last executing test programs: 4.709368849s ago: executing program 4 (id=5557): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x20040000) 4.42161972s ago: executing program 4 (id=5560): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000500000018f400"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008da6100010000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x3, 0xfffffffa, 0x1}, 0x10, 0x175f, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, r1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xbf9d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg(r6, &(0x7f0000000980)=[{{&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xfffff5a2, @mcast2, 0x5}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="97763e539e1bdec9e3bea7967189b9b57d61dbd055d72f4c3a433611cab23faefab9a295cf6b9d293337b8837d2a99c30f32091379cefc5f8799e596c55d548852be65719f6a8df97f64f41c7a78e6f18586200f88fda6fdd4f1abcb3a1b102f729032a21509fee04397bc33fd7df4d4870c8c22cdeebdcc606b67d014ac10f07bd995ca763d7b3fe2bddde1f66486af99f41bc1d13e7fd5b9d6ed731d6f85fb5a35a45c3c9ad392c2ceda87804c8412ba821abb1a980ca939daea311f99ad4a35a8d61eda9d6405b6d452d124b360bc3c7648d9afca2f8c5f849fd36498f113", 0xe0}, {&(0x7f0000000040)="b7d48cb08414e20b9bf1479d26f165456baf01127ec3f4b2c71a3b8b8ee65ed6f64a7198d097f32cd9782cd110b985e4cc3cdf7ea566c4", 0x37}], 0x2}}, {{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="72611dfcb359da136c9cc36f15032888936f286f84cd232cc9", 0x19}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000800)=ANY=[@ANYBLOB="c18daf70d7f57f6bce25c0fb6d3c7ec33cd16b344348be81db20afcd5c81bdba7418a23b940b409ffeac75417a4fe31ca4e6f095077e9a0ff46f37a4edf036752c3b4514521a67653fc18fe3769e6c22690d5fcf76af7d41d0535047c85bb2214ede9cd51a4afc6ad31273110584", @ANYRES32=r0, @ANYRES16=r6], 0x6f4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x4c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_NAME={0x9, 0x1, 'snmp\x00'}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xaa58}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x88}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r3], 0x1b4}}, 0x10) 3.606260031s ago: executing program 0 (id=5575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x4, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x5d}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002900)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000dc0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) (async) r7 = getpid() sendmsg$unix(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f0000002880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="06000000100000000000000001000000010000004ee69226c8a2fd79b4c2e1f3c5faa9f93695cc1b76a17697231d30fe6a168af231de"], 0x30}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10d, 0x0, 0x1, [@generic]}]}]}, 0x24}], 0x1}, 0x0) ioctl$TUNSETOWNER(r8, 0x400454cc, r11) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) (async) r14 = gettid() ioctl$sock_SIOCSPGRP(r13, 0x8902, &(0x7f0000000000)=r14) (async) listen(r9, 0x4) r15 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r15, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r16}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002740)=0x0) sendmsg$netlink(r0, &(0x7f0000002840)={&(0x7f0000000080), 0xc, &(0x7f0000002600)=[{&(0x7f0000000300)={0x348, 0x2c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@generic="69ea7a9c98603386a337ecf8d63b9fefe43ded6261d5536feb389addf9f0d1deb8cefb97e336f8c6a51f3188023d51399b3e846adb6c0bae0583726d6b847009a78fa9563a3d07db8ca55f43b85d4eb64bea6151641d3752aee3f6b6078b138220cc22b5e02d6b67748a8429d561a94cf0944f38347b9fe9676871fd521e53868ba150ca0e76f30db41af1aac1cb5e0482fa2f12ba5f1f5704bc3b5145c164d5799719c86e2ade4420f4c72f0f3c4463bbefb65506", @nested={0x1c5, 0x7, 0x0, 0x1, [@generic="44b00acf6f3d6d1d74de5f8414cf0d7fb093d3d26ca0b5cd2917c577da7ecfe1277d88328f8dacdd80f0a010ec84c378016f90399b999cfd70f79fcf7d7837e2937ee6708a4504e87e58a83e0ba509662034a68596a54a8820f142d996d4bced6bfcf7b5936a9a6b996659f79089341d5a35214e6b8102e49b7d2cd6aa4b0e4c4e2880736966fd0420607624202bdb1c0d5debd574a37db1ebfc6fb0394e7662d0c5c6686ba433d740c5ddff77a80020e08af926", @typed={0x8, 0x151, 0x0, 0x0, @uid=r2}, @nested={0x4, 0x16}, @generic="947788e6dea9d28f2d7d067982f3d83f3ca6502226bd6d50c2dcf19787637d7ac66e4578be6a8c2397e0a259074315513cc40af0b353ddf0d9f1c090bc64de96c9e1c8b71e660ad5545efc71f9b09af233f0842968fe37af1d5d2aff79125aa9c1af79f9926aeeaa57bf3e063010b7f9aed1f9a6d701bf02c26f56baaab1925b0a8f86c8310994bb40993450262b9202ed5f6e3dfa34511684b686fa294ab9ebf8c94b0b63bbb6e7c52eda684ee77e01e24200e3b862b2b5cfd34d983439ad8a348396653cd3e257e68a391bc3d448dc0aae991337c1a09b53a315066de7b3cbbc82d4758b1f61235f46c3cb798f74341f1bf59ba8", @nested={0x4, 0x10}, @nested={0x4, 0xb}, @nested={0x4, 0x42}]}, @nested={0xb7, 0x53, 0x0, 0x1, [@generic="89f1911aa74941a21cf23e80e53c2c088d5ac3edd6a423c799b44f0a0e3cd236334fb25d90e2565bfb9801ea20da785abb1d7ed478f2ab273d3dfb19d5277fb208ce56f8628f42e413b86ba67575854a9a7c4c52acf27807f952df3d05559f2a86b288054ae643e2de7508d8890099de1e6727a5056303028cf3d652305226036dc212b62cf222af59c94bdd9b44c79f613f48eef4e8090dbe349e70a9ec3d", @typed={0x8, 0x12b, 0x0, 0x0, @uid=r3}, @nested={0x4, 0xec}, @typed={0x8, 0x49, 0x0, 0x0, @ipv4=@remote}]}]}, 0x348}, {&(0x7f0000000680)={0x4e8, 0x1b, 0x1, 0x70bd26, 0x25dfdbfe, "", [@generic="564eec013adbc92528b30de9e8911be722d931603db51ce4fa97af6ac0473022ad5d982625ef5376e375d56f8e8a2e8316e763aa90ed33f6c5f0207f911741a8f12d797306b8222c4b4afcdbf2749fff7c7aa169f84e3d20589032eaf916a5628e", @generic="ed33efd7bd142df505f9bb1c4b8ea347f609f207778c79c6dba3a8c0753fe9a1401fffe8f3bc86a2775db49c7e27c7d659bb243b1ce06fe12c6c3509038bfb5694d7328e0b97082dfa1919c5b8e370694fc43fdfc3ff64c2532db87a9bfacdd191149f1cfed4e8b73fac10d038a8d2737dd451d250d00364228b60efb3068d35f5d498e0de42ad3f4af8c0800d788e5125c7c21d3c7e240b82395e44589bb2346ecfeea0231429025a7f275d3d61fc8615719c69c17c5622ef5579ceb3de5c05d5c9d47e075add733639d6a556cc788ec2ce7eafeff47d732b6eb7171de3e65f3a3c679953f5478416ea5e", @generic="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", @nested={0x114, 0xe6, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}, @nested={0x4, 0xaf}, @generic="c35cbee0f539348a056b6da3bf6f1a795c4750a957cf012dcd4e220233db54ad745ddf906e3cd3667c3bc7266763a326eeed9e166b3a02f53d932c1c83c4ff3b15c9730e6c4e94eea4cbb62fc2085349f3601e5dfa483ddfcffb81c27de18f25eeaef7806c6b14c4ed695926c2cb4652a96fdeb82b6e6032e1bebc5ef554e72962bbdae8b536e735a93022406f30fa31af621d6fd88fe7713ecd244cfe776a6bd5cbe514485175f5a969131057d85c425df869ed8ba2b61eaaf668fab9bb02c6439814d28e20d3bca17cdf9f94abac86800db952e37ef9344eb04a91ab25b761bdf60695b9f8ee5b476a992aa9621e8f81ff898816f0ef14", @typed={0x8, 0xed, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x113}]}, @nested={0x18, 0xc8, 0x0, 0x1, [@typed={0x9, 0x2e, 0x0, 0x0, @str='syz2\x00'}, @nested={0x4, 0x8f}, @nested={0x4, 0x13d}]}, @nested={0x15d, 0xe7, 0x0, 0x1, [@generic="63ace5641550daadd96b1687d18ab49728570c0d3e3c969a3eac5c8df0b9e0cc2f2e5fc886c1eef74494f143617750285db63fa4b14d7337520b3ae2aa4e91b6a6c3151adefd9eb32a9f33c2cec264c155f0eb89bf8c1648c270a1e0f86787cb1fdf66dc6f57b43224178396fc117764c8509fec0b4d01b6b1899729c24f632ff2d151d654076ccb41f5de3701d8d005f98779d7af5c39c2cccacc364489391d8db85259ec8ad0ad13052837e259cbb7c694ab49321400557c9f2c9e21e8377cd7da6077a85ef0692b214c7605f2bdbcf5", @nested={0x4, 0x73}, @nested={0x4, 