ddb9f97bd0e79a1d5791ee03e705f55b5419eb0ff15a067ce14a75cc68795e6fac1fd904119d2225cf55c83b5c7c1cbb80f5e031b57833e6670ea2b1d0573e072c42252fd40b045d00c7ac3f3b83614b6df77e110eeef5c9dbdb70e8e7122ee8a36d71d8d1a559492990124860c76361989dc34aa5eca94b0c7c598b5ee3075e7b70d5dded76d1717405acf4d69bd23e348fa8e2ec6c03a02f0b9e96fd4c056162540c7863f2c8f7402940e932bd3411c1662d30ee6ed9e1439d0b3fa121f4102f3a8bf302e86302d0936e25e86ebd1bc6837c4af2affbdb3528a82d673d5aeafd74bddb2fdf2cae0d67ead201c79028dba3455be101b8c0d139b7efc62a8b1d0c1f5c9935b9c1ff7596a1d3a3c32bb76c34b50cd75f42f1f43a4b4bdbdf510d28931d907b41c832f7ac65554846efd47dc92679e688e9ecf1dbe0fc5b07be8d8f4d6e1e964fdd58b606a06ea92bdb247b8f6730b2200bf7120dc383d2d18b17fc8f57b5344297fc5ad0d11049bc8cb8ad2d37a18be95beb6a0c4d7e7c9184a31bd60ee9d737cd80246bc48bfdfbc4070f8ff89d3159c99deefd3e6ab19e4688ae3b1281723abca7179b9eefeb09b5c605b57133c5e3557d7a9b79c8a8a4bae3decf71beb0c7baba3b84a7cfeafced63f473c4a603f1bf2209041dde47ba77cf4fda7fd8bebe1fa5647b9cb6b25fa2035de0bdbf9adaa02e847c51891ee5830aaef720c3969293010a32b399a668f0fe5f6a2f67819be42e3bfcc8bb54eb277bac67f97bfce5703a2cf2c70ca66a880bcacc16c6b9eb0fa877b1dae82e7ff2be48399be01d1a1c03e852496edcd127879f8689a727acb09dab51ab2522569bb9dd750b38174d3e62890010ab88c82cdf31e79e480f3bbf7947d09c3a89a72c38d88731493fad0f2a413248a9fb994c0499fb07c3610a1d358fc61c95e33b03f14935bfcca935b6c9649b3c79ee12e9b37f2d4d207067049783878485021af25834768d42d91f2c7e0e8de4da900b055380a21a16aa5a13c736950f06b3f25a68d4ca51b11dd4623328b5f9f47a1af9ab5ef8bc6b45c25e4fb102129a02b8c004586a5920b263d1e157c466834752f74471dc280e327073d69e167154bb9a792038ea5e324fe49db5c2aa22b1291207edff28b1eb2af7c1a662d41f2e490155868088a746a5e5991c0f6283dcafbfa7ce618d957ce2d5dbee3d9f42109967ee34a6fb20be60e8ab26344c254ee94e0e08ee9281e2985a3f329dd54bec8adad654734e771a89d86db725ad25e581797ca902ff0117d1299a0006212fa3b1b927dc5207199d133f63d43b2f35c5c0be5f7e80b16572edb42dc9d6281e0f4a7929e543d7e2826307645f675598ce428ed3a0856c18182c340a978b5b0c616c14af212a8e8bf24e78da3732fa200d0178f96af8cc68830be67251316620aa92c0a2a8e771792ea6016a75eb4ff2fea3b77fc5bac99e1f0307e04c7cd18c0f270236d614e29ad8d5ed2aae5b46e55b50a8fe6e93fc9161230e07a6badf896a6ca0e157c77e016fa94a9c2522ff8ad28dec05b3673d47422046131d9860eba2c233c956c582512b0e75d6e620f138e87889654d9ed662a25a4516e722fc08793a10c9ba6fe70d7dc809956b2564e1f25713e5a021891431059880e468009553647437c5e39de01e32ee2c8253508f0b74d940c663dcae4149c4dd0f26e654571c5c773df48cea7dc02b17b6c9e7d3a7d777595acde21ff2bd2380ab2f049022766fc6ab27b7b557c63b5f4bc9d30407fbb819481d3152edfc6cad69fd4f8f04490569439fb89911b8c2afd7ec6de00ebc7b7322d53491e996aa99edfd6fd4f4199610b33c470b773e3086efd961ac1c1b2d55b7782ef94433e8b461436b4c984eab10d238e5aeae368542305cb3d30384654c404f84ea473208994e2835998d8a4ef15d1dc05ef9a5f1276be1ffe433f4b9773a32ed91849c824b75fc9145f382f1a99e38fd08b186f7fbd99245ae318c41fdc9e320d2387589aff74045932bf4ac9a6528c9cfba169fb59046ecdd45120c429953791ac2f40ddc6a2295602873630de7c1849b0f29f5ea115c4b353da62a6465d0756e82d8ff5eb48b15d35e81aecbcca845fca9ca2adaa65954e9119bf219c9ab29cf8780603c656df976b6c122956b5037cf662c6040e898321550c2a983eaf5052a86c6e58b86ff0b7d2b88e661b6f9b7b6f5f1fa090143953d1782ec369620546038ac49c7114ae5c21831cb4e7f46032147bd0d20e75c64784e104716099fa068ba95a8d673967c5e65c3260e33b1c8b290499c7e849d1a333d440a14ab27bce06101863ea43d6e0e0c352a908b1dcdc66771c731a6bce2ed969c815f3d9bc95e2cbf8e9eb5b81baf1ad26d99c447e5907c8312afd1f7cb172018fa6001a3700bf0012abc4ef1328e9f78dc63081ca4a52937cbf4fd5b5a7ed9b2d9b0acbe2326f55540dd0d0e64c56f4d70e5d34cddf3378b6d6b83196d082b72674eed56bd7602424b0f42a6eea84e85d3b7fd668b480276ade38fb6fd05eb8f01e9f847ff78192a0a6f66cfed8a31ac3ae67876df83eab2de9c556ed3b255a2e1402e9819a9741871a63905d3b8b38749985d4dd5ac26730b9491e44fedbdd14a136bb198f11eb36a771e37ec69c1537a8ab6c139b2217d447fc3e1778b1ae13749e36843b2493be2897bf4720f4cd355bd51f332341e9287751805e98b29398be108ba1612f95026287511097a3b42ac539823497895b101befa698b1f33801faee848312cc2841c60d7079158a26f09587ec2016ab1e128969e4dd6658259f01795f6ad2841ab8340f08fa14e01ca5c77e9a9c7d5adec50196f52bc9651b14b39c8f41f1668c13b65acc8ac98fdd70ccc77b626788ca1f7dc552f8334bb5ac86d0a76804d3c10521805251626794e9de9ab7de20fa10f141bccb1042a315b11a0b6eee5615bea1092276b423234036eade97395c2749ef217ff8defe553a6a01343871c5d2d87b071028a5b05aedf66b664a280ff1d7ef35310514c3c2b6ad76480bcebbf790708cb7fcf5ea2140042ee439b1f39a34345e4cd113189923909ebdea6536be0675998c0fdc702bdf4880a270cdc5ecf07700e85da8a578b8359b6f3398b040d3d88755577c7f1e35a8e535fb1fbc2765e02a1fdf23acf9dac84b57f3aa3636b3820ccd30d5ce29bade97c3463bd159a08dd2afdd27c38ea822a9912b308f3943b8a06d28b01d669be4a1081ad859c997a700d5c77e0cdb0f7380e6fe7c21679b75e45cd88bd23ac97bed089af1ba9850704507460a3efd953ff49a8cea3d864e2ed222930767478a240e5ed94e11cedc95593ac95736da49b525b03a7e99805bfad35beee353d6b275e9d79cecf1fd3db6b3f27ff904694b0c95ffe631b9a2927ee5923fddb7de966514fda5f3fd67157a35e395282b344f54171865c45935115ea7eeaa1c9e510dcd16739b4527adfebfcea7d0feb84d30708f3bbc0fdfa113a7f8e4571434cab050e0f772cebad8152bd4c56cc03e1d21aa371bba36444fe59e87e956f0187a2f26ad5a8b26ec1f5f2ae38d1bd98851c268ff2374b75b765c031523c064db87b97d6c3bd5c2b9da596fa856f5dab3556886c3358b3da4721b6da4814edcf", 0x1000}, {&(0x7f0000000180)="4fb6d1715174f8a14dfc93a4ee407c9cae53c637d85d550948f4df16aea4ba35cbe8f36fa351c4b5fb5d74e6c7c725c4dc09d90daa4add282e025c582e7045b068c9122a1f763afc9b03644222f09833946914fa1c0c2f26f470653d260a95319974dce173bda93e43ba0b27280dd9fa06073ebfc19bc082eacbc97b84b6b7b2a32ae51c1fb932432dea0cd9861d8bb1ef14ef561180028f5dfe75d91599643abe6c963cc01b79058d8fdf91ae6fb683698ecb63ec65b48a1d3c", 0xba}], 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000050001000700000009000200737b7a300000000005000500020000000c0007800500150001000000050004000000000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) kernel console output (not intermixed with test programs): bridge0: port 3(syz_tun) entered disabled state [ 80.763324][ T6435] syz_tun: entered allmulticast mode [ 80.769634][ T6435] syz_tun: entered promiscuous mode [ 80.799249][ T6435] bridge0: port 3(syz_tun) entered blocking state [ 80.805989][ T6435] bridge0: port 3(syz_tun) entered forwarding state [ 81.020625][ T6452] __nla_validate_parse: 8 callbacks suppressed [ 81.020670][ T6452] netlink: 68 bytes leftover after parsing attributes in process `syz.2.176'. [ 81.427261][ T6473] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 81.435547][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.182'. [ 81.452875][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 81.472069][ T6473] netlink: 'syz.3.183': attribute type 2 has an invalid length. [ 81.481437][ T6473] netlink: 211388 bytes leftover after parsing attributes in process `syz.3.183'. [ 81.596796][ T9] cfg80211: failed to load regulatory.db [ 81.671900][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.186'. [ 81.860567][ T6493] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.189'. [ 81.886921][ T6493] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.914195][ T6493] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.189'. [ 81.932360][ T6501] bridge0: port 3(gretap0) entered blocking state [ 81.951576][ T6493] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.955000][ T6501] bridge0: port 3(gretap0) entered disabled state [ 82.003616][ T6496] xt_CT: No such helper "syz1" [ 82.011348][ T6501] gretap0: entered allmulticast mode [ 82.030434][ T6501] gretap0: entered promiscuous mode [ 82.039995][ T6501] bridge0: port 3(gretap0) entered blocking state [ 82.046737][ T6501] bridge0: port 3(gretap0) entered forwarding state [ 82.071218][ T6504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.191'. [ 82.080961][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 82.101250][ T6510] netlink: 236 bytes leftover after parsing attributes in process `syz.1.193'. [ 82.110998][ T6510] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 82.113673][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.158870][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.190616][ T6510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.379859][ T6518] netlink: 'syz.3.196': attribute type 3 has an invalid length. [ 82.529434][ T6531] x_tables: duplicate underflow at hook 1 [ 82.791116][ T6545] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 82.873930][ T6551] unknown channel width for channel at 909000KHz? [ 82.880694][ T6551] unknown channel width for channel at 909000KHz? [ 83.060543][ T9] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 83.093775][ T9] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 83.350870][ T6581] FAULT_INJECTION: forcing a failure. [ 83.350870][ T6581] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.364328][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.1.216 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 83.374962][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 83.385065][ T6581] Call Trace: [ 83.388366][ T6581] [ 83.391323][ T6581] dump_stack_lvl+0x241/0x360 [ 83.396049][ T6581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.401271][ T6581] ? __pfx__printk+0x10/0x10 [ 83.405877][ T6581] should_fail_ex+0x3b0/0x4e0 [ 83.410556][ T6581] _copy_from_user+0x2f/0xc0 [ 83.415161][ T6581] move_addr_to_kernel+0x82/0x150 [ 83.420211][ T6581] __sys_connect+0xc1/0x300 [ 83.424720][ T6581] ? __pfx___sys_connect+0x10/0x10 [ 83.429847][ T6581] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.436204][ T6581] ? do_syscall_64+0x100/0x230 [ 83.440974][ T6581] __x64_sys_connect+0x7a/0x90 [ 83.445746][ T6581] do_syscall_64+0xf3/0x230 [ 83.450254][ T6581] ? clear_bhb_loop+0x35/0x90 [ 83.454945][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.460857][ T6581] RIP: 0033:0x7f81eef7e819 [ 83.465298][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.484922][ T6581] RSP: 002b:00007f81efd5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 83.493351][ T6581] RAX: ffffffffffffffda RBX: 00007f81ef136080 RCX: 00007f81eef7e819 [ 83.501331][ T6581] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 83.509306][ T6581] RBP: 00007f81efd5c090 R08: 0000000000000000 R09: 0000000000000000 [ 83.517274][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.525246][ T6581] R13: 0000000000000000 R14: 00007f81ef136080 R15: 00007ffd3e270408 [ 83.533229][ T6581] [ 83.734060][ T6593] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.843776][ T6599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.914976][ T6601] geneve2: entered promiscuous mode [ 83.962356][ T6602] openvswitch: netlink: nsh attr 188 is out of range max 3 [ 84.012918][ T6608] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002 [ 84.036316][ T6604] netlink: 'syz.1.226': attribute type 1 has an invalid length. [ 84.173084][ T6614] netlink: 'syz.3.229': attribute type 3 has an invalid length. [ 84.210367][ T6586] syz.0.219 (6586) used greatest stack depth: 18288 bytes left [ 84.289273][ T6621] netlink: 'syz.4.230': attribute type 11 has an invalid length. [ 84.303304][ T6621] openvswitch: netlink: Message has 8 unknown bytes. [ 84.542527][ T6633] FAULT_INJECTION: forcing a failure. [ 84.542527][ T6633] name failslab, interval 1, probability 0, space 0, times 1 [ 84.588675][ T6644] netlink: 'syz.2.238': attribute type 12 has an invalid length. [ 84.590826][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.1.233 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 84.607014][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 84.617091][ T6633] Call Trace: [ 84.620384][ T6633] [ 84.623329][ T6633] dump_stack_lvl+0x241/0x360 [ 84.628047][ T6633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.633280][ T6633] ? __pfx__printk+0x10/0x10 [ 84.637901][ T6633] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 84.643908][ T6633] ? __pfx___might_resched+0x10/0x10 [ 84.649227][ T6633] should_fail_ex+0x3b0/0x4e0 [ 84.653934][ T6633] should_failslab+0xac/0x100 [ 84.658633][ T6633] ? __alloc_skb+0x1c3/0x440 [ 84.663254][ T6633] kmem_cache_alloc_node_noprof+0x71/0x320 [ 84.666031][ T6634] macvlan2: entered promiscuous mode [ 84.669081][ T6633] __alloc_skb+0x1c3/0x440 [ 84.678791][ T6633] ? tcp_call_bpf+0x228/0x4f0 [ 84.680095][ T6634] macvlan2: entered allmulticast mode [ 84.683472][ T6633] ? __pfx___alloc_skb+0x10/0x10 [ 84.683505][ T6633] ? __asan_memset+0x23/0x50 [ 84.683527][ T6633] tcp_stream_alloc_skb+0x3d/0x310 [ 84.683556][ T6633] tcp_connect+0x11ee/0x4940 [ 84.683591][ T6633] ? __asan_memset+0x23/0x50 [ 84.683620][ T6633] ? __pfx_tcp_connect+0x10/0x10 [ 84.683642][ T6633] ? __asan_memset+0x23/0x50 [ 84.683659][ T6633] ? inet6_hash_connect+0x4b/0xd0 [ 84.683690][ T6633] tcp_v6_connect+0x14b1/0x1e40 [ 84.683731][ T6633] ? __pfx_tcp_v6_connect+0x10/0x10 [ 84.683769][ T6633] ? __local_bh_enable_ip+0x168/0x200 [ 84.683796][ T6633] ? mptcp_connect+0x656/0xb20 [ 84.683818][ T6633] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 84.683843][ T6633] ? mptcp_connect+0x656/0xb20 [ 84.683865][ T6633] ? do_raw_spin_unlock+0x13c/0x8b0 [ 84.683899][ T6633] mptcp_connect+0x701/0xb20 [ 84.683926][ T6633] __inet_stream_connect+0x262/0xf30 [ 84.683951][ T6633] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.683986][ T6633] ? __local_bh_enable_ip+0x168/0x200 [ 84.684011][ T6633] ? lockdep_hardirqs_on+0x99/0x150 [ 84.684041][ T6633] ? __pfx___inet_stream_connect+0x10/0x10 [ 84.684062][ T6633] ? __local_bh_enable_ip+0x168/0x200 [ 84.801225][ T6633] ? inet_stream_connect+0x50/0xa0 [ 84.806346][ T6633] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 84.812074][ T6633] inet_stream_connect+0x65/0xa0 [ 84.817016][ T6633] ? __pfx_inet_stream_connect+0x10/0x10 [ 84.822647][ T6633] __sys_connect+0x2d1/0x300 [ 84.827241][ T6633] ? __pfx___sys_connect+0x10/0x10 [ 84.832357][ T6633] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.838687][ T6633] ? do_syscall_64+0x100/0x230 [ 84.843454][ T6633] __x64_sys_connect+0x7a/0x90 [ 84.848224][ T6633] do_syscall_64+0xf3/0x230 [ 84.852750][ T6633] ? clear_bhb_loop+0x35/0x90 [ 84.857441][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.863336][ T6633] RIP: 0033:0x7f81eef7e819 [ 84.867746][ T6633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.887349][ T6633] RSP: 002b:00007f81efd5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 84.895763][ T6633] RAX: ffffffffffffffda RBX: 00007f81ef136080 RCX: 00007f81eef7e819 [ 84.903734][ T6633] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 84.911705][ T6633] RBP: 00007f81efd5c090 R08: 0000000000000000 R09: 0000000000000000 [ 84.919678][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.927642][ T6633] R13: 0000000000000000 R14: 00007f81ef136080 R15: 00007ffd3e270408 [ 84.935622][ T6633] [ 84.978478][ T6634] atomic_op ffff88807f9eb998 conn xmit_atomic 0000000000000000 [ 85.079924][ T6648] netlink: 'syz.0.239': attribute type 2 has an invalid length. [ 85.206856][ T6652] sctp: [Deprecated]: syz.2.242 (pid 6652) Use of int in maxseg socket option. [ 85.206856][ T6652] Use struct sctp_assoc_value instead [ 85.492461][ T6677] veth0_to_hsr: invalid flags given to default FDB implementation [ 85.571356][ T6663] delete_channel: no stack [ 85.732274][ T6689] vlan0: entered allmulticast mode [ 85.751917][ T6689] veth0_vlan: entered allmulticast mode [ 86.091948][ T6707] __nla_validate_parse: 21 callbacks suppressed [ 86.091969][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 86.424728][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.262'. [ 86.515402][ T6715] net_ratelimit: 3 callbacks suppressed [ 86.515420][ T6715] openvswitch: netlink: Message has 225 unknown bytes. [ 86.533408][ T6715] openvswitch: netlink: Actions may not be safe on all matching packets [ 86.613398][ T6728] netem: change failed [ 86.775445][ T6742] FAULT_INJECTION: forcing a failure. [ 86.775445][ T6742] name failslab, interval 1, probability 0, space 0, times 0 [ 86.840020][ T6738] can: request_module (can-proto-0) failed. [ 86.858392][ T6742] CPU: 0 UID: 0 PID: 6742 Comm: syz.3.270 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 86.869028][ T6742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 86.879107][ T6742] Call Trace: [ 86.882432][ T6742] [ 86.885393][ T6742] dump_stack_lvl+0x241/0x360 [ 86.890102][ T6742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.895344][ T6742] ? __pfx__printk+0x10/0x10 [ 86.899972][ T6742] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 86.905981][ T6742] ? __pfx___might_resched+0x10/0x10 [ 86.911300][ T6742] should_fail_ex+0x3b0/0x4e0 [ 86.916007][ T6742] should_failslab+0xac/0x100 [ 86.920719][ T6742] ? __alloc_skb+0x1c3/0x440 [ 86.925343][ T6742] kmem_cache_alloc_node_noprof+0x71/0x320 [ 86.931180][ T6742] __alloc_skb+0x1c3/0x440 [ 86.935609][ T6742] ? tcp_call_bpf+0x228/0x4f0 [ 86.940288][ T6742] ? __pfx___alloc_skb+0x10/0x10 [ 86.945236][ T6742] ? __asan_memset+0x23/0x50 [ 86.949830][ T6742] tcp_stream_alloc_skb+0x3d/0x310 [ 86.954949][ T6742] tcp_connect+0x11ee/0x4940 [ 86.959557][ T6742] ? __asan_memset+0x23/0x50 [ 86.964178][ T6742] ? __pfx_tcp_connect+0x10/0x10 [ 86.969127][ T6742] ? inet6_hash_connect+0x7d/0xd0 [ 86.974169][ T6742] tcp_v6_connect+0x14b1/0x1e40 [ 86.979038][ T6742] ? __pfx_tcp_v6_connect+0x10/0x10 [ 86.984254][ T6742] ? __local_bh_enable_ip+0x168/0x200 [ 86.989641][ T6742] ? mptcp_connect+0x656/0xb20 [ 86.994407][ T6742] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.000137][ T6742] ? mptcp_connect+0x656/0xb20 [ 87.004906][ T6742] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.010116][ T6742] mptcp_connect+0x701/0xb20 [ 87.014715][ T6742] __inet_stream_connect+0x262/0xf30 [ 87.020009][ T6742] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.026346][ T6742] ? __local_bh_enable_ip+0x168/0x200 [ 87.031718][ T6742] ? lockdep_hardirqs_on+0x99/0x150 [ 87.036915][ T6742] ? __pfx___inet_stream_connect+0x10/0x10 [ 87.042724][ T6742] ? __local_bh_enable_ip+0x168/0x200 [ 87.048107][ T6742] ? inet_stream_connect+0x50/0xa0 [ 87.053217][ T6742] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 87.058941][ T6742] inet_stream_connect+0x65/0xa0 [ 87.063877][ T6742] ? __pfx_inet_stream_connect+0x10/0x10 [ 87.069505][ T6742] __sys_connect+0x2d1/0x300 [ 87.074100][ T6742] ? __pfx___sys_connect+0x10/0x10 [ 87.079251][ T6742] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.085598][ T6742] ? do_syscall_64+0x100/0x230 [ 87.090364][ T6742] __x64_sys_connect+0x7a/0x90 [ 87.095135][ T6742] do_syscall_64+0xf3/0x230 [ 87.099654][ T6742] ? clear_bhb_loop+0x35/0x90 [ 87.104337][ T6742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.110234][ T6742] RIP: 0033:0x7f3f70f7e819 [ 87.114653][ T6742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.134265][ T6742] RSP: 002b:00007f3f6edf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 87.142688][ T6742] RAX: ffffffffffffffda RBX: 00007f3f71136080 RCX: 00007f3f70f7e819 [ 87.150663][ T6742] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 87.158638][ T6742] RBP: 00007f3f6edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.166624][ T6742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.174595][ T6742] R13: 0000000000000000 R14: 00007f3f71136080 R15: 00007ffe06deda78 [ 87.182580][ T6742] [ 87.224077][ T6748] netlink: 'syz.4.267': attribute type 11 has an invalid length. [ 87.232051][ T6748] netlink: 596 bytes leftover after parsing attributes in process `syz.4.267'. [ 87.451511][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 87.468121][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 88.097247][ T6780] bridge1: entered allmulticast mode [ 88.350823][ T6803] netlink: 104 bytes leftover after parsing attributes in process `syz.4.288'. [ 88.592334][ T6818] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.616505][ T6818] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.646340][ T6818] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.657083][ T6818] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.696920][ T6818] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.741435][ T6818] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.751744][ T6818] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.762315][ T6818] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.784879][ T6818] geneve2: entered promiscuous mode [ 88.790638][ T6818] geneve2: entered allmulticast mode [ 88.791104][ T6834] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 88.818800][ T6824] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 88.854365][ T6824] batman_adv: batadv0: Adding interface: team0 [ 88.861914][ T6824] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.873507][ T6836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.300'. [ 88.907076][ T6824] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 88.932632][ T6833] netlink: 'syz.2.299': attribute type 2 has an invalid length. [ 88.958531][ T6834] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 88.984695][ T6834] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 88.992606][ T6834] gretap1: entered promiscuous mode [ 88.998444][ T6834] gretap1: entered allmulticast mode [ 89.226313][ T6854] netlink: 256 bytes leftover after parsing attributes in process `syz.1.303'. [ 89.243583][ T6854] netlink: 'syz.1.303': attribute type 9 has an invalid length. [ 89.262620][ T6857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.306'. [ 89.521951][ T6867] netlink: 'syz.0.308': attribute type 21 has an invalid length. [ 89.560980][ T6867] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.563550][ T6869] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 89.585695][ T6867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.593177][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 89.600455][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 89.607701][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 89.768043][ T6882] netlink: 'syz.4.312': attribute type 10 has an invalid length. [ 89.829678][ T6885] netlink: 'syz.3.314': attribute type 8 has an invalid length. [ 89.925938][ T6882] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 90.416428][ T6924] netlink: zone id is out of range [ 90.440150][ T6924] netlink: set zone limit has 4 unknown bytes [ 91.112517][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 91.218360][ T6967] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 91.226568][ T6967] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.337'. [ 91.240977][ T6967] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 91.387183][ T6981] netlink: 'syz.2.341': attribute type 3 has an invalid length. [ 91.421620][ T6981] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.341'. [ 132.774626][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781039][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.493461][ T8] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 160.924561][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.345'. [ 161.306913][ T7034] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.419640][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 161.450660][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 161.734311][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 161.751592][ T7055] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 161.784259][ T7054] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 161.873772][ T8] IPVS: starting estimator thread 0... [ 162.013444][ T7065] IPVS: using max 19 ests per chain, 45600 per kthread [ 162.279316][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 162.479989][ T7092] veth0_to_hsr: entered promiscuous mode [ 162.714791][ T7092] veth0_to_hsr: left promiscuous mode [ 162.719292][ T7109] netlink: 5 bytes leftover after parsing attributes in process `syz.0.380'. [ 162.735123][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'. [ 162.749983][ T7107] netlink: 10 bytes leftover after parsing attributes in process `syz.1.378'. [ 162.975865][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 162.990871][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.384'. [ 163.001846][ T7121] sit0: Master is either lo or non-ether device [ 163.209858][ T7133] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 163.273588][ T7133] team0: Port device  added [ 163.518099][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.096450][ T7168] sctp: [Deprecated]: syz.4.400 (pid 7168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.096450][ T7168] Use struct sctp_sack_info instead [ 164.158456][ T7168] netlink: 'syz.4.400': attribute type 39 has an invalid length. [ 164.800387][ T7191] vlan2: entered allmulticast mode [ 164.806935][ T7191] gretap0: entered allmulticast mode [ 165.170242][ T7208] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 165.470017][ T7222] netlink: 'syz.1.419': attribute type 3 has an invalid length. [ 165.500368][ T7224] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 165.848241][ T7244] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 165.970417][ T7250] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 166.025402][ T7248] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 166.039381][ T7252] geneve2: entered promiscuous mode [ 166.046207][ T7252] geneve2: entered allmulticast mode [ 166.083594][ T7252] __nla_validate_parse: 8 callbacks suppressed [ 166.083612][ T7252] netlink: 256 bytes leftover after parsing attributes in process `syz.0.428'. [ 166.360962][ T7267] Bluetooth: MGMT ver 1.23 [ 166.374757][ T7261] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 166.457675][ T7261] syz_tun: entered promiscuous mode [ 166.527204][ T7261] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 186.057745][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 186.060028][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 186.064661][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 194.214715][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221120][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.773513][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 222.613318][ T5889] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 232.799071][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 232.865309][ T7339] workqueue: name exceeds WQ_NAME_LEN. Truncating to: < )2U7䋡;&!i [ 233.552294][ T7375] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 233.693817][ T7388] IPv6: Can't replace route, no match found [ 234.285665][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 234.373907][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 234.470179][ T7411] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 235.055233][ T7411] team0: Port device netdevsim0 added [ 235.173175][ T7418] ebt_among: src integrity fail: 300 [ 235.193739][ T7418] batadv_slave_0: entered promiscuous mode [ 235.199979][ T7418] batadv_slave_0: left promiscuous mode [ 235.404149][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.624930][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 235.635321][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 235.646000][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 235.655168][ T7449] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.473'. [ 235.914769][ T7465] veth1_to_hsr: entered promiscuous mode [ 235.921138][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 235.993359][ T7465] veth1_to_hsr (unregistering): left promiscuous mode [ 236.023366][ T7465] hsr_slave_1 (unregistering): left promiscuous mode [ 236.055486][ T7463] hsr0: entered promiscuous mode [ 236.063916][ T7463] macsec1: entered allmulticast mode [ 236.070589][ T7463] hsr0: entered allmulticast mode [ 236.091115][ T7463] hsr_slave_0: entered allmulticast mode [ 236.104856][ T7463] hsr_slave_1: entered allmulticast mode [ 236.126764][ T7463] hsr0: left allmulticast mode [ 236.132613][ T7427] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 236.146122][ T7463] hsr_slave_0: left allmulticast mode [ 236.168493][ T7463] hsr_slave_1: left allmulticast mode [ 236.873557][ T7513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.485'. [ 237.209744][ T7534] batadv_slave_1: entered promiscuous mode [ 237.239541][ T7534] netlink: 92 bytes leftover after parsing attributes in process `syz.3.491'. [ 237.355684][ T7534] batadv_slave_1: left promiscuous mode [ 237.434001][ T7534] netlink: 'syz.3.491': attribute type 4 has an invalid length. [ 237.516252][ T7544] batadv_slave_1: entered promiscuous mode [ 237.604005][ T7534] netlink: 'syz.3.491': attribute type 4 has an invalid length. [ 237.800693][ T7532] batadv_slave_1: left promiscuous mode [ 237.875559][ T7572] xt_ecn: cannot match TCP bits for non-tcp packets [ 237.954422][ T7577] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 238.006102][ T7577] openvswitch: netlink: Actions may not be safe on all matching packets [ 238.062146][ T7581] syzkaller1: entered promiscuous mode [ 238.109269][ T7585] __nla_validate_parse: 6 callbacks suppressed [ 238.109286][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 238.307299][ T7587] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 239.029320][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.514'. [ 239.318086][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.522'. [ 239.364213][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.403262][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.415198][ T7659] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.524'. [ 239.433992][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.445152][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.456249][ T7662] netlink: 'syz.0.525': attribute type 3 has an invalid length. [ 239.459291][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.479342][ T7662] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.525'. [ 239.480790][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.507924][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.518500][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.531703][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.524'. [ 239.817139][ T7678] hsr0: entered allmulticast mode [ 239.826868][ T7678] hsr_slave_0: entered allmulticast mode [ 239.848588][ T7678] hsr_slave_1: entered allmulticast mode [ 239.869506][ T7678] hsr_slave_0: left promiscuous mode [ 239.880664][ T7678] hsr_slave_1: left promiscuous mode [ 239.913418][ T7678] hsr0 (unregistering): left allmulticast mode [ 239.932468][ T7685] sit1: entered promiscuous mode [ 239.950980][ T7685] sit1: entered allmulticast mode [ 240.048466][ T7691] x_tables: unsorted entry at hook 2 [ 240.116579][ T7693] veth0_to_team: entered promiscuous mode [ 240.158704][ T7693] veth0_to_team: entered allmulticast mode [ 240.384205][ T7704] sit0: entered promiscuous mode [ 240.406485][ T7704] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 240.415030][ T7704] netlink: 1 bytes leftover after parsing attributes in process `syz.4.537'. [ 240.646912][ T7729] netlink: 232 bytes leftover after parsing attributes in process `syz.4.541'. [ 241.253037][ T7761] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.551'. [ 241.299660][ T7761] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 241.319286][ T7765] netlink: 156 bytes leftover after parsing attributes in process `syz.0.552'. [ 242.057046][ T7797] netlink: 'syz.1.565': attribute type 1 has an invalid length. [ 242.091534][ T7797] netlink: 'syz.1.565': attribute type 4 has an invalid length. [ 242.109399][ T7796] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 242.270815][ T7801] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 242.324589][ T7796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.335319][ T11] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.454820][ T3600] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.667794][ T7835] netlink: 'syz.0.576': attribute type 18 has an invalid length. [ 