0xc4}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0xfd1}, @generic="940d7a6d50ce0a88aa09e988406db30487952a", @generic="5b69175208d4c0f42735b36731295ab5c4f5a62e0f7118eb48b20a3b1e5ef6b333ac6a27efed25921d3381905acdb1521d9b4a6bc13512727368d4adf0169c26a44a8fcb49a105f2fd1e005220c90aa2a0", @typed={0x4, 0xec}, @nested={0x4, 0xd5}, @typed={0x4, 0x8, 0x0, 0x0, @binary}, @typed={0x8, 0x14d, 0x0, 0x0, @u32=0x1}]}]}, 0x4e8}, {&(0x7f0000000b80)={0x220, 0x26, 0x400, 0x70bd27, 0x25dfdbfc, "", [@generic="d6718a1444ebd0031bc0384070af090a3978563f173c0a9cefab2e06c9e971b6f044656e3f5b40c0d77d700dbaeb9c16d5fe14ce9c7483b0bcff37206b9de8b3a12e044ee36e28aa7053ace9a72f77472ec1de0b8c162c1581e49d88abd7c41448b4ec32afa012a23a0f4911d5bd6789f02e2a8ea508ec7856df840e96abc004b1", @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0x59, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x140, 0x0, 0x0, @u32=0x8}, @nested={0x114, 0xc9, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @fd=r0}, @generic="a9be37f3f41af6efc0a32e2d0f7ab6df71b676620630b326be0b9bbda862c0152a39f69514cf828e19d258f98e791491bd1e7687437306faa39cd3c4d2755e966145a2818cb2eafa90d3dffbdc8a4faa4684074b92cee330df9aee6a3e6a1b15ca791e0d8ba3b4b596f4082acf275801586c2196b6e5361a793655ae474d783763e4c3a5499cf1cdd2deac4f218e39866a7d7f5737ce5ba27b6894b9c96c629d4eb817d21c42347bb5fd371d3424a0f4ae373569afedc30b06593850bfa295f2", @nested={0x4, 0x4}, @generic="c5b49b958bbea45624e0db8b0d5e436aeaddb879db187515117bd6fa37892628a0db419cc1cd1f5d5c055c6d48f665af3616c6bda683469b10076cb58bf16e79", @nested={0x4, 0x5b}]}, @typed={0x8, 0x105, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x10c, 0x0, 0x0, @u32=0x9}, @generic="17c3e018fc55cad5542223746a6ee2d1a996022e8295d124fc72171f4497ddfe676d7eeb043ceaca8a0a475265a294083fc39e1d4baf2155ff"]}, 0x220}, {&(0x7f0000000ec0)={0x378, 0x36, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="50c3741a6f0365d5248cec1e85fd2fdba1f88e78ee508d4fee6652140c1c48f23c6932e8f169e60e2ea9ee0cda7ec3f07960ee121dbcd81ef88128869ab51fd141b2c2a04089f4ad8bb35022a6f7561c8c588b7e52845e23509461c17954532e804a883924ffe26a9b082e4ca779e4973c0953bf238a7152f7099e440c192ce68d5fe70fcef60dfe89f3ee5e9c5d27426123cf56078727d860a751fca8e814bf78ee2a43312f8543ba2726f03bd8dda6ba08ed48a77267b2aff373010341bca37b67cef6239d8bc1e59fa0442ebf", @nested={0x18, 0xd3, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x5e}, @typed={0x6, 0xa9, 0x0, 0x0, @str='-\x00'}]}, @generic="ef1944a51b169c04920442e6e36e7ce433744a4ba98ac99ed69f008865ff9d5427f6fb545d24945cbaaea5f0d62d77a829efa53bbe311ad80fe59729f3470aeb1359f46a446f5d9b95b8dad84ecb7ff59ef548ddb87ff2e912c2ee70", @generic="0b490ed65ca4b7bdea58dbc30237759385d2cdc77b181e8b66f2d6e88a975131c8863adfbc3d3c456b1903fdd29730772548c3555b39bc4aa18e34e2b1021d8b9f71efa363618c33e3b77ad4673be4e17bdc83cb9937987952ec6572c7436973bccc054d3de7c75862f9b8c2005344e1e68f966ffccb581e7b668316a35c", @generic="08ce8d462bf8b998a75961d13f6bc7a96d7227ffc530474a46b64dee8555a06ea26f7e9093c0d0fc960871a0fc11e0f9f1f858074438624b25e8038457868addd5c1369006429bd0524efa89fe1e2abd2688b31d874403fadd971022cbc0133e20f74068b0d8a01e3de409231612cc081b", @generic="f9bd5eae28e4a7402a62d89b3d9132b110a0715cd020f1975f021bfdcf3a88374ab7d47ac276d3442abe0f49a4a40e793eb95e155aa0629bdab9f8281fa3c63847bc8fc9ca3c53923458aacc787744a0e473e14984f8d0ebe04fc50483082bacb721b0be550972de0680f1faa7c2102b8046676f5feaef65b5a106d0e40f67710d3ecedf89d1186a5150ecc9fa4f0f5e270f8a4d00a93d3dc94c7c5b4eae89963374a02cff59095444416e086510ee8fcdbc54e5d6079bec8fc98360bc5fe09c7574b305eba6920746000ca75c9a2bd1c1786a7d7dd457d51fc2b71f54580c164d491f1fdd016af1e539aacb", @generic="b4e33db9954b5905467fa2858455430c15346f84de05d499c89e6d6fbc215f94160395c1f1b26bcb8aafa6460c0f88dcdb3bd93f48fcd1a85797fc5642f4ca8ee55bdf138f286866aa72a1"]}, 0x378}, {&(0x7f0000001240)={0x1b0, 0x10, 0x8, 0x70bd25, 0x25dfdbfd, "", [@nested={0x8, 0x13f, 0x0, 0x1, [@nested={0x4, 0x14f}]}, @nested={0x18f, 0x40, 0x0, 0x1, [@nested={0x4, 0xe}, @generic="487487b7e76a8d0bc4cba5ad52a9e8e387a4b09bc875358d50aa491b71b11882e35b405b54ebed4bf112eb23675757a6d3c1453926bc4b8c30aa2528460e404b48cede560386", @typed={0x9, 0xff, 0x0, 0x0, @str='syz2\x00'}, @typed={0xd5, 0x14d, 0x0, 0x0, @binary="019378b316a233bfeee19f380f06e1c6793fd2a95dade2173e638e10e52b87ff4b98488a9b201128f4d4d49fd6046c1ae6777595da7e6660b47a66d84f66e0e7dab6ef231039841ccd4618e31ed7aa9197f65aa675c1ba7dcba7e816295fdaf026398b326a86e0872f79b390a54c77cf530416df68afedc0fb7d0008c80753800929e43f04364f8bdaf372659e90332d14fd0ac8c8475c2a4a9b91af8738efce7f6d5d366762e3a967d6e97ce2a82107faa8e34f40af0f8931d2fc12613c1c7324361ad9094595eeadd1f08fbcfcba3511"}, @generic="6ff6769ec90cd326ac6118b1c7c52a21640d9d5b2a6b8fb66e2b3aad83805dd46a5fcc7baa0632ad607ed618f83538f1e2eb4d2abe07b42df47b3ed041ff93fe816e7778d3acaf32e120829417eaccb547282cf35bcd39105e", @nested={0x4, 0x17}]}, @typed={0x8, 0xf1, 0x0, 0x0, @uid}]}, 0x1b0}, {&(0x7f0000001400)={0x11d4, 0x2a, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x4, 0x7e}, @typed={0x8, 0x32, 0x0, 0x0, @u32=0x3}, @generic="06ebd4b493e64b425f14b7cfae3fddd92ffebc55a1c51e8a51f5d880ed8f9ac71737e617cfd8cd9b1bf447a394d574161cf9c4fec634e6bc929c3fdda5b8b8609e1739d8788d578e57af02cf106619f0c7a77b19fa9aea2f6dc95b46013e18dbc0c56dc10561cbeee9d44cc6a53618e9fcb6a0c1656aeaebdf2e2b7129fcaf1a90e82386b3c1ab6d7e329696452fb8cdb0d7d67e2b96eb81497381639b3a0407d9b5e1c8cd3da7174178d2521ba2dc795ba6d4c6dcdcda6fe5d8259dd417ea36c706685ecae37d84648f92d77607448be5f134e4a2b1188747ba14126c6c0e046fc765aa46edc237cb599b2842f7dbe23fbe93b61a2ae618ff", @typed={0x4, 0x44}, @generic="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", @nested={0xb8, 0x10, 0x0, 0x1, [@generic="64a3ecb21eea84c5f890dd3a6fc086a63585fc1e45bf1233afe8645e708e1f9b2b3de7e2351a97ceb35194", @generic="3539c31b35cf8e23f800cd6c71f41534d9c2945e250e840ead58e200e1f60338124dee2764f12ac15fab6310f9a68fad9626b934802f2b10d89833416c46eb0c660e3af13de83d3b7bd829666ec261ad65798a2dfaba195f4b483e21", @nested={0x4, 0x12b}, @generic="e310143ba655c166441995718f5a76b7a68c8ca420032c6cab23b31ab6a0ba34a8bf1d0cff46bf5212"]}]}, 0x11d4}], 0x6, &(0x7f0000002780)=[@cred={{0x1c, 0x1, 0x2, {r7, r11, r12}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r18}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8, 0xc000}, 0x20008000) 3.521370171s ago: executing program 0 (id=5577): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x7ff, './file0\x00'}}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x33}, 0x2c) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x5, r4, 0x1, 0x40, 0x6, @remote}, 0x14) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x3f3, 0xf7a0, 0x1, 0x10000, r0, 0x0, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xa, @void, @value, @value=r8}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @loopback, 0x4e23, 0x3, 'ovf\x00', 0x12, 0x3, 0x1821}, {@loopback, 0x4e20, 0x10000, 0x800008, 0x104522a0, 0x12d5c}}, 0x44) 3.473775902s ago: executing program 4 (id=5579): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r5, 0x1, {0x1, 0x1, 0x1}, 0x9796ef04c0904618}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r9, 0x84, 0x81, 0x0, &(0x7f0000001200)) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) pipe(0x0) 2.54709271s ago: executing program 4 (id=5591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000001740), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socketpair(0x2f, 0x2, 0x84a, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f00000016c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="04002dbd7000fbdbdf25130000000c009900ed0a00001f0000000a000600ffffffffffff00000500c20032000000050029000a0000000a00060008021100000100000c0011800400010004000100060010001f060000"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) r6 = socket(0x28, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) sendmsg$can_j1939(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)="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", 0x1000}}, 0x8081) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x58, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x0, 0x4}}, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x8}}, @void}}]]}, 0x58}}, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x8b) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES64=r2, @ANYRESHEX=r6, @ANYRES32=r4, @ANYRES64=0x0], 0x24}}, 0x0) 2.226111544s ago: executing program 4 (id=5595): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x7f, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x93, "07ba7c9c89824f6818aa6b8e536e6082c01cd6120adae84187c86f217b0501ffdb6a4b6e46f45756bfe178fe448ed384ba00bb8fd36f1f41587b69d08f54eac008bf1ecb2357a65864f78328d04d3c224753b90217db01b76c7a48f543d22f82fcb7cab677f94c596c4a9c2742baf23d02631e20b51c2a507e82c461d740fd22fed28f215e4b59180cfa47a0be9f1303ec475d"}, &(0x7f00000001c0)=0x9b) sendto$inet6(r0, &(0x7f0000000200)="7cf10701e930cd1613629178ce052ecfc75486f474e48870c49cbd25552b224376", 0x21, 0x2000c014, &(0x7f0000000240)={0xa, 0x4e20, 0xfff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001440)={'syztnl2\x00', &(0x7f0000001380)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x2, 0xfffffff8, {{0x20, 0x4, 0x1, 0x1, 0x80, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x3, "a5"}, @noop, @timestamp_prespec={0x44, 0x14, 0x1d, 0x3, 0x5, [{@local, 0x8}, {@empty}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xed, 0x3, 0x0, [{@multicast2, 0x4}, {@multicast2, 0x20}, {@rand_addr=0x64010100, 0xad2}, {@rand_addr=0x64010101}]}, @timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x5, [{@broadcast, 0xf}, {@multicast1, 0x201}, {@local, 0x3}]}, @rr={0x7, 0x13, 0x2f, [@remote, @broadcast, @remote, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001480)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x81, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7, 0x700, 0x0, 0xd9}}) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{&(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x1000}], 0x1, &(0x7f0000001540)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xa0}}, {{&(0x7f0000001600)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001640)="1714d6b0b84ec3069aa0f12ae1f9db48b56383007a34ce2f855f6e4bd3c04a0404d587ac4073d27b1c0e35274668b6e53ed955869adbbd9d21c3e43188df8000f53940d2cba207a482d02ef02e36ce34ba7ee58d8854eecd1ac72ab1329d5893ef0eb672c677896adbfffd663fc3932de5f897656f2fe4", 0x77}, {&(0x7f00000016c0)="52abd26f8e08ce3b43c3c1039ac05d1bbc911aa8722960d6dd6189f017d3b3b5113a48cd44ea5c451423071d6137c6aec42d6daa8729a460242fd29412841a2fcb3fef90e0a9654a6244a80b20525836612de9db3b97e59b6eacb5f94aa90c", 0x5f}, {&(0x7f0000001740)="1d6de6668ab8b03317b5bb66028fd8bdba37804dbcb84f8d5b3d1f9615aac2adbc2ac92510bcb525b67fd841a82b980e2cb18412558fc17b01b4ce3ca8b373a608687705a1b4fdfc49261c1e823d5d08bf47e097503a8d9f74a892a361c9ec84f9b117b3583cdbd985d11f49ab5bf289ae36fa42600190d2a6d1cc9d1857927fd7e8fe7a94dc64ccef1b4757f8e17e38b0e81d73ecf553e6b1c36567777c3a93a993d440527157c9d0f6cf6c2844a826c9e970df0ae385187b8803de270c58940278f1995ce912e1cb8fa906ac23a8700b703c583b8d5594c8cfc5e0c15d38b4ae0b70f125c4c4f435d2c3020e57c6494f8b9b", 0xf3}, {&(0x7f0000001840)="404b4d8be4ad770665d56a30dd3b8672a04da0c784cb8f69e11b7ada1e713cb6d6edd772384dd8ff1ee4edc7b40ac191b66bf6071b", 0x35}, {&(0x7f0000001880)="fb539f61906a70cf50ac43a6eb60ff23fb8799ef0b919c47ce0866287e31a453ace9c26d1c778b6d68a44bf1008322c5f77d271e6d739d13f0f4cb59be600172bd097f566b9365327112afd738ab06e9b24f15b0ae115637b1482169d8673e0a817378b231b4dd18ddde", 0x6a}, {&(0x7f0000001900)="ccb7672d52f9faed224873a29459843e8176ada380fc60781319a7f7f2a48d94f0300c7631054aea65184bb551bb822d85ae56fd87cbd0adac1841769a36ba5dc4cdd6d5db0e64042b67f2", 0x4b}, {&(0x7f0000001980)="5139a0e0bfc47778423956e9", 0xc}, {&(0x7f00000019c0)="231a69be62610298b8de936a13f3f8024ee84b41c833977f7ddc593d1264d4293db79a3880a1a329e8bec47ab651dade0b39aa", 0x33}], 0x8, &(0x7f0000001a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x78}}], 0x2, 0x20000815) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000001b80)={'caif0\x00', 0x3}) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001bc0)={r2, 0x5, 0x66, 0x9}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000001d40)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/177, 0xb1, 0x0, &(0x7f0000001cc0)=""/104, 0x68}, &(0x7f0000001d80)=0x40) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000001dc0), &(0x7f0000001e00)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001e40)={r1, 0x3}, &(0x7f0000001e80)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000001ec0)={0x81, 0x4, 0x3, 0x7, 0x5, 0x2, 0x8a, 0x7, 0x6, 0x2, 0x9, 0x7f, 0x1, 0x9}, 0xe) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x57, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x1000, @val=0x8, @void, @val="5797534d1bb53e0616bfdac4b3ec4ba0"}}, @chsw_timing={0x68, 0x4, {0x3, 0x7}}, @random_vendor={0xdd, 0x25, "5f4b6f2018dc7b214ad4c79a73f7f8674240d180601805a1fe930292970b074d2e504dcbde"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0xa5}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000002080)={r1, 0x2c82, 0x6c, "8ed5e903e9c7f6b8d775c94aa8946aa61b8ff79dc07c5916ab8c1d310420149e507ef30728f2f4e772f92b20acca1dd15550d34663fd11c5826efb8fbf92d70ae96aad24f76b4ad0ddd9a3e17db3976e7d237137f6954be5c0fb0398c62f7f69f0d06238e535b09c9151cd2f"}, 0x74) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000002100), &(0x7f0000002140)=0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002180)={0x0, 0x0}, &(0x7f00000021c0)=0xc) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002340)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002300)={@cgroup=r10, 0x1d, 0x0, 0x101, &(0x7f0000002200)=[0x0], 0x1, 0x0, &(0x7f0000002240)=[0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0]}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r6) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002800)={&(0x7f0000002400)={0x39c, r11, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa85c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x8af, "1f185eb4e8a4", @short="fa6b6c51d82cb7c7"}}]}, @NL80211_ATTR_IE={0x134, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x90, 0xf7}}, @perr={0x84, 0x121, {0x0, 0x11, [{{}, @device_b, 0x3ff, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x3f}, {{0x0, 0x1}, @device_a, 0x1, @value=@broadcast, 0x23}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x35}, {{0x0, 0x1}, @device_b, 0x7, @value=@device_b, 0x1a}, {{0x0, 0x1}, @device_a, 0x0, @value, 0xc}, {{}, @broadcast, 0x4, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x81, @value, 0x26}, {{0x0, 0x1}, @device_b, 0x99, @value=@device_b, 0x2c}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x21}, {{}, @device_b, 0x401, @void, 0x9}, {{}, @device_a, 0x1, @void, 0x7}, {{0x0, 0x1}, @device_a, 0xfffffffb, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@device_b, 0x30}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x1c}, {{}, @device_b, 0x1, @void, 0x1d}, {{}, @device_a, 0x1, @void, 0x21}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0x5, @void, @val=0x28, @void}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x211, 0x2a, [@preq={0x82, 0x6d, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x7, 0x9, 0xb52d, @device_b, 0x7, @value=@device_b, 0x5, 0x5, 0x7, [{{0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @device_a, 0xa0}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x9da8}]}}, @perr={0x84, 0x134, {0x2, 0x12, [{{0x0, 0x1}, @device_b, 0xc46}, {{0x0, 0x1}, @device_b, 0x1ff, @value=@broadcast, 0x35}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x28}, {{}, @broadcast, 0x3, @void, 0x17}, {{}, @device_a, 0x3, @void, 0x34}, {{}, @broadcast, 0x6, @void, 0x6}, {{}, @broadcast, 0x1430, @void, 0x7}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x21}, {{}, @device_a, 0x100, @void, 0x32}, {{0x0, 0x1}, @device_a, 0x53, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x31}, {{0x0, 0x1}, @device_a, 0x8001, @value=@device_b, 0x24}, {{0x0, 0x1}, @broadcast, 0x400, @value, 0x1e}, {{}, @broadcast, 0x7, @void, 0x1e}, {{0x0, 0x1}, @device_a, 0xf0000000, @value, 0xc}, {{0x0, 0x1}, @broadcast, 0xfffffce4, @value, 0x5}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x8}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x17}]}}, @random_vendor={0xdd, 0x5c, "af6edb224b036e51b8b5add6f18932139ba5419985484e8cc4527a2defbd9d90ffc09ad58e61369fe5066850e8c3e2925c971dfcc9766d2374576d741090612383f4b580642e8e28decb3014c73f9242f1f18fd1970be7d63c2f3371"}, @ibss={0x6, 0x2, 0x9}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf3, 0x24, 0x80}}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002880)={{{@in=@empty, @in=@multicast2, 0x4e24, 0x0, 0x4e23, 0x6, 0x2, 0xa0, 0xa0, 0x84, r5, r9}, {0x3, 0x1e, 0x2e5b, 0x4, 0x6, 0x5, 0x4, 0x6}, {0x80000001, 0x4, 0x7, 0x800}, 0x7fffffff, 0x6e6bbb, 0x1, 0x0, 0x2, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x2b}, 0x2, @in=@empty, 0x3507, 0x0, 0x2, 0xff, 0x200, 0x2, 0x9}}, 0xe8) 1.573259766s ago: executing program 1 (id=5606): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000072e, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0xd, 0xd, 0x6, 0x2, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @jmp={0x5, 0x0, 0x0, 0xb, 0x4, 0xbdbb73f947694df1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.48096872s ago: executing program 1 (id=5608): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) 1.287661957s ago: executing program 4 (id=5610): r0 = socket$isdn(0x22, 0x2, 0x2) close(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9) unshare(0x6a040000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="08001efbb07d7742", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='afs_call\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) 1.233256632s ago: executing program 3 (id=5611): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0xd0, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x98, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_FAST_LEAVE={0x5}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 1.189800668s ago: executing program 1 (id=5612): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)) 994.076ms ago: executing program 3 (id=5615): socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) (async) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r1, 0x1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08c9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) 937.832191ms ago: executing program 1 (id=5616): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 904.026112ms ago: executing program 2 (id=5617): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x40047459, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 804.047646ms ago: executing program 0 (id=5618): r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000000)=0x80) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x170, 0x24, 0x20, 0x70bd28, 0x25dfdbfd, {0x2}, [@generic="16c737b529118ad105211f7ae0b2d3a727298bee6b656cf1b54956e4623e8426ea30a8595b27571fff73b24868d5386de5d902fbf688a765a3a230b96012f55e664226ef6cfbf43aed3228bbf2f5814dafe63010a9bff9226c4fc894f6701f012b0d65799e6298a9a7103c524c67e87f493843f0778401901d91c91121f1983012c2acda53092e23a377ef49b8b3c8c1024c4f2926cef887b4d458", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="7c29d56518dc9884b6f6aebf8e6b981d46bdac6c1dee2ac20473b8d445f05c8dc29915eeac29c3b7bdcd8d33f453cc0af963d8a3603eb4ca2a58da89896d52683eb6c62af0f2c515afa0bf65861ea133741f03c26e068daeba6e943b727426f5f4a95c6e9da3452c29185a91cbb9390da8d7f32c631e203d36a05333aa3b2bfc796455ece1ad25f75e4c0e51bf1dd0c200a25c642287ccb6891ba7be536495b3355298df255a0fe72ff3805685c239018b9002f8fee1b76e"]}, 0x170}, 0x1, 0x0, 0x0, 0x1}, 0x20004810) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) (async) r2 = socket(0xa, 0x1, 0x0) (async, rerun: 32) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x17, 0x1a, 0x4, 0x1, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) (rerun: 32) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x8, 0x0, &(0x7f0000003c00)) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000580)={r4}, &(0x7f0000000180)=0x8) (async, rerun: 32) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) (rerun: 32) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5218) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r7, 0x40047452, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, '\x00', "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "00000000ab6a05a7"}, 0x38) (async) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000280)="d7", 0x1}], 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="83", 0x1}], 0x1}, 0x4000840) 753.981333ms ago: executing program 2 (id=5619): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet(0x2, 0x80000, 0x7) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="020afc00020000002500000000000000", @ANYRESOCT], 0x10}}, 0x40408c0) 752.650421ms ago: executing program 1 (id=5620): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03"], 0x122}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500000000000000ac53296e8d75be18b2e0a4b67a357d4d124ecd45b0e31588abea769b17655b0000000000", @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aaaaaaaaaabb0000bf7ccd99a04cf35fd4bbd726ae8cc737a841abc34a4d9292f7c22104083b647c90b1aa92a5e351fd90a154272405e642bbcd576cc9b88f9c21cd299b609287919e79259f7a2a3578279ba51b341d6f3a61fe1bc1543f36608515eaefea39987205f23270923d5c81e85d64a2487603ba8e190ae4f8c0ddf702e1326acf342e254c9371f45fa896161dc43d0055efdf0652a916e88eea563b2e3813cf099cce2124bb167c71e962179e406acadcc09975310e989ba5a100c5d26188b37209902cf75ee505b8611896b92d7fc75b6d352b66cf9f4743bc"], 0x48}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 697.575596ms ago: executing program 3 (id=5621): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x6, 0x3, 0x1, 0x0, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x6}]}}}]}, 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={0x0, 0xad}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x104, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x10000]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x564a}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x0, 0x9, 0x3, 0x1000, 0x6, 0x92, 0x80000001, 0x5]}]}, 0x104}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 495.705293ms ago: executing program 3 (id=5622): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x40012141) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007080100000c0a01020000000000000000010000000900020073797a3200000000dc000380d8000080040001800800034000000001c50006407c2432aaf2e15835aab6f584ce76eb9b9fdd3d4c4b9feafeb308d37bc55ab62bf6fcaff3160414d6f1e7583c04910038802faf6b9c16e453c50ec7cd9286a6c4c1b8a1ba3df077f507cfac147e25e3c38a10be0fe68848bfac13345eaf260064e28dcaa9f994c2d8953b27d25f5890fa18948ab505a92917be71c0e16eb99124f79f22e4c0cd7478c9b0c696ff3c379b491fea694bec8f78cef1c15b33b0f6ac6ddaa777c44269f246f74a63c4c2431bfc62db738998804e13471f087cfff2d0980000000900010073797a30"], 