242.724806][ T7835] bridge0: port 3(hsr_slave_1) entered blocking state [ 242.731728][ T7835] bridge0: port 3(hsr_slave_1) entered disabled state [ 242.739471][ T7835] hsr_slave_1: entered allmulticast mode [ 242.764415][ T7835] hsr_slave_1: left allmulticast mode [ 242.815279][ T7832] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.087199][ T7862] Illegal XDP return value 4294967274 on prog (id 133) dev N/A, expect packet loss! [ 243.468886][ T7868] netlink: 'syz.1.586': attribute type 2 has an invalid length. [ 243.511708][ T7871] __nla_validate_parse: 90 callbacks suppressed [ 243.511726][ T7871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.587'. [ 243.580300][ T7875] ɶƣ0GC: entered promiscuous mode [ 243.963776][ T7897] netlink: 124 bytes leftover after parsing attributes in process `syz.0.594'. [ 244.776030][ T7895] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 245.790397][ T7935] netlink: 224 bytes leftover after parsing attributes in process `syz.0.604'. [ 246.000008][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 246.071080][ T7946] netlink: 144 bytes leftover after parsing attributes in process `syz.2.606'. [ 246.824075][ T7960] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 246.843305][ T7967] netlink: 'syz.2.612': attribute type 9 has an invalid length. [ 246.851407][ T7967] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.612'. [ 246.960970][ T7976] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 247.032255][ T7981] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.616'. [ 247.048326][ T7976] team0: Failed to send options change via netlink (err -105) [ 247.056400][ T7981] openvswitch: netlink: Tunnel attr 9736 out of range max 16 [ 247.064583][ T7976] team0: Port device netdevsim0 added [ 247.096784][ T11] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 247.200119][ T7986] netlink: 'syz.4.619': attribute type 4 has an invalid length. [ 247.259078][ T7986] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 247.279342][ T7989] lo: entered allmulticast mode [ 247.309348][ T7988] lo: left allmulticast mode [ 247.666718][ T8012] netlink: 696 bytes leftover after parsing attributes in process `syz.2.629'. [ 247.826901][ T8015] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.835972][ T8015] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.844813][ T8015] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.853578][ T8015] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.899602][ T8022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.631'. [ 247.925312][ T8023] netlink: 'syz.2.632': attribute type 9 has an invalid length. [ 247.945233][ T8023] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.632'. [ 248.246170][ T8040] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 248.640112][ T8055] batman_adv: batadv0: Adding interface: dummy0 [ 248.663317][ T8055] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.758087][ T8055] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 248.813720][ T8055] batman_adv: batadv0: Interface activated: dummy0 [ 249.348533][ T8102] netlink: 'syz.0.658': attribute type 21 has an invalid length. [ 249.363853][ T8099] tipc: Enabling of bearer rejected, failed to enable media [ 249.738431][ T8119] __nla_validate_parse: 2 callbacks suppressed [ 249.738451][ T8119] netlink: 108 bytes leftover after parsing attributes in process `syz.4.666'. [ 250.003094][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 250.359200][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.679'. [ 250.384235][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.679'. [ 250.503493][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 250.546230][ T8159] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 250.619100][ T8170] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 250.645134][ T8169] netlink: 256 bytes leftover after parsing attributes in process `syz.1.685'. [ 250.645423][ T8170] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.683'. [ 250.841835][ T8180] netlink: 'syz.0.688': attribute type 10 has an invalid length. [ 250.926484][ T8186] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.690'. [ 250.948656][ T8186] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 250.950623][ T8180] team0: Port device netdevsim0 added [ 251.305578][ T8206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.374517][ T8214] netlink: 228 bytes leftover after parsing attributes in process `syz.4.696'. [ 251.407013][ T8215] IPv6: sit2: Disabled Multicast RS [ 251.416369][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 251.579542][ T8228] Bluetooth: MGMT ver 1.23 [ 252.294367][ T8263] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 252.325549][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.335379][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.716436][ T8296] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 252.759885][ T8296] netlink: 'syz.2.721': attribute type 4 has an invalid length. [ 252.797804][ T8296] NCSI netlink: No device for ifindex 458760 [ 252.824627][ T8296] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 253.797766][ T8348] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 253.828499][ T8348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.854440][ T8348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.861618][ T8348] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 253.873824][ T8348] bond3: (slave vti0): Error -95 calling set_mac_address [ 253.927965][ T8353] netlink: 'syz.4.740': attribute type 4 has an invalid length. [ 254.252218][ T8370] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 254.306161][ T8373] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.320081][ T8373] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.331196][ T8373] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.341758][ T8373] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 254.353598][ T8373] geneve2: entered promiscuous mode [ 254.359325][ T8373] geneve2: entered allmulticast mode [ 254.365838][ T8370] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 254.379142][ T8373] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.392821][ T8373] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.402033][ T8373] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.411693][ T8373] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 254.678396][ T8385] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 254.779207][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.788966][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.031582][ T8414] xt_l2tp: v2 sid > 0xffff: 262144 [ 255.049221][ T8414] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 255.078495][ T8414] netlink: 'syz.4.761': attribute type 3 has an invalid length. [ 255.117757][ T8414] __nla_validate_parse: 16 callbacks suppressed [ 255.117772][ T8414] netlink: 224 bytes leftover after parsing attributes in process `syz.4.761'. [ 255.196435][ T8421] netlink: 84 bytes leftover after parsing attributes in process `syz.1.762'. [ 255.248810][ T8424] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.462256][ T8441] FAULT_INJECTION: forcing a failure. [ 255.462256][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.497868][ T8440] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'. [ 255.517772][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 255.530756][ T8441] CPU: 0 UID: 0 PID: 8441 Comm: syz.1.770 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 255.541383][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 255.551455][ T8441] Call Trace: [ 255.554755][ T8441] [ 255.557707][ T8441] dump_stack_lvl+0x241/0x360 [ 255.562422][ T8441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.567644][ T8441] ? __pfx__printk+0x10/0x10 [ 255.572259][ T8441] ? __pfx_lock_release+0x10/0x10 [ 255.577324][ T8441] should_fail_ex+0x3b0/0x4e0 [ 255.582029][ T8441] _copy_from_iter+0x21f/0x1e70 [ 255.586906][ T8441] ? __virt_addr_valid+0x183/0x530 [ 255.592040][ T8441] ? __pfx_lock_release+0x10/0x10 [ 255.597099][ T8441] ? __alloc_skb+0x28f/0x440 [ 255.601714][ T8441] ? __pfx__copy_from_iter+0x10/0x10 [ 255.607028][ T8441] ? __virt_addr_valid+0x183/0x530 [ 255.612157][ T8441] ? __virt_addr_valid+0x183/0x530 [ 255.617289][ T8441] ? __virt_addr_valid+0x45f/0x530 [ 255.622412][ T8441] ? __check_object_size+0x48e/0x900 [ 255.627712][ T8441] netlink_sendmsg+0x73d/0xcb0 [ 255.632513][ T8441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.637835][ T8441] ? aa_sock_msg_perm+0x91/0x160 [ 255.642807][ T8441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.648122][ T8441] __sock_sendmsg+0x221/0x270 [ 255.652815][ T8441] ____sys_sendmsg+0x52a/0x7e0 [ 255.657591][ T8441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.662911][ T8441] __sys_sendmsg+0x292/0x380 [ 255.667521][ T8441] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.672695][ T8441] ? __pfx_vfs_write+0x10/0x10 [ 255.677507][ T8441] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.683871][ T8441] ? do_syscall_64+0x100/0x230 [ 255.688666][ T8441] ? do_syscall_64+0xb6/0x230 [ 255.693375][ T8441] do_syscall_64+0xf3/0x230 [ 255.697906][ T8441] ? clear_bhb_loop+0x35/0x90 [ 255.702613][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.708539][ T8441] RIP: 0033:0x7f81eef7e819 [ 255.713003][ T8441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.732630][ T8441] RSP: 002b:00007f81efd7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.738401][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'. [ 255.741058][ T8441] RAX: ffffffffffffffda RBX: 00007f81ef135fa0 RCX: 00007f81eef7e819 [ 255.741078][ T8441] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 255.741093][ T8441] RBP: 00007f81efd7d090 R08: 0000000000000000 R09: 0000000000000000 [ 255.741107][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.741120][ T8441] R13: 0000000000000000 R14: 00007f81ef135fa0 R15: 00007ffd3e270408 [ 255.789817][ T8441] [ 255.796463][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.819333][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'. [ 256.047035][ T8470] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 256.059697][ T8470] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.778'. [ 256.072148][ T8470] netlink: 'syz.2.778': attribute type 2 has an invalid length. [ 256.091201][ T8470] netlink: 185 bytes leftover after parsing attributes in process `syz.2.778'. [ 256.123805][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 256.144922][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 256.240440][ T8474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.288977][ T8477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.296313][ T8477] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 256.308502][ T8477] bond1: (slave vcan0): Error -95 calling set_mac_address [ 256.557566][ T8499] x_tables: duplicate underflow at hook 1 [ 256.563902][ T8494] tipc: Enabled bearer , priority 10 [ 258.035830][ T8507] netem: change failed [ 258.053615][ T8520] netlink: 'syz.1.792': attribute type 8 has an invalid length. [ 258.248207][ T8529] netlink: 'syz.3.798': attribute type 2 has an invalid length. [ 258.972018][ T8575] openvswitch: netlink: Actions may not be safe on all matching packets [ 258.982318][ T8575] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.533537][ T8599] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 260.036512][ T8591] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 260.093132][ T8626] bond1: entered promiscuous mode [ 260.098207][ T8626] bond1: entered allmulticast mode [ 260.104220][ T8626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.168302][ T8633] sctp: [Deprecated]: syz.1.822 (pid 8633) Use of int in max_burst socket option. [ 260.168302][ T8633] Use struct sctp_assoc_value instead [ 260.472486][ T8646] __nla_validate_parse: 11 callbacks suppressed [ 260.472505][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 260.504805][ T8643] veth1: entered promiscuous mode [ 260.543991][ T8644] wireguard: wg1: Could not create IPv4 socket [ 260.586607][ T8643] wireguard: wg1: Could not create IPv4 socket [ 260.605600][ T8642] veth1: left promiscuous mode [ 260.686141][ T8655] netlink: 'syz.4.829': attribute type 3 has an invalid length. [ 260.721317][ T8656] netlink: 256 bytes leftover after parsing attributes in process `syz.2.830'. [ 260.809679][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 260.832972][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'. [ 261.069589][ T8670] SET target dimension over the limit! [ 261.448410][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 261.611262][ T8695] trusted_key: syz.1.843 sent an empty control message without MSG_MORE. [ 262.201362][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 262.263314][ T8734] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 262.608777][ T8759] netlink: 'syz.2.860': attribute type 4 has an invalid length. [ 262.633399][ T8759] netlink: 124 bytes leftover after parsing attributes in process `syz.2.860'. [ 262.962171][ T8773] xt_CT: No such helper "syz0" [ 263.226177][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 263.378892][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 263.403359][ T8803] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 263.551788][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.574449][ T8810] team0: Port device bond0 added [ 263.639842][ T8807] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.873'. [ 263.713883][ T8817] netlink: 'syz.1.880': attribute type 28 has an invalid length. [ 263.741976][ T8817] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 264.065896][ T25] IPVS: starting estimator thread 0... [ 264.155173][ T8841] IPVS: using max 18 ests per chain, 43200 per kthread [ 264.319317][ T8860] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 264.638590][ T8878] dvmrp1: entered allmulticast mode [ 264.947264][ T8900] ipt_ECN: cannot use operation on non-tcp rule [ 265.000398][ T8898] dccp_invalid_packet: pskb_may_pull failed [ 265.326009][ T8922] unknown channel width for channel at 909000KHz? [ 265.450606][ T8928] netlink: zone id is out of range [ 265.459961][ T8928] netlink: zone id is out of range [ 265.475294][ T8930] syz.3.915 uses old SIOCAX25GETINFO [ 265.483170][ T8928] netlink: del zone limit has 4 unknown bytes [ 265.504535][ T8930] __nla_validate_parse: 53 callbacks suppressed [ 265.504552][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 265.685914][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 265.715505][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.918'. [ 266.053911][ T8956] netlink: 'syz.3.924': attribute type 10 has an invalid length. [ 266.086079][ T8956] veth1_macvtap: left promiscuous mode [ 266.190133][ T8960] lo speed is unknown, defaulting to 1000 [ 266.196327][ T8960] lo speed is unknown, defaulting to 1000 [ 266.210239][ T8960] lo speed is unknown, defaulting to 1000 [ 266.226347][ T8960] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 266.256574][ T8963] netlink: 'syz.2.926': attribute type 4 has an invalid length. [ 266.267594][ T8960] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 266.371024][ T972] lo speed is unknown, defaulting to 1000 [ 266.400605][ T8960] lo speed is unknown, defaulting to 1000 [ 266.412224][ T8960] lo speed is unknown, defaulting to 1000 [ 266.439886][ T8960] lo speed is unknown, defaulting to 1000 [ 266.458176][ T8960] lo speed is unknown, defaulting to 1000 [ 266.478036][ T8960] lo speed is unknown, defaulting to 1000 [ 266.687198][ T8980] netlink: 72 bytes leftover after parsing attributes in process `syz.4.934'. [ 266.723195][ T8980] xt_nat: multiple ranges no longer supported [ 266.992886][ T9006] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.031609][ T9009] netlink: 104 bytes leftover after parsing attributes in process `syz.1.941'. [ 267.231015][ T9022] netlink: 156 bytes leftover after parsing attributes in process `syz.3.946'. [ 267.260791][ T9022] netlink: 'syz.3.946': attribute type 2 has an invalid length. [ 267.302413][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.946'. [ 267.330824][ T9025] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.414454][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 267.687930][ T9044] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.953'. [ 267.732106][ T9044] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 267.799074][ T9050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.956'. [ 268.239714][ T9082] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 268.369865][ T9091] pim6reg1: entered promiscuous mode [ 268.376537][ T9091] pim6reg1: entered allmulticast mode [ 268.460446][ T9096] C: renamed from lo (while UP) [ 268.508742][ T9096] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 268.572771][ T9092] lo speed is unknown, defaulting to 1000 [ 268.814563][ T9105] dvmrp0: entered allmulticast mode [ 269.314447][ T9119] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 269.355508][ T9119] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 269.398197][ T9122] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 269.476259][ T9131] netlink: 'syz.0.984': attribute type 29 has an invalid length. [ 269.491937][ T9134] netlink: 'syz.3.985': attribute type 3 has an invalid length. [ 269.509295][ T9134] netlink: 'syz.3.985': attribute type 3 has an invalid length. [ 269.513515][ T9131] netlink: 'syz.0.984': attribute type 29 has an invalid length. [ 269.527852][ T9134] netlink: 'syz.3.985': attribute type 3 has an invalid length. [ 269.859160][ T9154] SET target dimension over the limit! [ 269.991991][ T9116] syz.1.981 (9116) used greatest stack depth: 17808 bytes left [ 270.366583][ T9183] delete_channel: no stack [ 270.648746][ T9194] __nla_validate_parse: 10 callbacks suppressed [ 270.648767][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1002'. [ 270.954128][ T9214] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1009'. [ 270.980283][ T9214] unsupported nlmsg_type 40 [ 270.998897][ T9214] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1009'. [ 271.030460][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'. [ 271.066985][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'. [ 271.125486][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 271.268284][ T9228] pim6reg1: entered promiscuous mode [ 271.273827][ T9228] pim6reg1: entered allmulticast mode [ 271.289355][ T9231] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 271.298498][ T9231] netlink: 9116 bytes leftover after parsing attributes in process `syz.1.1017'. [ 271.309536][ T9231] netlink: 189 bytes leftover after parsing attributes in process `syz.1.1017'. [ 272.473620][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 273.062360][ T9341] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1052'. [ 273.439582][ T9360] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 273.465870][ T9360] netlink: 'syz.4.1060': attribute type 2 has an invalid length. [ 273.764681][ T5889] lo speed is unknown, defaulting to 1000 [ 274.031440][ T9402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.667060][ T9444] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 274.676616][ T9444] netlink: 'syz.1.1084': attribute type 2 has an invalid length. [ 274.686439][ T9444] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 274.748006][ T9448] netlink: 'syz.2.1085': attribute type 4 has an invalid length. [ 275.079155][ T9471] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 275.096346][ T9471] netlink: 'syz.2.1092': attribute type 3 has an invalid length. [ 275.226062][ T9479] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 275.281570][ T9484] netlink: 'syz.3.1096': attribute type 4 has an invalid length. [ 275.399255][ T5214] udevd[5214]: worker [7316] terminated by signal 33 (Unknown signal 33) [ 275.429615][ T5214] udevd[5214]: worker [7316] failed while handling '/devices/virtual/block/loop4' [ 275.456070][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.492979][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.499483][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.579382][ T9492] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.770605][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.815278][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.824910][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.865957][ T9524] __nla_validate_parse: 8 callbacks suppressed [ 275.865973][ T9524] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1108'. [ 275.884873][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 275.945465][ T9492] wlan1 speed is unknown, defaulting to 1000 [ 276.130161][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 276.166007][ T9536] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1112'. [ 276.249723][ T9542] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1110'. [ 276.261206][ T9541] xt_connbytes: Forcing CT accounting to be enabled [ 276.486657][ T9558] netlink: 'syz.3.1118': attribute type 1 has an invalid length. [ 276.688078][ T9568] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 276.796752][ T9574] tipc: Bearer : already 2 bearers with priority 10 [ 276.808726][ T9574] tipc: Bearer : trying with adjusted priority [ 276.817329][ T9574] tipc: Enabling of bearer rejected, failed to enable media [ 277.537813][ T9578] lo speed is unknown, defaulting to 1000 [ 277.576753][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 277.587009][ T9578] wlan1 speed is unknown, defaulting to 1000 [ 277.636791][ T9585] dvmrp1: entered allmulticast mode [ 278.286430][ T9618] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.1138'. [ 278.548712][ T9635] openvswitch: netlink: Actions may not be safe on all matching packets [ 278.549195][ T9633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1143'. [ 279.158972][ T9663] netlink: 126012 bytes leftover after parsing attributes in process `syz.3.1157'. [ 279.207563][ T9670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 279.208339][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 279.710595][ T9698] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 279.734684][ T9700] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 280.513784][ T9743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.987786][ T9771] xt_TCPMSS: Only works on TCP SYN packets [ 281.115424][ T9780] __nla_validate_parse: 10 callbacks suppressed [ 281.115445][ T9780] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1195'. [ 281.297390][ T9792] bond3: entered promiscuous mode [ 281.441715][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 281.456715][ T9805] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1200'. [ 281.486712][ T9805] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1200'. [ 281.498745][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 281.508873][ T9805] validate_nla: 8 callbacks suppressed [ 281.508890][ T9805] netlink: 'syz.2.1200': attribute type 6 has an invalid length. [ 281.549047][ T9805] netlink: 'syz.2.1200': attribute type 5 has an invalid length. [ 281.566857][ T9805] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1200'. [ 281.594021][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 281.629019][ T9802] bridge0: port 3(syz_tun) entered disabled state [ 281.637119][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.807365][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 281.910746][ T9827] dvmrp0: entered allmulticast mode [ 282.102151][ T9839] pim6reg1: entered promiscuous mode [ 282.108697][ T9839] pim6reg1: entered allmulticast mode [ 282.121044][ T9839] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 282.141716][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.154124][ T9839] bond0: (slave team0): Enslaving as an active interface with an up link [ 282.184253][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 282.205162][ T9842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'. [ 282.818909][ T9879] xt_cgroup: xt_cgroup: no path or classid specified [ 282.967475][ T5856] block nbd0: Receive control failed (result -107) [ 283.003534][ T9881] nbd0: detected capacity change from 0 to 256 [ 283.023905][ T7331] block nbd0: Dead connection, failed to find a fallback [ 283.031317][ T7331] block nbd0: shutting down sockets [ 283.083578][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.125608][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.134141][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.143325][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.151248][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.160396][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.169317][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.178633][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.186530][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.195885][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.203795][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.213023][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.220921][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.230362][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.238456][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.248128][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.256342][ T7331] ldm_validate_partition_table(): Disk read failed. [ 283.263301][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.273830][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.281674][ T7331] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.291035][ T7331] Buffer I/O error on dev nbd0, logical block 0, async page read [ 283.299154][ T7331] Dev nbd0: unable to read RDB block 0 [ 283.305215][ T7331] nbd0: unable to read partition table [ 283.354456][ T7331] ldm_validate_partition_table(): Disk read failed. [ 283.361531][ T7331] Dev nbd0: unable to read RDB block 0 [ 283.367524][ T7331] nbd0: unable to read partition table [ 284.099629][ T9942] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 284.108914][ T9942] raw_sendmsg: syz.0.1244 forgot to set AF_INET. Fix it! [ 285.017516][ T9988] netlink: 'syz.3.1258': attribute type 11 has an invalid length. [ 285.371396][T10011] bond0: entered allmulticast mode [ 285.388470][T10011] bond_slave_0: entered allmulticast mode [ 285.402575][T10011] bond_slave_1: entered allmulticast mode [ 285.411360][T10011] team0: entered allmulticast mode [ 285.418229][T10011] team_slave_0: entered allmulticast mode [ 285.425169][T10011] team_slave_1: entered allmulticast mode [ 285.431016][T10011] netdevsim netdevsim1 : entered allmulticast mode [ 285.613350][T10024] tipc: Started in network mode [ 285.640607][T10024] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 285.666403][T10024] tipc: Enabled bearer , priority 10 [ 285.687909][T10024] batman_adv: batadv0: Removing interface: team0 [ 285.712064][T10024] batman_adv: batadv0: Interface deactivated: dummy0 [ 285.729892][T10024] batman_adv: batadv0: Removing interface: dummy0 [ 285.753752][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.788882][T10024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.812160][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.820875][T10024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.861551][T10036] hsr_slave_0: left promiscuous mode [ 285.878888][T10036] hsr_slave_1: left promiscuous mode [ 286.044182][T10042] lo speed is unknown, defaulting to 1000 [ 286.050997][T10042] wlan1 speed is unknown, defaulting to 1000 [ 286.154352][T10054] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.181174][T10053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.209858][T10055] dvmrp0: entered allmulticast mode [ 286.480231][T10070] netlink: 'syz.2.1283': attribute type 3 has an invalid length. [ 286.726687][T10079] IPVS: set_ctl: invalid protocol: 0 172.30.7.3:20003 [ 286.783349][ T5891] tipc: Node number set to 10136234 [ 286.848747][T10083] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 286.874371][T10083] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 286.884332][T10088] __nla_validate_parse: 12 callbacks suppressed [ 286.884349][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 286.926320][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1290'. [ 286.973247][T10043] netlink: 'syz.1.1275': attribute type 15 has an invalid length. [ 287.374846][T10107] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 287.674742][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'. [ 287.729003][T10115] bridge_slave_1: left allmulticast mode [ 287.741019][T10115] bridge_slave_1: left promiscuous mode [ 287.794403][T10115] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.846541][T10115] bridge2: port 1(bridge_slave_1) entered blocking state [ 287.859399][T10115] bridge2: port 1(bridge_slave_1) entered disabled state [ 287.868248][T10115] bridge_slave_1: entered allmulticast mode [ 287.891027][T10115] bridge_slave_1: entered promiscuous mode [ 288.597046][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 288.971681][T10198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1323'. [ 288.991779][T10204] cai}0: left allmulticast mode [ 289.022118][T10200] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1323'. [ 289.053361][T10204] cai}0: left promiscuous mode [ 289.077294][T10204] bridge0: port 1(cai}0) entered disabled state [ 289.110958][T10204] bridge_slave_1: left allmulticast mode [ 289.123319][T10204] bridge_slave_1: left promiscuous mode [ 289.129077][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.162388][T10204] bond0: (slave bond_slave_0): Releasing backup interface [ 289.189951][T10204] bond0: (slave bond_slave_1): Releasing backup interface [ 289.246757][T10204] team0: Port device team_slave_0 removed [ 289.284956][T10204] team0: Port device team_slave_1 removed [ 289.291375][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.305261][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.319164][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.327816][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.349020][T10204] team0: Port device netdevsim0 removed [ 289.611022][T10239] delete_channel: no stack [ 289.700430][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1335'. [ 289.781453][T10247] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 289.815573][T10247] netlink: 9260 bytes leftover after parsing attributes in process `syz.4.1335'. [ 289.855833][T10247] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1335'. [ 289.870287][T10247] netlink: 'syz.4.1335': attribute type 2 has an invalid length. [ 289.878729][T10247] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 289.905546][T10250] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 289.921857][T10253] netlink: 'syz.3.1339': attribute type 33 has an invalid length. [ 290.082391][T10261] pim6reg1: entered promiscuous mode [ 290.091121][T10261] pim6reg1: entered allmulticast mode [ 290.508355][T10294] netlink: 'syz.2.1352': attribute type 9 has an invalid length. [ 290.519043][T10294] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1352'. [ 291.345863][T10341] netlink: 'syz.4.1368': attribute type 12 has an invalid length. [ 291.372031][T10341] netlink: 'syz.4.1368': attribute type 11 has an invalid length. [ 291.516854][T10352] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 291.533548][T10353] netlink: 'syz.1.1372': attribute type 3 has an invalid length. [ 291.566879][T10354] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 291.659631][T10356] syzkaller0: entered promiscuous mode [ 291.669520][T10356] syzkaller0: entered allmulticast mode [ 291.681350][T10359] IPv6: sit1: Disabled Multicast RS [ 293.309317][T10385] __nla_validate_parse: 9 