0x194}}, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_bt_hci(r4, 0x400448df, &(0x7f0000000240)="810fe052") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007, 0x10, r2, 0xdd592000) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 445.47407ms ago: executing program 1 (id=5623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a702200000c0a010100000000000000000a0000080800044000000003080004400000000008000440000000020900020073797a30000000000900020073797a3100000000301a0380600200804002028043000100ff7015799f405043bbf3e518d34ecaefe759f2031ebb5c25c2b790395fc7e189eda0a5f78e8ecf55d8b2e35c09f80e07d87f9e346e09daabd07c5d9eaa389000170001008e790b61dc32352078db03edcbce15049e03f000100002800900020073797a3000000000f700010061062c246f3bc2ba5c91c813bfee37bc6c574fbf6145fb0839205936b0a4c2112903204315451331ae18a7428b85bec23d17812038de95b2d18be26cc787e5cc0b8741020cc00aa7586c720cc4b5bcbdc85bf700f96acade25b3ffa65cdad9c366be77e9c5bee3dd4b91d89bc778e516b3dc28247a18982ddb591c64e44fc3142f364be7e6c6328c863b03131e0506a15865eb8e89e8008ab40249dba7200912caa870f871c0cd8e89a54af9bbcce1c64e77742de9fd81c4feab31e87c352b7ea3a782a223426195e7a7ec1f5c4b211175a7b3e248c82a4dc256f9befe951c91dabd324406dd25e2819f811c4e4aa1a0bc35cf003c00028008000340000000020900020073797a320000000008000180fffffffb080003400000000408000180fffffffc0900020073797a30000000003800028008000340000000020900020073797a30000000000900020073797a30000000000900020073797a31000000000800034000000001600002800800034000000003080003400000000308000340000000010900020073797a3100000000080001801e5cd612080003400000000108000180fffffffc08000180000000000900020073797a31000000000900020073797a300000008360000280100007800a0001006d617463680000000c0004400000000000000004100000800900090073797a3200000000bc170080a01201808900010077374e7ac2ed6f6035481ecec722b60b06a90842551c25539718205d9f8e5c93a14da3c332a7027dbcd9200b74a84c419d183e2f893474a8cec603e0b3c756641738f8b5ea1ea3d8780cd0c3458aeb0eddf93238c92505196a6be06a6ffe2cfff474fb51d7cc390b5e673524bc622f2ddb82573b2e37dde6421538862796cfe08d4d077e4c0000003800028008000340000000010800034000000001080003400000000308000180fffffffd08000180fffffffc0900020073797a320000000014000280080003400000000108000180ffffffff4000028008000340000000020900020073797a300000000008000340000000040900020073797a31000000000900020073797a300000000008000180fffffffd380002800900020073797a300000000008000340000000020800034000000001080003400000000408000180000000010800034000000004041001000fba61cf69dcb36dfb960e0eae80b7ae466f0e0c432a02c23661ac5a94f9aa04d8c9abd04b2a1e49a5addc9c385c72b84b83126559600db5d74995724c3bf922160d278f7ad13117015d29af74cf0d94d03912018a95f85c869de4cba335b885b553c72513083404d4299553c031a5011f0c4d2512bf894c538cb3f7473d192b810cb4166707f9b2706d26ff5ed85ed908eb9a8fd0197a91be3beed2e09d38eca00afe5ea8d0cc5b502a0e440a1226246099117bfa0858b569e307f53c06b7fbdd445df7472662cf6e72265c9ffb49535f3400f0f78a1c9a702be9dbb87bbda94fb4140df9493b6600263ddf96f6636b824ab535657342ae4f981643f005d28997e36b524964552d84ff3ebebbe459b968a35caf722c0f5a6f7953e82fb9f45ffa870c274a72b43637df30725e75ac725b3de0e3c801143ced7d25e96dfca2fca35a610b98922933bbf1b40152b6aaf74e15029b8acca8fd500dbc90e5998c6fc3fe149459c5c4303a6de0fa042a5c4e5596e1152c915508090ea785e65deaa9b8fd6574ffbcdd8addf9fcf9fd9e30641335ad897f32c8c789f05c3d9bda532676d6cd3b5a867f11edb64673e7f7792a8a2eda7d7a05fc4112d03cbda2c1ac280a0d48ae0beed5ce590b7814d4aad6431da126b654d13187215eda43b41a4cd56d5b2d488600dd2f70f47a91ed1115382c9fc0c30df585c6d2aa2f73c09d0545e167bbbbf59ced8f50c14126332fddac76f75f6b6d127438d34f9cce92a824bf953cab2ce5137106011d28f83d85f0e7abee4b4b63cb04d45253731e94ad7771af5954da6489e14c1de84f5cf4d4dd79614d9b830ba8f1d5da608c3bbb7dc2bab2b0e56b783d39a4945f1b6a109c47d2ded20a58be5b88fa91e6c875f3af2e351800662c3f4adbfab5e6abe0e15915362dca63bfd50c71b5d3736c4934f7c046713bc5285bb149ca25b29fd10da86f235f88d857d153e206aed182e9a89f7d2f7e5253ed86af0ad06aa824fcee48c2cb3557335b6e953a285b0c03c051eed5574fd1b88dbd4d84a1f5475e391b12f455c107ebfd6201929c6a5ec75a2f26feb6432afd6994da50d5f1e1ef3a86e6c166dff2e3b6c34e51577257b67e2deb2abaf0d3eea791cfe1e2aafaab3ccadcfc83f4952ca3b602aee131eaf8e074fa2e409bc0fc45949e3204fa90330a15f719fabc648eba4da73831e4332b3f62c75d745ccd9fe5e760d575d4181f471f15362a5d0f5f58978798a91de8474b2405fc425aebf955cb7392bfdac15826eaa0218972f9e42f2e5487c878dbcf19dc8356b8908fd6fc51fe402ca68874bfffdeee0f5c73d64ff503af9ad7e143846a99183221741d311c96841c738fcc861304eed2c56068807fdbb713df122d0b59d8f27bc99acc32174c1f18215705015e8152e98dfd5b37bf85140d925185fa146f396a2c8e434683e1127f52b0d2af52a85189e41da8776f901b63a62e9e91fc320fcb7427a1efa5981caa62eb6b8b28042e485b16894279c2570241853d605617b169df21deb3a394311fd6ac7ce6f28a335adf5c830a3a1a6505af2a03f3a71b3cfa62781f84563b3788f3265a5f6f3f73d36bbc380cf75b98a8c471e6b1f044d4cc67093b456b088e99c645e084d014eda831a6365c21cf47e4134ee0ecd36212d1e2c7d349b90fa0a5b1c737c4eeb9fdb7062c12e1a443d41a8d32c3303dc299a1bf41df4f8d2fa743f9f34c5421b26bf7052ccddc8da49116023b04bf36423907d32c8da7ca5ad66df98af20f646f0f1f452d59a13f8901f38b8ea13af81fc7c3245226b6e8094f39c0322292a2839298f304e6159966e7c151d49a7a4fcfd7cfdb380b2e267961860bcb2a8cd9befe4422a7830f84e0c177b766abbd79fe5c7e1914a34790fd644c4aa0bf59724a6c7370ca1f41b535319b7e9d07ab0cf0407685ddc617e48af056e69e6489da68811bed452fe3d2a892aae0a9a5884b99fa63a75a63cadbd83e43a370aeb08eecc7c96294acf1471aeac084bf26557ffe5588682eebcbfb53d342744658f6e4ec5cce36718121f1f14185d9dd079a8b4b2e5a85a511fa427ab8a832ac79e34574edf6b01f9977d725d8c52b413e70591ef4c6e2fe82984f20646bd85a61ee6058cbab00b85bbbfb52234e48c9a4cf93ba279faf1b29aba07fb5a77b004da018e72e2437fba11bb997a3271b03b68d2bbab6b40d113602ab1e825a501d5bad7e3ea29d3043b88b0ade8c409839d68465cb3ac8dfefda9b5ba4f9e2cfbc680a3fcbe8e97b744b63cca40af79dcf9ad3c8abb59801b410a222c8b5834b504d59545d7925942d5435a800ee9684853061bcea33f6438e35d47cee52f5964c35ce8c79e1567a309ddc8d32db80c9e0d005c74055a6ea414850867839c06d00a519dfb25934e5eb3825e56059836c783aff1221e6be4656f5d85d297a34ac333d76dafe1f9a16beb20856db237d1a185e6a271a4054ffec64058066be9e0b0cc60f8546c6256c185ba367970477b9b84735517229ae72d40215cb9cf8d516808d928990722ecbc1fdceef749942d93e308b63b189ee65164b2f4a61db9d1a6757d83f96b1bbe0daedc3a73c34859555dc91efb84576c9beeb83e5e04b86cb8b483bf374eb7ff5399119245d97857170f66029078f0c3ca12b346d1cdeca29c0613c565a44a99de7c9aa08098a0658e6ca9c292c2d555d9f5c7bae0986f962af120920ba2f569dc79ebab53d660a5b4109afcce8f7fb6a1e772dd9f27f25208939435033b3c6710a82fd85b714b75d74abb20a2028de11ab031db0d5b63f21d1021567933dd4047539c781efd45ade52bc8810d462c6f479888ee1941fc6eec9c8ec56eee3a3e9acdeac1f6a26435d3262450ddacf2e5357e456f73bd979bd11af2b21ad405f20f4f6f4070c22d1b21e1a19deb7eaf7d3ddbb4048a71dcbee532276ff50a83a0dff8d2254222707de59d7b1f6335d93ba63723de30ba70cdff7433ce9bb63452e2579e7d6092f9450705adbf61b149a9b1ee53198d9041385bf110f48572bc708debde4cc1043f9cee04d8cf70d0e51bbd3ea74c98b64da23b49349daccc95e99162a66593b4a1f33383477d55a820f457762fa5eae2036c7c44c487bb4d27370b58144d2e4e91df4ba5c01ee05ccb47a82ada4c53b3b5f08aace00108445bc0c66e1ab1d9f6c3bc55132beff9b8a81623a4ab6b6d3e56aa614204801f22addf7925616c1bd14e9a6bece902cac95cee431fc6425592a9443034b42f7670fb41a8c7dc9b650be45f2f710c14d086c87b515cd531d8141ce05ef95f418fd5201b586e6111b6b2538e34dbd49903fa5a72672040e8813c13214a4685df7bd59c9ac1506dad4e88260c5272c95af136ad61a303b4584cede4614de02e46c6849df5c99ecd4a5311cde52