callbacks suppressed [ 293.309334][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 293.340510][T10391] tipc: Started in network mode [ 293.345878][T10391] tipc: Node identity ac1414aa, cluster identity 4711 [ 293.353134][ T25] IPVS: starting estimator thread 0... [ 293.359652][T10391] tipc: Enabled bearer , priority 10 [ 293.370967][T10393] tipc: Enabling of bearer rejected, already enabled [ 293.452746][T10394] IPVS: using max 18 ests per chain, 43200 per kthread [ 293.679253][T10415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1391'. [ 293.980842][T10427] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 293.997936][T10427] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.1397'. [ 294.057004][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 294.473062][ T5890] tipc: Node number set to 2886997162 [ 294.672196][T10473] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 294.737053][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 294.737894][T10478] tap0: tun_chr_ioctl cmd 2148553947 [ 294.771787][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 294.838815][T10486] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 294.879792][T10486] veth1_to_hsr: entered promiscuous mode [ 294.892024][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 294.998644][T10492] netlink: 'syz.4.1417': attribute type 9 has an invalid length. [ 295.008587][T10492] netlink: 134640 bytes leftover after parsing attributes in process `syz.4.1417'. [ 295.020150][T10486] veth1_to_hsr (unregistering): left promiscuous mode [ 295.029471][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1417'. [ 295.240527][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1423'. [ 295.277173][T10508] tls_set_device_offload: netdev not found [ 295.467129][T10518] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 295.570808][T10525] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 295.883191][ T5891] IPVS: starting estimator thread 0... [ 295.889729][T10548] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 296.002784][T10549] IPVS: using max 17 ests per chain, 40800 per kthread [ 296.023772][T10552] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 296.041028][T10552] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 296.057916][T10556] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.443425][T10575] netlink: 'syz.0.1449': attribute type 10 has an invalid length. [ 296.488857][T10575] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 296.516075][T10575] sctp: [Deprecated]: syz.0.1449 (pid 10575) Use of int in max_burst socket option. [ 296.516075][T10575] Use struct sctp_assoc_value instead [ 296.531580][T10584] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 296.955853][T10613] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 296.957570][T10610] xt_connbytes: Forcing CT accounting to be enabled [ 296.973559][T10613] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 297.135176][T10620] FAULT_INJECTION: forcing a failure. [ 297.135176][T10620] name failslab, interval 1, probability 0, space 0, times 0 [ 297.172369][T10620] CPU: 0 UID: 0 PID: 10620 Comm: syz.2.1463 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 297.183178][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 297.193262][T10620] Call Trace: [ 297.196552][T10620] [ 297.199504][T10620] dump_stack_lvl+0x241/0x360 [ 297.204230][T10620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.209466][T10620] ? __pfx__printk+0x10/0x10 [ 297.214091][T10620] ? fs_reclaim_acquire+0x93/0x130 [ 297.219227][T10620] ? __pfx___might_resched+0x10/0x10 [ 297.224560][T10620] should_fail_ex+0x3b0/0x4e0 [ 297.229282][T10620] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 297.235043][T10620] should_failslab+0xac/0x100 [ 297.239768][T10620] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 297.245545][T10620] __kmalloc_noprof+0xd8/0x400 [ 297.250332][T10620] tomoyo_realpath_from_path+0xcf/0x5e0 [ 297.255898][T10620] tomoyo_path_number_perm+0x23a/0x880 [ 297.261371][T10620] ? tomoyo_path_number_perm+0x208/0x880 [ 297.267009][T10620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.273041][T10620] ? __fget_files+0x29/0x470 [ 297.277662][T10620] ? __fget_files+0x3f3/0x470 [ 297.282407][T10620] security_file_ioctl+0xc6/0x2a0 [ 297.287438][T10620] __se_sys_ioctl+0x47/0x170 [ 297.292031][T10620] do_syscall_64+0xf3/0x230 [ 297.296540][T10620] ? clear_bhb_loop+0x35/0x90 [ 297.301219][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.307120][T10620] RIP: 0033:0x7f166597e819 [ 297.311539][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.331145][T10620] RSP: 002b:00007f1666721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.339564][T10620] RAX: ffffffffffffffda RBX: 00007f1665b35fa0 RCX: 00007f166597e819 [ 297.347533][T10620] RDX: 0000000020000000 RSI: 0000000040046629 RDI: 0000000000000003 [ 297.355514][T10620] RBP: 00007f1666721090 R08: 0000000000000000 R09: 0000000000000000 [ 297.363490][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.371470][T10620] R13: 0000000000000000 R14: 00007f1665b35fa0 R15: 00007ffcfbdda238 [ 297.379472][T10620] [ 297.390128][T10620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.600298][T10631] netlink: 'syz.3.1468': attribute type 10 has an invalid length. [ 297.619862][T10631] ipvlan1: entered promiscuous mode [ 297.628414][T10631] ipvlan1: entered allmulticast mode [ 297.636875][T10631] veth0_vlan: entered allmulticast mode [ 297.648854][T10631] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 297.687259][T10637] netlink: 'syz.3.1468': attribute type 9 has an invalid length. [ 298.367941][T10673] __nla_validate_parse: 12 callbacks suppressed [ 298.367959][T10673] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1483'. [ 298.409643][T10673] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1483'. [ 298.423004][T10681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1482'. [ 298.449269][T10673] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1483'. [ 298.828828][T10701] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 298.962151][T10712] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1495'. [ 298.977798][T10714] FAULT_INJECTION: forcing a failure. [ 298.977798][T10714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.996078][T10714] CPU: 0 UID: 0 PID: 10714 Comm: syz.4.1496 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 299.006869][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 299.016937][T10714] Call Trace: [ 299.020234][T10714] [ 299.023188][T10714] dump_stack_lvl+0x241/0x360 [ 299.027900][T10714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.033132][T10714] ? __pfx__printk+0x10/0x10 [ 299.037760][T10714] ? snprintf+0xda/0x120 [ 299.042036][T10714] should_fail_ex+0x3b0/0x4e0 [ 299.046744][T10714] _copy_to_user+0x31/0xb0 [ 299.051186][T10714] simple_read_from_buffer+0xca/0x150 [ 299.056590][T10714] proc_fail_nth_read+0x1e9/0x250 [ 299.061617][T10714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.067169][T10714] ? rw_verify_area+0x55e/0x6f0 [ 299.072029][T10714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.077575][T10714] vfs_read+0x1fc/0xb70 [ 299.081737][T10714] ? fdget_pos+0x24e/0x320 [ 299.086160][T10714] ? __pfx_vfs_read+0x10/0x10 [ 299.090836][T10714] ? __fget_files+0x3f3/0x470 [ 299.095524][T10714] ? fdget_pos+0x24e/0x320 [ 299.099947][T10714] ksys_read+0x183/0x2b0 [ 299.104195][T10714] ? __pfx_ksys_read+0x10/0x10 [ 299.108986][T10714] ? do_syscall_64+0x100/0x230 [ 299.113754][T10714] ? do_syscall_64+0xb6/0x230 [ 299.118442][T10714] do_syscall_64+0xf3/0x230 [ 299.122952][T10714] ? clear_bhb_loop+0x35/0x90 [ 299.127642][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.133536][T10714] RIP: 0033:0x7f4a1e97d25c [ 299.137961][T10714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 299.157564][T10714] RSP: 002b:00007f4a1f753030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.165988][T10714] RAX: ffffffffffffffda RBX: 00007f4a1eb35fa0 RCX: 00007f4a1e97d25c [ 299.173964][T10714] RDX: 000000000000000f RSI: 00007f4a1f7530a0 RDI: 0000000000000004 [ 299.182020][T10714] RBP: 00007f4a1f753090 R08: 0000000000000000 R09: 0000000000000000 [ 299.190076][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.198044][T10714] R13: 0000000000000000 R14: 00007f4a1eb35fa0 R15: 00007ffe107c0718 [ 299.206032][T10714] [ 299.259268][T10718] validate_nla: 1 callbacks suppressed [ 299.259283][T10718] netlink: 'syz.1.1498': attribute type 1 has an invalid length. [ 299.303088][T10718] netlink: 'syz.1.1498': attribute type 2 has an invalid length. [ 299.441877][T10728] netlink: 'syz.1.1502': attribute type 2 has an invalid length. [ 299.630027][T10741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1504'. [ 299.866598][T10761] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1511'. [ 299.909188][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1512'. [ 299.956392][T10763] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 299.994675][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1512'. [ 300.028422][T10767] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 300.049204][T10763] openvswitch: netlink: Message has 245 unknown bytes. [ 300.073290][T10763] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.382463][T10784] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.610159][T10808] netlink: 'syz.0.1525': attribute type 9 has an invalid length. [ 300.618867][T10808] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1525'. [ 300.683440][T10809] netlink: 'syz.0.1525': attribute type 9 has an invalid length. [ 300.759399][T10813] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 300.931008][T10824] sctp: [Deprecated]: syz.0.1530 (pid 10824) Use of int in max_burst socket option. [ 300.931008][T10824] Use struct sctp_assoc_value instead [ 301.361234][T10852] openvswitch: netlink: nsh attr 188 is out of range max 3 [ 301.559583][T10864] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 301.568894][T10864] netlink: 'syz.2.1544': attribute type 4 has an invalid length. [ 301.833809][T10875] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.671325][T10922] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 303.161273][T10951] wg2: entered promiscuous mode [ 303.171512][T10955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.191931][T10951] team0: Device wg2 is of different type [ 303.211244][T10950] tap0: tun_chr_ioctl cmd 1074025677 [ 303.218431][T10950] tap0: linktype set to 782 [ 303.227277][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.256017][T10955] bridge_slave_0 (unregistering): left allmulticast mode [ 303.264155][T10955] bridge_slave_0 (unregistering): left promiscuous mode [ 303.268067][T10960] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 303.271302][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.298350][T10959] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.385431][T10962] __nla_validate_parse: 17 callbacks suppressed [ 303.385445][T10962] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1582'. [ 303.486141][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 303.493871][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 303.550027][T10965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.675243][T10965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.765844][T10965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.872940][T10965] team0: Port device netdevsim0 removed [ 303.889871][T10965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.993236][T10988] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1589'. [ 304.073592][T10965] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.112385][T10965] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.140225][T10965] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.213688][T10965] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.427448][T11011] tipc: MTU too low for tipc bearer [ 304.481650][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 304.492864][T11017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1597'. [ 304.639688][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 304.666464][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1603'. [ 304.688930][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 304.894723][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 305.017270][T11043] netlink: 'syz.3.1610': attribute type 3 has an invalid length. [ 305.335622][T11062] bridge_slAve_0: renamed from lo [ 305.346363][T11059] netlink: 'syz.1.1616': attribute type 2 has an invalid length. [ 305.671321][T11083] netlink: 'syz.2.1625': attribute type 3 has an invalid length. [ 305.831400][T11093] x_tables: duplicate underflow at hook 1 [ 305.989526][T11100] sctp: [Deprecated]: syz.1.1633 (pid 11100) Use of int in maxseg socket option. [ 305.989526][T11100] Use struct sctp_assoc_value instead [ 306.116176][T11111] FAULT_INJECTION: forcing a failure. [ 306.116176][T11111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.188552][T11111] CPU: 0 UID: 0 PID: 11111 Comm: syz.2.1636 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 306.199358][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 306.209448][T11111] Call Trace: [ 306.212737][T11111] [ 306.215674][T11111] dump_stack_lvl+0x241/0x360 [ 306.220368][T11111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.225562][T11111] ? __pfx__printk+0x10/0x10 [ 306.230148][T11111] ? __pfx_lock_release+0x10/0x10 [ 306.235196][T11111] should_fail_ex+0x3b0/0x4e0 [ 306.239879][T11111] _copy_to_iter+0x21f/0x1e70 [ 306.244573][T11111] ? __virt_addr_valid+0x183/0x530 [ 306.249722][T11111] ? __pfx_lock_release+0x10/0x10 [ 306.254796][T11111] ? mark_lock+0x9a/0x360 [ 306.259154][T11111] ? __pfx__copy_to_iter+0x10/0x10 [ 306.264308][T11111] ? __virt_addr_valid+0x183/0x530 [ 306.269450][T11111] ? __virt_addr_valid+0x183/0x530 [ 306.274595][T11111] ? __virt_addr_valid+0x45f/0x530 [ 306.279738][T11111] ? __phys_addr_symbol+0x2f/0x70 [ 306.284793][T11111] ? __check_object_size+0x48e/0x900 [ 306.290124][T11111] __skb_datagram_iter+0x107/0x900 [ 306.295270][T11111] ? __local_bh_enable_ip+0x168/0x200 [ 306.300681][T11111] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 306.306342][T11111] ? virtio_transport_seqpacket_dequeue+0x323/0xb40 [ 306.312950][T11111] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 306.318704][T11111] skb_copy_datagram_iter+0xd1/0x250 [ 306.324023][T11111] virtio_transport_seqpacket_dequeue+0x33a/0xb40 [ 306.330488][T11111] ? __pfx_virtio_transport_seqpacket_dequeue+0x10/0x10 [ 306.337454][T11111] ? vsock_connectible_wait_data+0x47f/0x4b0 [ 306.343476][T11111] __vsock_connectible_recvmsg+0x607/0xba0 [ 306.349312][T11111] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 306.355662][T11111] ? aa_sk_perm+0x96d/0xab0 [ 306.360189][T11111] ? __pfx_autoremove_wake_function+0x10/0x10 [ 306.366294][T11111] ? __pfx_aa_sk_perm+0x10/0x10 [ 306.371166][T11111] ? __fget_files+0x29/0x470 [ 306.375781][T11111] ? aa_sock_msg_perm+0x91/0x160 [ 306.380751][T11111] ? vsock_connectible_recvmsg+0xbb/0xe0 [ 306.386417][T11111] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 306.392594][T11111] sock_recvmsg+0x22f/0x280 [ 306.392650][T11111] __sys_recvfrom+0x246/0x3d0 [ 306.392683][T11111] ? __pfx___sys_recvfrom+0x10/0x10 [ 306.392710][T11111] ? __mutex_unlock_slowpath+0x21d/0x750 [ 306.392769][T11111] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 306.392808][T11111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.392849][T11111] __x64_sys_recvfrom+0xde/0x100 [ 306.392883][T11111] do_syscall_64+0xf3/0x230 [ 306.392912][T11111] ? clear_bhb_loop+0x35/0x90 [ 306.392952][T11111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.392980][T11111] RIP: 0033:0x7f166597e819 [ 306.393000][T11111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.393020][T11111] RSP: 002b:00007f1666721038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 306.393046][T11111] RAX: ffffffffffffffda RBX: 00007f1665b35fa0 RCX: 00007f166597e819 [ 306.393064][T11111] RDX: 0000000000000107 RSI: 0000000020000140 RDI: 0000000000000005 [ 306.393079][T11111] RBP: 00007f1666721090 R08: 0000000000000000 R09: 0000000000000000 [ 306.393094][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.393108][T11111] R13: 0000000000000000 R14: 00007f1665b35fa0 R15: 00007ffcfbdda238 [ 306.393142][T11111] [ 306.587484][T11113] bond0: (slave syz_tun): Releasing backup interface [ 306.686531][T11129] netlink: 'syz.2.1642': attribute type 11 has an invalid length. [ 307.012533][T11150] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 307.138144][T11156] FAULT_INJECTION: forcing a failure. [ 307.138144][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 307.155890][T11156] CPU: 1 UID: 0 PID: 11156 Comm: syz.4.1652 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 307.166681][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 307.176753][T11156] Call Trace: [ 307.180048][T11156] [ 307.182997][T11156] dump_stack_lvl+0x241/0x360 [ 307.187706][T11156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.192935][T11156] ? __pfx__printk+0x10/0x10 [ 307.197564][T11156] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 307.203577][T11156] ? __pfx___might_resched+0x10/0x10 [ 307.208893][T11156] ? stack_trace_save+0x118/0x1d0 [ 307.213953][T11156] should_fail_ex+0x3b0/0x4e0 [ 307.218668][T11156] should_failslab+0xac/0x100 [ 307.223395][T11156] ? __alloc_skb+0x1c3/0x440 [ 307.228025][T11156] kmem_cache_alloc_node_noprof+0x71/0x320 [ 307.233878][T11156] ? kasan_save_track+0x51/0x80 [ 307.238769][T11156] __alloc_skb+0x1c3/0x440 [ 307.243214][T11156] ? __x64_sys_recvfrom+0xde/0x100 [ 307.248355][T11156] ? do_syscall_64+0xf3/0x230 [ 307.253060][T11156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.259166][T11156] ? __pfx___alloc_skb+0x10/0x10 [ 307.264134][T11156] ? mark_lock+0x9a/0x360 [ 307.268467][T11156] virtio_transport_alloc_skb+0x4b/0xe90 [ 307.274107][T11156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.280443][T11156] virtio_transport_send_pkt_info+0x56f/0x10b0 [ 307.286601][T11156] ? virtio_transport_seqpacket_dequeue+0x966/0xb40 [ 307.293197][T11156] virtio_transport_seqpacket_dequeue+0x9cc/0xb40 [ 307.299634][T11156] ? __pfx_virtio_transport_seqpacket_dequeue+0x10/0x10 [ 307.306588][T11156] __vsock_connectible_recvmsg+0x607/0xba0 [ 307.312399][T11156] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 307.318724][T11156] ? aa_sk_perm+0x96d/0xab0 [ 307.323227][T11156] ? __pfx_autoremove_wake_function+0x10/0x10 [ 307.329302][T11156] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.334155][T11156] ? __fget_files+0x29/0x470 [ 307.338743][T11156] ? aa_sock_msg_perm+0x91/0x160 [ 307.343682][T11156] ? vsock_connectible_recvmsg+0xbb/0xe0 [ 307.349309][T11156] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 307.355485][T11156] sock_recvmsg+0x22f/0x280 [ 307.359998][T11156] __sys_recvfrom+0x246/0x3d0 [ 307.364687][T11156] ? __pfx___sys_recvfrom+0x10/0x10 [ 307.369900][T11156] ? __mutex_unlock_slowpath+0x21d/0x750 [ 307.375553][T11156] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 307.381540][T11156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 307.387891][T11156] __x64_sys_recvfrom+0xde/0x100 [ 307.392849][T11156] do_syscall_64+0xf3/0x230 [ 307.397372][T11156] ? clear_bhb_loop+0x35/0x90 [ 307.402052][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.407951][T11156] RIP: 0033:0x7f4a1e97e819 [ 307.412364][T11156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.431978][T11156] RSP: 002b:00007f4a1f753038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 307.440401][T11156] RAX: ffffffffffffffda RBX: 00007f4a1eb35fa0 RCX: 00007f4a1e97e819 [ 307.448379][T11156] RDX: 0000000000000107 RSI: 0000000020000140 RDI: 0000000000000005 [ 307.456350][T11156] RBP: 00007f4a1f753090 R08: 0000000000000000 R09: 0000000000000000 [ 307.464322][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.472292][T11156] R13: 0000000000000000 R14: 00007f4a1eb35fa0 R15: 00007ffe107c0718 [ 307.480275][T11156] [ 307.757533][T11178] netem: incorrect gi model size [ 307.768244][T11178] netem: change failed [ 308.034810][T11198] A link change request failed with some changes committed already. Interface bridge_slAve_0 may have been left with an inconsistent configuration, please check. [ 308.292747][T11218] netlink: 'syz.4.1674': attribute type 21 has an invalid length. [ 308.585560][T11245] __nla_validate_parse: 16 callbacks suppressed [ 308.585579][T11245] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1680'. [ 308.747483][T11253] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1682'. [ 308.877433][T11256] netlink: 'syz.0.1683': attribute type 9 has an invalid length. [ 308.898723][T11256] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1683'. [ 309.173204][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1691'. [ 309.198707][T11276] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.231045][T11276] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.262687][T11276] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.272575][T11276] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.312223][T11276] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.339409][T11276] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.349044][T11276] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.358547][T11276] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 309.368175][T11276] geneve2: entered promiscuous mode [ 309.374343][T11276] geneve2: entered allmulticast mode [ 309.402321][T11286] ɶƣ0GC: entered promiscuous mode [ 309.461247][T11291] vlan2: entered promiscuous mode [ 309.469569][T11291] hsr_slave_1: entered promiscuous mode [ 309.490783][T11291] vlan2: entered allmulticast mode [ 309.533745][T11291] hsr_slave_1: entered allmulticast mode [ 309.721721][T11309] tipc: Enabling of bearer rejected, media not registered [ 309.751088][T11304] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1698'. [ 309.797770][T11317] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1704'. [ 309.910231][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1705'. [ 309.925964][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1705'. [ 309.937300][T11324] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1705'. [ 309.946977][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1705'. [ 309.956595][T11324] vlan0: entered allmulticast mode [ 309.962139][T11324] veth0_vlan: entered allmulticast mode [ 310.663725][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.674151][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.721645][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.764105][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.780568][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.788312][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.829839][T11351] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 310.840767][T11351] wlan1 speed is unknown, defaulting to 1000 [ 311.071851][T11374] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 311.143858][T11377] bond2: entered allmulticast mode [ 311.265962][T11351] chnl_net:caif_netlink_parms(): no params data found [ 311.448497][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.473258][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.480436][T11351] bridge_slave_0: entered allmulticast mode [ 311.514639][T11351] bridge_slave_0: entered promiscuous mode [ 311.571196][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.588870][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.618241][T11351] bridge_slave_1: entered allmulticast mode [ 311.625989][T11351] bridge_slave_1: entered promiscuous mode [ 311.636616][ T29] audit: type=1107 audit(1732162503.199:2): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2]xwŮl"' [ 311.777545][T11351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.795748][T11351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.904515][T11351] team0: Port device team_slave_0 added [ 311.927453][T11351] team0: Port device team_slave_1 added [ 312.011903][T11351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.023136][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.081816][T11351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.093819][T11415] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 312.155953][T11415] bond2: entered promiscuous mode [ 312.161025][T11415] bond2: entered allmulticast mode [ 312.170224][T11415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.223263][T11351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.234484][T11351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.291198][T11351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.556505][T11351] hsr_slave_0: entered promiscuous mode [ 312.588194][T11351] hsr_slave_1: entered promiscuous mode [ 312.769412][T11457] gtp0: entered promiscuous mode [ 312.777527][T11460] netlink: 'syz.4.1742': attribute type 9 has an invalid length. [ 312.786187][T11457] gtp0: entered allmulticast mode [ 312.863151][ T5856] Bluetooth: hci1: command tx timeout [ 312.961330][T11351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.085371][T11351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.250877][T11351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.339940][T11351] team0: Port device netdevsim0 removed [ 313.348229][T11351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.368213][T11491] netlink: 'syz.4.1754': attribute type 10 has an invalid length. [ 313.383219][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.418407][T11491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.439614][T11491] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 313.445585][T11495] openvswitch: netlink: Actions may not be safe on all matching packets [ 313.610737][T11351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.622099][T11351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.646387][T11351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.685840][T11351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.867041][T11351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.931665][T11351] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.964151][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.971304][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.008661][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.015797][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.361106][T11539] __nla_validate_parse: 4 callbacks suppressed [ 314.361125][T11539] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1767'. [ 314.426181][T11539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1767'. [ 314.434871][T11541] netlink: 134700 bytes leftover after parsing attributes in process `syz.4.1769'. [ 314.437487][T11351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.551393][T11351] veth0_vlan: entered promiscuous mode [ 314.575800][T11351] veth1_vlan: entered promiscuous mode [ 314.695704][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 314.698912][T11351] veth0_macvtap: entered promiscuous mode [ 314.716047][T11351] veth1_macvtap: entered promiscuous mode [ 314.737069][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.749110][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.759976][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.771617][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.802213][T11351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.835601][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.862081][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.881368][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.903381][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.922322][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.935481][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.946109][ T5856] Bluetooth: hci1: command tx timeout [ 314.960441][T11351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.041769][T11351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.059837][T11351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.073461][T11351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.082704][T11351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.204339][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.221208][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.287681][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.300877][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.431411][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1782'. [ 315.450837][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1782'. [ 315.605272][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'. [ 315.762193][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1788'. [ 315.825454][T11611] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 315.837982][T11611] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 315.846789][T11611] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 315.908210][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1790'. [ 316.319989][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.362965][T11630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1795'. [ 316.778355][T11643] Unsupported ieee802154 address type: 0 [ 316.867690][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.894743][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.903592][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.911494][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.935590][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.949928][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.964431][T11658] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.090366][T11648] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 317.100427][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.140233][T11648] wlan1 speed is unknown, defaulting to 1000 [ 317.328724][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.554088][T11684] bridge_slave_1: left allmulticast mode [ 317.573926][T11684] bridge_slave_1: left promiscuous mode [ 317.579655][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.606090][T11648] chnl_net:caif_netlink_parms(): no params data found [ 317.752794][T11691] netlink: 'syz.2.1817': attribute type 6 has an invalid length. [ 317.815782][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.903867][T11648] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.921250][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.935975][T11648] bridge_slave_0: entered allmulticast mode [ 317.948583][T11648] bridge_slave_0: entered promiscuous mode [ 317.999256][T11713] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 318.046059][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.107952][T11648] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.123730][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.130904][T11648] bridge_slave_1: entered allmulticast mode [ 318.160484][T11648] bridge_slave_1: entered promiscuous mode [ 318.264200][T11648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.276702][T11648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.470150][T11740] netlink: 'syz.1.1833': attribute type 5 has an invalid length. [ 318.474576][T11648] team0: Port device team_slave_0 added [ 318.528027][T11648] team0: Port device team_slave_1 added [ 318.601814][T11648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.609124][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.637128][T11648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.706997][T11648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.731480][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.766125][T11648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.837542][T11761] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 