b64a74c1d14691dd530d0746a8ad5e6126b88d23a9c8ef2ba89691b1fd10f92f004683011f42931c84991046a5c216ab7b7428ecc1d97848d7918758f63391a6be24754f0bc10e159beaee61b1af12dd56f7b35c32af699c442db5ae4f419445d247f72c3dd9a35c69e28fb5a499ceebd75b52792ef1274801f4fff31dde41acafc3ed31f9ee94fb6fc0300840e23572e0011ec4df7207d8672f821b39118808efb55562204621601ea92d9f6d90e016f40c78558adc71fdefdd4e43f2db2021c177a5c97ac4477a3e14c7a63b311301ac39143874e38e54041e2478af561f6477e97637c7ecad20906cfe16ae623f7274534e42f0728acb10244252a6a091642ff7e09c57601dbd17d9357bc3fd0b31742d49c56a0b53906b76612a6eb08cb838d7afc0803c82529ee67a9d5809f0f1733d303f646571b9966c6f197639128606576a43005c75972d0829605c0ab950b8ce6dcd7bd2caecd280b7ffa5ab7ef22be2eec06b846a3c86b9f641122a6448d91b21c3f59c72b987cf3ccbffc3cc071f4e30acfc3e379fabfc53ae1353a505f9f83ea1046d5f4a7cb49214f15dd7efcfe1f0249094ec89850bf5bd57991933d6efc5d9a8dd528841cac6cc0ca9553149b30c13df0b3fab48a59322285d8234410a7998f357bcd9d154d585bb24d8d2cf3c66c0ce42c7bf5069447ea2439a22b0b9e1dd477c07399e5a234ed4f354378235a056af78289f986442c49375a580f9240fdeee5816a3a329f4a0a1fbe158efbebd896a1231c59579fe75eba0c4302196ce6c1a49e9985979ba621fb9ce171d09ec43a93b80a2f4dbf03ef8bc4ef189eac3d28de0b80e8301ae5b7d3a5c6f9b2d8f3e130cb01efadac75fad040ca4abb80697895baf13d3186af3510c5a648e5d1c410689b8f7529716e18d166e477b473bf28574860e3032544ae1a5f9632a6e4849631283fb356b1543c4043b2de6823e23d4fa3131b73bba45feebdfec7ace1c03b34b3abb6ad17f6b66db942c8c9b2d3b05075441a04898b0006a0932f72e3c738688532b99015d1567f096b8d3ee014632d51a2eeed2857d8f2a4b8ad8061c022468dc25e3cbfa90dfb40a4944fb8b2b332075177ce6a7349fb39667f89fed8aa335d355b76ad030d2b5fc8e9203f6316cf86636e4baf2adcb0b053b1997cd9658c86a7a04588f68c45f2b436b6b4cdcb6330690c7372d96de89217ee869861b33ab9dd0e7b97d7159886cd19de4f2fa4a679c1b945b04350f39bc457b5a7986d40cae4ef94db6c3fd42fdcea2bf9c81a777424e64c2b18c1ba09c749fe58b3b4efb0bb4175a92b1549bf6b231973cc31c2eff557bec6bbaee42f76710d543a9a73e36b8eaad7ccc6f6333b8089c92119f2604c18ba69c7e2f32e2b37bbd4729793da6ff3ef4f6ac04a56f022a36d040e1e5d2cfdf2c164f733fdf669ac41291da1f5f9f3ae48fdc16a95d227a9ddfc5e077f11eefaa98073934e653fc500e6a3773cbbebc1009d09122e7d7727237e1e25f0fa4a98df08b54ab87cccbf8c4c47434b8b69f283895f1662eb6f5fb7515125f0108d428a7645c1997ae780cc2fb55ded39ff409fbc10b840a1aa3f8487473494e40fadc5a1f6d3ae05b8f5b6e5d0c7b2c329593d0f0d6d469dedb4ac694d0bea408c7b4b0d57dcc591ad78e0245bd271937295401a9486a91255f63b8181b06098fb5c5b610ebb10b91dfc1d54fcfcc4cfa30434c18bffbe6a21f166dcc0557520ad055a1ced8cac8c21625dd989a581d5758a1882a949e7a5efbb6afcd9dff4cd731923ed852fd0999717380345364e0073bf570da53af6dc6e8d9e7e68b0b5016dbf5298dc7f596d8f096a193101a335bef6e15fee2ce6173ee298b14718bb46c0655c1093a9b54df06afe6be69358ba8a506a3587beb645bbacc3ff6998e63a78925a6c8c03df006bc11fd9a7eee85e4d4cfb886196662dba90337f61bcaf54f869c3e9b74a2ec02ba9183ecaa479e06abca0c2dd46ac8725f868cdb5573b211ec88419cfbdc0f8376a9e01f5c3b38a960561c7535a80fc586236bb878c3b7e06e57eadf3269e97a8fe57eebc3b9d6f04833370f985883a876d1bb1fb66ce8e05534795b517c4062fc999d41d9b3a54b5887189f10d5996a81b2a68510dda78119092da4ca3112194486f2fdc8a8b36331c443937348b03a30ad369c6253ba5cf4a6b05f1d4a167e9c2c838e25c2c33bc457c199f1fbae9e7483a841b915dbbe028ced4431c582dd3036530451188af260fc01c5afa99e7f15d6efc7a33b056bd5bb5617975a51ff1fcd5d1a16f92e9e8b1801bc721d5f6ba49cd6de116f0d748e6dd6f2bbffba5f2bb86e6f69e788c10001005c795f75f272664bb9eb48939b5561d85c36936b234a010f0e29523a251d32022992057fecbef27e5e440dd107ba798ecc5788d1491fc0974b62acea6918f6643c848d73d85af23412f9d1cda252a44978b41203e42ec89be39e7d7426244f30ba5a1bacc32d6e007ebb6c00085c956b6af071f984f863ac2914d1d61ab2760f5b57727cfc9f0e04d2386929e8d42f457eda8ffb06fd0668ae4deaa040be6f5a04ec369409f988e578cd949065269a63b9bec4c3521b4399d76c345f8b000000300002800800034000000002080003400000000108000180fffffffc0900020073797a300000000008000180000000005400010001452fe7f844cbfde3a46cb8c01d72a989b7cce0fa1e548e072299a76b113b800e5bb0dc9cd761914f37f3d04c3db8f15faa1ae48f73b5b377e0eedd6ff3304f177c863ce1034318dc8a8ed4e0f1a8000d000640048d98513f3f1ef6c40000002c000b80280001800e000100627974656f726465720000001400028008000540000000ff08000340000000010c000440000000000000000684010a80fe000100e5dff9d6e657fae763c7dbc3809c61f76c88c8265061b725b472508fa31e199c10eb9a66e9cf324bd23c8bc4251ba8053670fd2340776ad72c204059863e8d3081b4f5c4670486decc99b8022280c932479c73f274bd29326d97e6e037e810a4b3f4dc83bd665c95daabeaa2d361554d97c460a66bd3aa86e8fcd302cd89d1e89d7e43faa3dfdcbc1ef88511b48b09e848510a905157fe235418a142364da54e8b2b9d3cd7bebdc530ddbe1141cb799d60fbcf5ed4ebee5b97acef78d286b37d49d39a50d3b9fa78a923143ffc78b5f9c1e912b0b531915d10bd251bac40f03ba88345a65737e491cf9365a030b023e8c64abf45bdbc828061e800002000028008000180fffffffb0900020073797a310000000008000180ffffffff14000280080003400000000108000180fffffffe49000100b513adfda04b50f7f8c42d783e70a1616f1cc46fce835535122fa1f0033fdc0b674164a494e29ed1212b0a54f977c57603ee7abb2f9b1be4d08078a680feb8e11217c75fe40000000c00054000000000000000dca4010a802400028008000180fffffffd0800034000000001080003400000000308000180ffffffff1400028008000180fffffffc08000340000000026b0001004643da8b86da72c777a3461f115d65d32592be11e26df9e71fb76ae433c087e53b36060252c92143491818119e0057ba7b0e5c3a42bf616d2b062284b25276fd07968e0a00f0b16158735a1df0ce50b161a3a44083b726ef8f65476af2161453d15074b9f515bc009100010064950c09167aa090874a847813bbe1ab0b7cebd0d8048101e0f6e85fb73af09cd6e338b2f2bf3c4c085cbe6252be8d01c1813febc765a6a070a2ecab88ef9a14b76b991ecae14a12322006169e9adb3ebe5fae74c39cd4951b0e6119ef46f089c107c10d0ac51562b06679bf0bc16085a7f920f309d8ac1acfd835b893cbb3209843f0130a3e71734d53d539c00000006800028008000180fffffffc0900020073797a310000000008000180fffffffb08000340000000030900020073797a32000000000900020073797a3100000000080001800000000008000180fffffffb0900020073797a30000000000900020073797a31000000002f0006404edb4f8882a913c5a055ec1016b1b7636116d5369d94754c0a3ca637a59b9a5afa2888584ac5a821b0be4d006c010a802000028008000180fffffffb08000340000000010900020073797a3100000000fc00010047befcb17229687e1d6af275ad9342a6be1b15fdf5266208b3bbae523303e182b14f3178dfeb5e8218fedacb1319ae60c01d90870ba319714373489036f3c89e12284f6e69aa454f389beb151659fc6d6f23e28394dcb6ebbd06390c72341f5024032bd29e55ef9fcc546cf9b2e9f45a8ad57a1ae3f8c1c33b2f419eb6812ad98c42f06e06830962bc396f7e8eacb35a438ae75f4cfe840ee17ecdc7e85e474f39fd37f2686bb21994a7fa8056d3fe68ed46796a1520e8b5e23d3a737f423f636c542866d663f5718a69e774fd6d7b84ddf52027b7a3977c94037520d9f82d80d691002bda216b08f13ac8cfebf9f90e2963ae0014bc82582800028008000180fffffffb0900020073797a3000000000080003400000000408000180fffffffb24000280080003400000000408000180fffffffb08000340000000030800034000000001fc070380140100800c000440000000000000000301010640f6d32029a0b96eefe575e4d076f5b56aee47377049a3ce4d714fafff0622dd2a7531277788ebe7960705d0b7ea8322c7fbcf0336a5d34e4c6394791bd7b9c7754a81f380a23862443ba865b6be885354d1f4c360daae784a3a840c19f20f9427b368d3102dc0c45677dfae7b36ed49b597367c571beae954dfdd5bed2932a6eb07855398e552a2e987c4f25cc84b5d7b1f5a7eebf52027795df995ee28d33699cbc3f7e5b2fe034df9065e43bc1dd64be0648745015b0e6fc099d9c99e9c634929ea03035e0291a097e719b8b30422559d88093446ed3f519ac6f3fad76eac6c63f5322e89a9880232dbb95e8819fa259f29e128051fbf4db65ab423f0000000a8010080080003400000000094010280040002804c0002800900020073797a320000000008000340000000030900020073797a310000000008000180ffffffff0900020073797a300000000008000180fffffffd0900020073797a3000000000f4000100e39ae71f50d9dbf030a5765cf358fb752d7d53e367a1e472197ea40b10710d4b0536481f532cb3cf6953b44786bdc0ded102cade512f97773c7045339fd86a03e33184349491cb720985c1a43feb25898103427051ed52af83755273ad99624d8120e3fb5205dfcc8511947e0e4e963373dad55e0a2289eb83047bfea7200168ccb4f0f6a8e73d278891f9a383eead78c170ef3619d273702b96254ebaaf4bac21f78002a3e3715e688bc94145435ee7b9fcf167a0fdc1bfe3b619b7ad7886f4e9043dfc4c7fb9f4fbf0d39cdbb6d5a2e555cd3fb72003fbab754a0bf4cb0685f4285b88b3f642141d84f0ba58b306ed1800028008000180fffffffb0900020073797a31000000003100010047b499c47ffbf5b27186d24a638c8241a6ee2dcab1c44dbfd5082ccc2da226f08b0b8e3833c3d9e05b33f70d76000000080003400000000320050080a8040b80100001800c00010062697477697365001c0101800a0001006d617463680000000c0102800e000100686173686c696d69740000000c000100697072616e676500eb000300484b0b3d10422f6bc9efb21e797436e4cecbbc63b522a1de48d00a056c2bb7829640cf57e03c951bf92076b7ad075e2e88b398666a0304d1ba1ea47edbaba10805d6bf2bbcf0a5c467e46d3f10be1cb0b4575876e2d3da875bad80934e679e946b80fd687b082331e273e0aca490a7d5e01fe5643efe043e9c2acd676bc5321ce8897335dc8dce86df135f2cddf70dfe07567b6aac3b705a0e9632b238009dfa327acfd75d4d4a5ac601b7abc6424d0dd77a668196fc78098aff482c77906db0bf92c0a3be6839cc0ef92cc2de44edfac23b496e1a299167b83045d76ce94b6284e55dead26270004800018008000100647570003c0002800800014000000008080001400000000108000140000000120800024000000008080001400000000a08000140000000090800024000000009140001800c0001006e6f747261636b0004000280100001800b00010064796e7365740000fc0201800a00010072616e6765000000ec0202800800014000000010e001048085000100a75d154d473f5e477ca8a786fa75aca71f8feca11c93c7c0a8538f11fa634cbeeee7d7ef5fecc8d6005ae7dbc1a6cf13ca3efb1928ce5eaefcc9165f21c5f31dd2958b1cb775fcea79eb6fcbc730ea25119ba39d019382042eda7511f6e1076dd491843c54d21921a602a6dd27ae22918015e70e34c8153e057dd17fbc56294b880000000c0002800800034000000004f300010001aa1a37836af63502a4e041c40542c71d9481e87dbb2cb038e2bbf4a1a2fe691d710ac170f2e9c7edf10701574c1538a5c5c604d1aded9b9aded1f1523ae9fd541aedd57d1344c189e24997d76482834b06878e7a90a63a7bb71af532eebc717c6b170b2b0bcfcc47528056c8f39d8e187872f185c7d873391e07c0e2e7c96966307e0229437d7f429bef2a0819af30bbed5b8fb4771122e5c271493dd4a8d8de50348875f3535cf3cc269f9972d84ad5573a23dd29a36598c3728e0189202ade2ad65d96b88ab2a02548b8057242f403b15005c1f53b1b7d340f1898f1f56b53514830ba57047df5ace0a07019e20052000100608092815c849264dbf56911b5b3243a175db90e8b6e9258ddca5ef05b91f6f8293909ff40a0f96a9364f0c3e6aae00943ae4983cd6dd8ab169fe8e308e0d589a1dd0ed88995a403eace1a67803b00000800014000000000f80003803800028008000340000000020900020073797a320000000008000180ffffffff080003400000000108000180ffffffff0800018000000004180002800900020073797a30000000000800034000000002440002800900020073797a310000000008000180fffffffe08000180ffffffff080003400000000308000340000000040900020073797a31000000000800034000000004300001001ed0a70f61196fdad724d11199c0def1265a17a31e3bdf9d46dd536fad39394c6596a0f2212d59d2970bb0e00600010037be000028000280080003400000000208000340000000020900020073797a300000000008000180fffffffb100001800b000100736f636b657400002c000b80280001800e000100627974656f72646572000000140002800800054000000098080002400000000e080003400000000040000b8010000180090001006c617374000000002c0001800a0001006c696d69740000001c0002800c00014000000000000000000c00014000000000000000061c0000800c00044000000000000000670900090073797a320000000068000000120a010200000000000000000500000454000480050005000f000000050002002f0000000600014080f300000500020084000000050005000c000000050005007f000000080004400000000406000140000200000600014088e50000050002000600000088000000140a01010000000000000000050000030c00064000000000000000020c00064000000000000000010900020073797a31000000000900020073797a32000000003a00080024a54e93e6ea8e9a3887af239ffadc36723f2fd2282c4f6a99732922e7133d7b0ded049db758fcb4970b3c847370cf4d5d3e2969b018000008000340000000038c000000180a010200000000000000000a00000408000740000000010900010073797a30000000005c00038008000240fffffffd080001400000000040000380140001006261746164765f736c6176655f310000140001007465616d5f736c6176655f31000000001400010076657468305f746f5f627269646765000800024000000007080007400000000258000000160a01080000000000000000000000010900010073797a3100000000140003800800014000000000080002400000d2a90900020073797a30000000000c00054000000000000000030900020073797a310000000020010000050a0102000000000000000007000008740004801400030077673100000000000000000000000000080001400000000414000300766c616e3100000000000000000000001400030076657468305f766972745f77696669000800014000000001080002400a6c22fc080001400000000214000300766c616e3000000000000000000000000900010073797a3000000000340004801400030076657468315f6d61637674617000000008000140000000041400030076657468315f766c616e000000000000580008800c00014000000000000000060c00014000000000000100010c00014000000000000000010c00024000000000000000080c00024000000000000000080c00014000000000000000060c000240000000000000000914"], 0x258c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000003c0)=0x2d, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x80800) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000004c80)="028a66f42d89a335a0839fb275e6332258279fe41e8bfa3f2f3484d2f874bfb8784339103703a489d923d9276cc7f69e42c425f5095c1310f6dcf01d67a7b0cb921cde93166b1d0f1a9eddf1caf3bd7887f6f5fad65becb6824b35a44517246156732df87a47ca239066fb10e43415f5c821f25200d06ca6aef5e27dc4375c9c36de17635cfd2a770be69924f558db5130900000", 0x94}], 0x5}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000900)="af36774b498f61ea48953210f3a1b85def9b166cd3337d3dc1114de0c659748858821d325515fb480fb7a836557ad866413293decdbf89774c086c5eec074b1a685793", 0x43}, {&(0x7f0000000700)="96be8040b795858179e663bd593bf56ecf5c342333295a5abb210ba990ce5496c910b4b0f8c8eff2", 0x28}, {&(0x7f0000004b00)="419ca7ead9a4088a6a202b6f486d7ac6cd1780497faa1609ac50c3a0302f1a1ee65c5a7c931cbb41de32fca7cfe494c2", 0x30}, {&(0x7f0000004b40)="460839c1287a7df0713c49aa9a62157730ba28a60c1f72090ba1c319d7b3eba3f4e235b78e48735be729545cdbcac0a77b755b9e16f5f456e7d57d34df2e94c806d4615aa2b727daf15153766fac550708ceb5ddcec3f8793b799ace754cc0b15ecf2fa3600f66edc9cbf7fe3687c5240f2c3aef60bdf53cb04db786e6c8d32606b41d5cffa6dd898cdf", 0x8a}], 0x8}, 0x70040000}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000000800)='s', 0x1}, {&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f00000009c0)='\\', 0x1}, {&(0x7f0000004a00)="a1baa1f5834c1391f041a5735d47ddc60305716981cb188bb68e3c6c5d06eb8e536f4b9fc1a593e978af3e811096ba12334d8f793fc55650c6d59752082ad9f71f28047973c57b1304d36a372e41c8b23fd41c4a4e7d62da710000a4ef856f82a21da0dc3f42e66f81d83e211f92e0714e7ba5eb49321b8fd8ebfd68424a9c8e26ea1e66058dcd8716fb80ab5a2960dc1aa8cafd73f60ab0ff2627ec551e6cda70ab59d1730ec57762399caf6b5125ec48aeabd339c310aefeaf5a3e08de887a29581caa2cd9b513e496a7c52b757242f7488817ee9853fdf1e4b93b2a811ccc23fad1d6a528d9c00b66efb9bc74b6b339d72e5901", 0xf5}], 0x5}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048849) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000004900)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000004800)=[{{&(0x7f0000000480)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000a00)=""/164, 0xa4}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b80)=""/178, 0xb2}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/198, 0xc6}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000680)=""/9, 0x9}, {&(0x7f0000000700)}], 0x8, &(0x7f0000003180)=""/131, 0x83}, 0x5}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003240)=""/203, 0xcb}, {&(0x7f0000000e00)=""/92, 0x5c}, {&(0x7f0000000980)=""/7, 0x7}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000004340)=""/215, 0xd7}, {&(0x7f0000000ec0)=""/125, 0x7d}, {&(0x7f0000004440)=""/200, 0xc8}, {&(0x7f0000000c40)=""/55, 0x37}], 0x8, &(0x7f00000045c0)=""/26, 