318.852574][T11761] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 318.886131][ T35] bridge_slave_1: left allmulticast mode [ 318.895805][ T35] bridge_slave_1: left promiscuous mode [ 318.902139][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.915984][ T35] bridge_slave_0: left allmulticast mode [ 318.921988][ T35] bridge_slave_0: left promiscuous mode [ 318.928523][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.024798][ T5855] Bluetooth: hci1: command tx timeout [ 319.300395][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.313522][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.326608][ T35] bond0 (unregistering): Released all slaves [ 319.399391][T11648] hsr_slave_0: entered promiscuous mode [ 319.449802][T11648] hsr_slave_1: entered promiscuous mode [ 319.488249][T11648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.507166][T11648] Cannot create hsr debugfs directory [ 319.948895][T11802] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 320.023628][T11806] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 320.078031][ T35] hsr_slave_0: left promiscuous mode [ 320.116711][ T35] hsr_slave_1: left promiscuous mode [ 320.163288][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.171777][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.189288][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.202436][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.253189][ T35] veth1_macvtap: left promiscuous mode [ 320.259068][ T35] veth0_macvtap: left promiscuous mode [ 320.284404][ T35] veth1_vlan: left promiscuous mode [ 320.289865][ T35] veth0_vlan: left promiscuous mode [ 320.481067][T11829] netlink: 'syz.4.1854': attribute type 3 has an invalid length. [ 320.495485][T11829] __nla_validate_parse: 8 callbacks suppressed [ 320.495513][T11829] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1854'. [ 320.589627][T11831] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1855'. [ 320.840654][ T35] team0 (unregistering): Port device team_slave_1 removed [ 320.881608][ T35] team0 (unregistering): Port device team_slave_0 removed [ 321.096006][ T5855] Bluetooth: hci1: command tx timeout [ 321.356597][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 321.396996][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 321.450732][T11837] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1857'. [ 321.476354][T11843] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1857'. [ 321.512963][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 321.541311][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 321.690124][T11855] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1862'. [ 321.702075][T11855] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1862'. [ 321.722688][T11855] netlink: 'syz.4.1862': attribute type 5 has an invalid length. [ 322.275017][T11648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.314711][T11648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 322.378807][T11889] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 322.386405][T11648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 322.436159][T11648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 322.492673][T11889] wlan1 speed is unknown, defaulting to 1000 [ 322.640437][T11901] openvswitch: netlink: Missing key (keys=40, expected=80) [ 322.795600][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.888224][T11648] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.934753][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.941894][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.995198][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.002362][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.183193][ T5855] Bluetooth: hci1: command tx timeout [ 323.327213][T11924] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 323.360617][T11924] wlan1 speed is unknown, defaulting to 1000 [ 323.808396][T11648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.057987][T11648] veth0_vlan: entered promiscuous mode [ 324.138391][T11648] veth1_vlan: entered promiscuous mode [ 324.273721][T11648] veth0_macvtap: entered promiscuous mode [ 324.315516][T11648] veth1_macvtap: entered promiscuous mode [ 324.396800][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.428696][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.438911][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.449836][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.476202][T11648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.489182][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.500137][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.515738][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.529560][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.548343][T11648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.559473][T11648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.601794][T11648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.647120][T11648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.669758][T11648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.718019][T11648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.731953][T11648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.195437][ T7271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.238448][ T7271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.253904][ T5855] Bluetooth: hci1: command tx timeout [ 325.405683][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.416844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.976832][T12070] netlink: 'syz.4.1907': attribute type 12 has an invalid length. [ 325.989751][T12070] __nla_validate_parse: 7 callbacks suppressed [ 325.989767][T12070] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1907'. [ 326.205791][ T7271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.232100][T12076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1909'. [ 326.539550][ T7271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.861068][ T7271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.939569][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.950546][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.959162][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.969737][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.979898][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.987527][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.027563][ T11] tipc: Subscription rejected, illegal request [ 327.098404][T12117] FAULT_INJECTION: forcing a failure. [ 327.098404][T12117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.127313][ T7271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.133676][T12117] CPU: 1 UID: 0 PID: 12117 Comm: syz.4.1925 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 327.148349][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 327.158442][T12117] Call Trace: [ 327.161746][T12117] [ 327.164702][T12117] dump_stack_lvl+0x241/0x360 [ 327.169422][T12117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.174662][T12117] ? __pfx__printk+0x10/0x10 [ 327.179293][T12117] ? __pfx_lock_release+0x10/0x10 [ 327.184366][T12117] should_fail_ex+0x3b0/0x4e0 [ 327.189075][T12117] _copy_from_user+0x2f/0xc0 [ 327.193702][T12117] do_tcp_setsockopt+0x29e/0x2540 [ 327.198774][T12117] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 327.204294][T12117] ? __pfx_aa_sk_perm+0x10/0x10 [ 327.209185][T12117] ? __pfx_lock_acquire+0x10/0x10 [ 327.214264][T12117] ? __fget_files+0x29/0x470 [ 327.218892][T12117] ? aa_sock_opt_perm+0x79/0x120 [ 327.223886][T12117] ? tcp_setsockopt+0x3e/0xf0 [ 327.228608][T12117] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 327.234533][T12117] do_sock_setsockopt+0x3af/0x720 [ 327.239603][T12117] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 327.245184][T12117] ? __fget_files+0x29/0x470 [ 327.249809][T12117] ? __fget_files+0x3f3/0x470 [ 327.254515][T12117] ? __fget_files+0x29/0x470 [ 327.259140][T12117] __sys_setsockopt+0x1a2/0x250 [ 327.264012][T12117] __x64_sys_setsockopt+0xb5/0xd0 [ 327.269064][T12117] do_syscall_64+0xf3/0x230 [ 327.273583][T12117] ? clear_bhb_loop+0x35/0x90 [ 327.278305][T12117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.284212][T12117] RIP: 0033:0x7f4a1e97e819 [ 327.288646][T12117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.308249][T12117] RSP: 002b:00007f4a1f753038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.316663][T12117] RAX: ffffffffffffffda RBX: 00007f4a1eb35fa0 RCX: 00007f4a1e97e819 [ 327.324638][T12117] RDX: 000000000000000a RSI: 0000000000000006 RDI: 0000000000000004 [ 327.332621][T12117] RBP: 00007f4a1f753090 R08: 0000000000000004 R09: 0000000000000000 [ 327.340615][T12117] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 327.348589][T12117] R13: 0000000000000000 R14: 00007f4a1eb35fa0 R15: 00007ffe107c0718 [ 327.356576][T12117] [ 327.420728][T12108] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 327.433625][T12108] wlan1 speed is unknown, defaulting to 1000 [ 327.693863][ T7271] bridge_slave_1: left allmulticast mode [ 327.700163][ T7271] bridge_slave_1: left promiscuous mode [ 327.706310][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.813605][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 327.835161][ T7271] bridge_slave_0: left allmulticast mode [ 327.841452][ T7271] bridge_slave_0: left promiscuous mode [ 327.853489][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.195102][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.211687][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.224121][ T7271] bond0 (unregistering): Released all slaves [ 328.314702][T12152] syz_tun: entered promiscuous mode [ 328.328407][T12152] batadv_slave_0: entered promiscuous mode [ 328.337771][T12152] batadv_slave_0: left promiscuous mode [ 328.361367][T12152] syz_tun: left promiscuous mode [ 328.371928][T12166] FAULT_INJECTION: forcing a failure. [ 328.371928][T12166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.386101][T12166] CPU: 0 UID: 0 PID: 12166 Comm: syz.2.1939 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 328.396896][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 328.406982][T12166] Call Trace: [ 328.410288][T12166] [ 328.413247][T12166] dump_stack_lvl+0x241/0x360 [ 328.417982][T12166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.423206][T12166] ? __pfx__printk+0x10/0x10 [ 328.427815][T12166] ? snprintf+0xda/0x120 [ 328.432078][T12166] should_fail_ex+0x3b0/0x4e0 [ 328.436764][T12166] _copy_to_user+0x31/0xb0 [ 328.441192][T12166] simple_read_from_buffer+0xca/0x150 [ 328.446586][T12166] proc_fail_nth_read+0x1e9/0x250 [ 328.451651][T12166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.457213][T12166] ? rw_verify_area+0x55e/0x6f0 [ 328.462078][T12166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 328.467646][T12166] vfs_read+0x1fc/0xb70 [ 328.471811][T12166] ? fdget_pos+0x24e/0x320 [ 328.476242][T12166] ? __pfx_vfs_read+0x10/0x10 [ 328.480931][T12166] ? __fget_files+0x3f3/0x470 [ 328.485634][T12166] ? fdget_pos+0x24e/0x320 [ 328.490072][T12166] ksys_read+0x183/0x2b0 [ 328.494338][T12166] ? __pfx_ksys_read+0x10/0x10 [ 328.499115][T12166] ? do_syscall_64+0x100/0x230 [ 328.503914][T12166] ? do_syscall_64+0xb6/0x230 [ 328.508622][T12166] do_syscall_64+0xf3/0x230 [ 328.513150][T12166] ? clear_bhb_loop+0x35/0x90 [ 328.517845][T12166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.523746][T12166] RIP: 0033:0x7f166597d25c [ 328.528167][T12166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 328.547779][T12166] RSP: 002b:00007f1666721030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.556199][T12166] RAX: ffffffffffffffda RBX: 00007f1665b35fa0 RCX: 00007f166597d25c [ 328.564356][T12166] RDX: 000000000000000f RSI: 00007f16667210a0 RDI: 0000000000000005 [ 328.572333][T12166] RBP: 00007f1666721090 R08: 0000000000000000 R09: 0000000000000000 [ 328.580306][T12166] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 328.588276][T12166] R13: 0000000000000000 R14: 00007f1665b35fa0 R15: 00007ffcfbdda238 [ 328.596272][T12166] [ 328.954141][T12108] chnl_net:caif_netlink_parms(): no params data found [ 329.069130][ T7271] hsr_slave_0: left promiscuous mode [ 329.078948][ T7271] hsr_slave_1: left promiscuous mode [ 329.093016][ T5855] Bluetooth: hci1: command tx timeout [ 329.100468][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.112514][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.132529][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.173997][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.206293][ T7271] veth1_macvtap: left promiscuous mode [ 329.220848][ T7271] veth0_macvtap: left promiscuous mode [ 329.233109][ T7271] veth1_vlan: left promiscuous mode [ 329.238424][ T7271] veth0_vlan: left promiscuous mode [ 329.872496][ T7271] team0 (unregistering): Port device team_slave_1 removed [ 329.917030][ T7271] team0 (unregistering): Port device team_slave_0 removed [ 330.368439][T12216] netlink: 'syz.4.1949': attribute type 9 has an invalid length. [ 330.393096][T12216] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.1949'. [ 330.550994][T12222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1950'. [ 330.589099][T12108] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.602285][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.643683][T12108] bridge_slave_0: entered allmulticast mode [ 330.662061][T12108] bridge_slave_0: entered promiscuous mode [ 330.699741][T12108] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.729107][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.754168][T12108] bridge_slave_1: entered allmulticast mode [ 330.772406][T12108] bridge_slave_1: entered promiscuous mode [ 330.917000][T12108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.953391][T12108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.135790][T12108] team0: Port device team_slave_0 added [ 331.161288][T12108] team0: Port device team_slave_1 added [ 331.176976][ T5855] Bluetooth: hci1: command tx timeout [ 331.294766][T12265] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 331.297951][T12108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.319389][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.353736][T12108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.372449][T12108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.380309][T12108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.418181][T12108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.529259][T12108] hsr_slave_0: entered promiscuous mode [ 331.537605][T12108] hsr_slave_1: entered promiscuous mode [ 331.548868][T12276] veth0_to_team: entered promiscuous mode [ 331.556779][T12276] veth0_to_team: entered allmulticast mode [ 331.668090][T12287] netlink: 'syz.0.1967': attribute type 9 has an invalid length. [ 331.676148][T12287] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.1967'. [ 332.137603][T12318] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1974'. [ 332.401623][T12108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.428576][T12328] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1977'. [ 332.445938][T12108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.507299][T12331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1979'. [ 332.553365][T12108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.672843][T12108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.925659][T12108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.963129][T12108] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.991884][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.999084][ T7271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.053927][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.061542][ T7271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.184295][T12371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.233850][T12371] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 333.253928][ T5855] Bluetooth: hci1: command tx timeout [ 333.555695][T12108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.787025][T12108] veth0_vlan: entered promiscuous mode [ 333.854104][T12108] veth1_vlan: entered promiscuous mode [ 333.890066][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 333.901132][T12402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1991'. [ 333.917039][T12402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1991'. [ 333.950767][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1991'. [ 334.024145][T12108] veth0_macvtap: entered promiscuous mode [ 334.046193][T12108] veth1_macvtap: entered promiscuous mode [ 334.094338][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.133182][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.163351][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.196404][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.216119][T12108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.227289][T12416] siw: device registration error -23 [ 334.236986][T12416] netlink: 'syz.4.1993': attribute type 4 has an invalid length. [ 334.249961][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.268981][T12416] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1993'. [ 334.280283][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.298936][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.321845][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.348315][T12108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.378206][T12108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.414840][T12108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.473680][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1995'. [ 334.507921][T12108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.531048][T12431] nbd: nbd0 already in use [ 334.550179][T12108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.574332][T12108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.593682][T12108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.789858][T12443] openvswitch: netlink: Actions may not be safe on all matching packets [ 334.817774][T12447] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 335.000851][ T3600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.032454][ T3600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.190455][ T3600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.217406][ T3600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.252863][ T5855] Bluetooth: hci0: command tx timeout [ 335.271213][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.326966][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.335159][ T5855] Bluetooth: hci1: command tx timeout [ 335.420086][ T3600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.458987][ T3600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.517379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.546603][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.658037][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.668635][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.678000][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.692253][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.714406][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.722116][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.751282][ T3600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.821095][ T3600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.997946][T12241] ================================================================== [ 336.006046][T12241] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 336.014226][T12241] Read of size 8 at addr ffff8880247ad308 by task kbnepd bnep0/12241 [ 336.022321][T12241] [ 336.024665][T12241] CPU: 0 UID: 0 PID: 12241 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 336.035648][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 336.045720][T12241] Call Trace: [ 336.049015][T12241] [ 336.051960][T12241] dump_stack_lvl+0x241/0x360 [ 336.056670][T12241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.061893][T12241] ? __pfx__printk+0x10/0x10 [ 336.066503][T12241] ? _printk+0xd5/0x120 [ 336.070680][T12241] ? __virt_addr_valid+0x183/0x530 [ 336.075809][T12241] ? __virt_addr_valid+0x183/0x530 [ 336.080940][T12241] print_report+0x169/0x550 [ 336.085490][T12241] ? __virt_addr_valid+0x183/0x530 [ 336.090621][T12241] ? __virt_addr_valid+0x183/0x530 [ 336.095758][T12241] ? __virt_addr_valid+0x45f/0x530 [ 336.100892][T12241] ? __phys_addr+0xba/0x170 [ 336.105410][T12241] ? device_for_each_child+0xbb/0x1b0 [ 336.110807][T12241] kasan_report+0x143/0x180 [ 336.115315][T12241] ? device_for_each_child+0xbb/0x1b0 [ 336.120693][T12241] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 336.126145][T12241] device_for_each_child+0xbb/0x1b0 [ 336.131338][T12241] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.137665][T12241] ? __pfx_device_for_each_child+0x10/0x10 [ 336.143468][T12241] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.148680][T12241] ? lockdep_hardirqs_on+0x99/0x150 [ 336.153878][T12241] pm_runtime_set_memalloc_noio+0x114/0x260 [ 336.159769][T12241] netdev_unregister_kobject+0x178/0x250 [ 336.165414][T12241] unregister_netdevice_many_notify+0x1851/0x1da0 [ 336.171857][T12241] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 336.178626][T12241] ? do_raw_spin_unlock+0x13c/0x8b0 [ 336.183831][T12241] ? __mutex_lock+0x52a/0xd70 [ 336.188509][T12241] unregister_netdevice_queue+0x303/0x370 [ 336.194246][T12241] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 336.200491][T12241] ? down_write+0x18c/0x220 [ 336.205004][T12241] ? __pfx_down_write+0x10/0x10 [ 336.209865][T12241] unregister_netdev+0x1c/0x30 [ 336.214634][T12241] bnep_session+0x2e0e/0x3000 [ 336.219328][T12241] ? __pfx_bnep_session+0x10/0x10 [ 336.224357][T12241] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.230690][T12241] ? __pfx_woken_wake_function+0x10/0x10 [ 336.236326][T12241] ? __kthread_parkme+0x169/0x1d0 [ 336.241351][T12241] ? __pfx_bnep_session+0x10/0x10 [ 336.246368][T12241] kthread+0x2f0/0x390 [ 336.250427][T12241] ? __pfx_bnep_session+0x10/0x10 [ 336.255465][T12241] ? __pfx_kthread+0x10/0x10 [ 336.260048][T12241] ret_from_fork+0x4b/0x80 [ 336.264468][T12241] ? __pfx_kthread+0x10/0x10 [ 336.269056][T12241] ret_from_fork_asm+0x1a/0x30 [ 336.273825][T12241] [ 336.276837][T12241] [ 336.279156][T12241] Allocated by task 12108: [ 336.283563][T12241] kasan_save_track+0x3f/0x80 [ 336.288238][T12241] __kasan_kmalloc+0x98/0xb0 [ 336.292820][T12241] __kmalloc_noprof+0x1fc/0x400 [ 336.297669][T12241] hci_alloc_dev_priv+0x27/0x2030 [ 336.302698][T12241] vhci_create_device+0x116/0x6a0 [ 336.307725][T12241] vhci_write+0x3cf/0x490 [ 336.312044][T12241] vfs_write+0xaeb/0xd30 [ 336.316276][T12241] ksys_write+0x183/0x2b0 [ 336.320596][T12241] do_syscall_64+0xf3/0x230 [ 336.325100][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.330992][T12241] [ 336.333306][T12241] Freed by task 12108: [ 336.337358][T12241] kasan_save_track+0x3f/0x80 [ 336.342026][T12241] kasan_save_free_info+0x40/0x50 [ 336.347074][T12241] __kasan_slab_free+0x59/0x70 [ 336.351836][T12241] kfree+0x1a0/0x440 [ 336.355729][T12241] hci_release_dev+0x1525/0x16b0 [ 336.360668][T12241] bt_host_release+0x83/0x90 [ 336.365261][T12241] device_release+0x99/0x1c0 [ 336.369868][T12241] kobject_put+0x22f/0x480 [ 336.374287][T12241] vhci_release+0x88/0xd0 [ 336.378616][T12241] __fput+0x23f/0x880 [ 336.382597][T12241] task_work_run+0x24f/0x310 [ 336.387204][T12241] do_exit+0xa2f/0x28e0 [ 336.391350][T12241] do_group_exit+0x207/0x2c0 [ 336.395939][T12241] __x64_sys_exit_group+0x3f/0x40 [ 336.400955][T12241] x64_sys_call+0x2634/0x2640 [ 336.405631][T12241] do_syscall_64+0xf3/0x230 [ 336.410142][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.416038][T12241] [ 336.418351][T12241] Last potentially related work creation: [ 336.424057][T12241] kasan_save_stack+0x3f/0x60 [ 336.428743][T12241] __kasan_record_aux_stack+0xac/0xc0 [ 336.434120][T12241] insert_work+0x3e/0x330 [ 336.438445][T12241] __queue_work+0xb66/0xf50 [ 336.442949][T12241] queue_work_on+0x1c2/0x380 [ 336.447539][T12241] process_scheduled_works+0xa63/0x1850 [ 336.453085][T12241] worker_thread+0x870/0xd30 [ 336.457695][T12241] kthread+0x2f0/0x390 [ 336.461754][T12241] ret_from_fork+0x4b/0x80 [ 336.466172][T12241] ret_from_fork_asm+0x1a/0x30 [ 336.470988][T12241] [ 336.473336][T12241] Second to last potentially related work creation: [ 336.479916][T12241] kasan_save_stack+0x3f/0x60 [ 336.484608][T12241] __kasan_record_aux_stack+0xac/0xc0 [ 336.489987][T12241] insert_work+0x3e/0x330 [ 336.494318][T12241] __queue_work+0xc8b/0xf50 [ 336.498828][T12241] call_timer_fn+0x18e/0x650 [ 336.503416][T12241] __run_timer_base+0x695/0x8e0 [ 336.508262][T12241] run_timer_softirq+0xb7/0x170 [ 336.513125][T12241] handle_softirqs+0x2c5/0x980 [ 336.517884][T12241] __irq_exit_rcu+0xf4/0x1c0 [ 336.522471][T12241] irq_exit_rcu+0x9/0x30 [ 336.526717][T12241] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 336.532345][T12241] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.538320][T12241] [ 336.540634][T12241] The buggy address belongs to the object at ffff8880247ac000 [ 336.540634][T12241] which belongs to the cache kmalloc-8k of size 8192 [ 336.554680][T12241] The buggy address is located 4872 bytes inside of [ 336.554680][T12241] freed 8192-byte region [ffff8880247ac000, ffff8880247ae000) [ 336.568646][T12241] [ 336.570959][T12241] The buggy address belongs to the physical page: [ 336.577363][T12241] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x247a8 [ 336.586118][T12241] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 336.594613][T12241] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 336.602161][T12241] page_type: f5(slab) [ 336.606133][T12241] raw: 00fff00000000040 ffff88801ac42280 ffffea0000924e00 0000000000000004 [ 336.614711][T12241] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 336.623292][T12241] head: 00fff00000000040 ffff88801ac42280 ffffea0000924e00 0000000000000004 [ 336.631955][T12241] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 336.640618][T12241] head: 00fff00000000003 ffffea000091ea01 ffffffffffffffff 0000000000000000 [ 336.649277][T12241] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 336.657936][T12241] page dumped because: kasan: bad access detected [ 336.664345][T12241] page_owner tracks the page as allocated [ 336.670053][T12241] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11924, tgid 11886 (syz.1.1868), ts 323631738984, free_ts 323532293896 [ 336.691575][T12241] post_alloc_hook+0x1f3/0x230 [ 336.696346][T12241] get_page_from_freelist+0x3649/0x3790 [ 336.701884][T12241] __alloc_pages_noprof+0x292/0x710 [ 336.707077][T12241] alloc_pages_mpol_noprof+0x3e8/0x680 [ 336.712530][T12241] alloc_slab_page+0x6a/0x140 [ 336.717198][T12241] allocate_slab+0x5a/0x2f0 [ 336.721690][T12241] ___slab_alloc+0xcd1/0x14b0 [ 336.726367][T12241] __slab_alloc+0x58/0xa0 [ 336.730693][T12241] __kmalloc_noprof+0x25a/0x400 [ 336.735543][T12241] ops_init+0x75/0x590 [ 336.739604][T12241] setup_net+0x287/0x9e0 [ 336.743839][T12241] copy_net_ns+0x33f/0x570 [ 336.748249][T12241] create_new_namespaces+0x425/0x7b0 [ 336.753537][T12241] unshare_nsproxy_namespaces+0x124/0x180 [ 336.759260][T12241] ksys_unshare+0x57d/0xa70 [ 336.763756][T12241] __x64_sys_unshare+0x38/0x40 [ 336.768512][T12241] page last free pid 11932 tgid 11932 stack trace: [ 336.775001][T12241] free_unref_page+0xdf9/0x1140 [ 336.779857][T12241] __put_partials+0xeb/0x130 [ 336.784452][T12241] put_cpu_partial+0x17c/0x250 [ 336.789215][T12241] __slab_free+0x2ea/0x3d0 [ 336.793627][T12241] qlist_free_all+0x9a/0x140 [ 336.798214][T12241] kasan_quarantine_reduce+0x14f/0x170 [ 336.803666][T12241] __kasan_slab_alloc+0x23/0x80 [ 336.808511][T12241] kmem_cache_alloc_noprof+0x135/0x2a0 [ 336.813971][T12241] getname_flags+0xb7/0x540 [ 336.818473][T12241] user_path_at+0x24/0x60 [ 336.822803][T12241] do_faccessat+0x5e2/0xb80 [ 336.827307][T12241] do_syscall_64+0xf3/0x230 [ 336.831805][T12241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.837694][T12241] [ 336.840010][T12241] Memory state around the buggy address: [ 336.845634][T12241] ffff8880247ad200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.853699][T12241] ffff8880247ad280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.861768][T12241] >ffff8880247ad300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.869825][T12241] ^ [ 336.874144][T12241] ffff8880247ad380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.882202][T12241] ffff8880247ad400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.890253][T12241] ================================================================== [ 336.903351][T12241] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.910657][T12241] CPU: 0 UID: 0 PID: 12241 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 336.921602][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 336.931668][T12241] Call Trace: [ 336.934967][T12241] [ 336.937918][T12241] dump_stack_lvl+0x241/0x360 [ 336.942620][T12241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.947839][T12241] ? __pfx__printk+0x10/0x10 [ 336.952456][T12241] ? preempt_schedule+0xe1/0xf0 [ 336.957333][T12241] ? vscnprintf+0x5d/0x90 [ 336.961689][T12241] panic+0x349/0x880 [ 336.965601][T12241] ? check_panic_on_warn+0x21/0xb0 [ 336.970726][T12241] ? __pfx_panic+0x10/0x10 [ 336.975166][T12241] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 336.981168][T12241] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.987516][T12241] ? print_report+0x502/0x550 [ 336.992227][T12241] check_panic_on_warn+0x86/0xb0 [ 336.997188][T12241] ? device_for_each_child+0xbb/0x1b0 [ 337.002590][T12241] end_report+0x77/0x160 [ 337.006857][T12241] kasan_report+0x154/0x180 [ 337.011398][T12241] ? device_for_each_child+0xbb/0x1b0 [ 337.016803][T12241] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 337.022280][T12241] device_for_each_child+0xbb/0x1b0 [ 337.027486][T12241] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.033840][T12241] ? __pfx_device_for_each_child+0x10/0x10 [ 337.039671][T12241] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.044893][T12241] ? lockdep_hardirqs_on+0x99/0x150 [ 337.050121][T12241] pm_runtime_set_memalloc_noio+0x114/0x260 [ 337.056037][T12241] netdev_unregister_kobject+0x178/0x250 [ 337.061695][T12241] unregister_netdevice_many_notify+0x1851/0x1da0 [ 337.068141][T12241] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.074933][T12241] ? do_raw_spin_unlock+0x13c/0x8b0 [ 337.080175][T12241] ? __mutex_lock+0x52a/0xd70 [ 337.084901][T12241] unregister_netdevice_queue+0x303/0x370 [ 337.090663][T12241] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.096928][T12241] ? down_write+0x18c/0x220 [ 337.101451][T12241] ? __pfx_down_write+0x10/0x10 [ 337.106311][T12241] unregister_netdev+0x1c/0x30 [ 337.111080][T12241] bnep_session+0x2e0e/0x3000 [ 337.115775][T12241] ? __pfx_bnep_session+0x10/0x10 [ 337.120800][T12241] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.127126][T12241] ? __pfx_woken_wake_function+0x10/0x10 [ 337.132769][T12241] ? __kthread_parkme+0x169/0x1d0 [ 337.137798][T12241] ? __pfx_bnep_session+0x10/0x10 [ 337.142814][T12241] kthread+0x2f0/0x390 [ 337.146876][T12241] ? __pfx_bnep_session+0x10/0x10 [ 337.151894][T12241] ? __pfx_kthread+0x10/0x10 [ 337.156477][T12241] ret_from_fork+0x4b/0x80 [ 337.160899][T12241] ? __pfx_kthread+0x10/0x10 [ 337.165483][T12241] ret_from_fork_asm+0x1a/0x30 [ 337.170252][T12241] [ 337.173384][T12241] Kernel Offset: disabled [ 337.177713][T12241] Rebooting in 86400 seconds..