0x1a}, 0x1}, {{&(0x7f0000004600)=@phonet, 0x80, &(0x7f0000004700)=[{&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000004680)=""/118, 0x76}], 0x2, &(0x7f0000004740)=""/146, 0x92}, 0x7f}], 0x4, 0x40002040, &(0x7f0000004940)={r8, r9+10000000}) 445.220327ms ago: executing program 0 (id=5624): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x1) 437.567222ms ago: executing program 2 (id=5625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0xd0, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x98, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_FAST_LEAVE={0x5}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x6}, @IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 353.427898ms ago: executing program 3 (id=5626): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e64300000000000820000eeffffff1b00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000780)={'gre0\x00', r3, 0x7800, 0x8000, 0x2, 0x4, {{0x5, 0x4, 0x3, 0x12, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000780)={'gre0\x00', r3, 0x7800, 0x8000, 0x2, 0x4, {{0x5, 0x4, 0x3, 0x12, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2}}}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRES64=r5, @ANYRES16=r5], 0x270}, 0x1, 0x0, 0x0, 0x8005}, 0x24000004) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x4, 0x0, 0x4, 0x86020086, r10}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fedbdf25130000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="70000180080003000100000008000300000000001400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000200626f6e645f736c6176655f30000000002c00018014000200767863616e31000000000000000000001400020070696d726567310000000000000000000c00018008000300020000004000018008000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000300000000001400020076657468305f746f5f68737200000000640001800800030003000000140002007767310000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000300010000001400020069703665727370616e300000000000000800030003000000080003000300000034000180140002007866726d30000000000000000000000014000200766c616e3100000000000000000000000800030001000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x81}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) (async) r15 = accept4(r0, 0x0, 0x0, 0x800) write$nbd(r15, &(0x7f0000000400)=ANY=[], 0xb4) (async) write$nbd(r15, &(0x7f0000000400)=ANY=[], 0xb4) socket(0x29, 0x2, 0x0) (async) r16 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="d08e38448671ce6771f243911bf823e051cf4f62a952c368a27021bf1843760eb88f57dd31c62336d9c76b14990d1ad2eea8a4cf1b4f303f068ce4c1dbb9e1e1f4c01387d7923c53da804b22328e7a382f37ca28b8493816795e1e7b7fdede229674c4d2fc310ec28378fb2451faeb540c5c241e76a57f847cf020d8de92555ae0df6e4e8e1320ae22e4fd55d6c125556d8b3a6254c9c472de05b1b13c5bac675a3230c6a92bbcac0480cdc524324ccc0754ca06f7c2f70c6a4ea281b4b13295e8c4fa3b6042d5d700555752044814fe1314284410b89244b79c59a03e08", @ANYRES64=r12, @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0xe000}, 0x800) (async) sendmsg$NFQNL_MSG_CONFIG(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="d08e38448671ce6771f243911bf823e051cf4f62a952c368a27021bf1843760eb88f57dd31c62336d9c76b14990d1ad2eea8a4cf1b4f303f068ce4c1dbb9e1e1f4c01387d7923c53da804b22328e7a382f37ca28b8493816795e1e7b7fdede229674c4d2fc310ec28378fb2451faeb540c5c241e76a57f847cf020d8de92555ae0df6e4e8e1320ae22e4fd55d6c125556d8b3a6254c9c472de05b1b13c5bac675a3230c6a92bbcac0480cdc524324ccc0754ca06f7c2f70c6a4ea281b4b13295e8c4fa3b6042d5d700555752044814fe1314284410b89244b79c59a03e08", @ANYRES64=r12, @ANYRES64=r1], 0x28}, 0x1, 0x0, 0x0, 0xe000}, 0x800) 255.787683ms ago: executing program 0 (id=5627): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x4, 0x0, &(0x7f0000000340)) (async) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x9, 0x1649, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8029, 0x10, 0x1, 0x7}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delchain={0x34, 0x65, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0xfff2, 0xc}, {0x7, 0xfff1}}, [@TCA_RATE={0xfffffffffffffde6, 0x5, {0xfb, 0x2}}, @TCA_RATE={0x6, 0x5, {0xc, 0x3}}]}, 0x34}}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, r3, 0x12, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xac}}, 0x4000080) (async) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f0000000080)=0x39) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) 255.085555ms ago: executing program 2 (id=5628): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)=0x1) 113.826278ms ago: executing program 0 (id=5629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e", @ANYBLOB="1bcf864469"], 0x26c0}, 0x1, 0x0, 0x0, 0x4080}, 0x4010) 113.415241ms ago: executing program 2 (id=5630): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x2, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10}, 0x94) 23.755178ms ago: executing program 3 (id=5631): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, 0x0, 0x0, 0x164, 0x0, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000084) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'none\x00', 0x29, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x8}, @IFLA_MACSEC_ENCRYPT={0x5}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=5632): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)) r2 = accept4$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff}, 0x10, 0x0) sendto(r2, &(0x7f0000000140)="68ecee15936f2fb9d0d03318c5281957d1e6be4139959fa5aec8e02c59ce54f4d29a921340d500ce7aa7b0850af0c3fc21ddad1fa56f56d889dffd29769acad42b4c6524b8660562f6832636f6bda2bf331c7894b27043fd77706594015f531d7553be79d1ee", 0x66, 0x1, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x9f, 0xec, "518b66189e82d9536ff384f18cbe04e5cd3a45a603be9973273714ab95ab7ed470bce349373c24795d084b0c90dff53c3bc2836eee4f7d9b52848f27f5f810", 0x1e}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000280)="c997f4846d0620abae1cf950740f2241a8386ea1ce81922c4ef3b3364ce7042fa59633553ef61f3245b23b5405c3f58d131533d4d67f85dda6ff9d167588fec25a47af48db7b59e11f7cbf20e645447c131b5a4f144ec711be9a0de17cd662cf6a9915b763074ef9450cc897c60551f0eec536bc00fe871dbde633709aea2ea2e680b0", &(0x7f0000000340)=""/143, &(0x7f0000000400)="26112fd118ecff67ceb2c978", &(0x7f0000000440)="bc01645641198bd7b972eae0733c30357ece78bc19b716ed6415d736206cd52e7a8728fca98c2010844493cbce3e466a9f97dd16f71fc5bec7ae91a650bff783e52f0e48dbc0a45e987c833dd9517bc9961aa76880e37954c201a82c9e28ebf8a0acbff8e72fa74703d81b24aba733447a85424e952fa89ec70c1d25323ef79e36975fb586f47402b53a266c8314e74885d575328aa4547f68b1be704a5e72b4938d", 0x1, r0, 0x4}, 0x38) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000540)) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000600), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffa}}, 0x52e2, 0x8, 0x6, 0xf4b5, 0x4}, &(0x7f0000000700)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000740)={0x8, 0x8000, 0x208, 0x643c1066, 0x0, 0x507, 0x5, 0x80, r6}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000780)={0x2, '\x00', {0x5}, 0x1}) r7 = getuid() sendmsg$nl_route(r1, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)=@can_newroute={0x174, 0x18, 0x2, 0x70bd28, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_MOD_UID={0x8, 0xe, r7}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_LIM_HOPS={0x5, 0xd, 0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "b5fb913b801e2041"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x46, 0x4d, 0x5b, 0xf1, 0x7, "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", 0x1, "a28f141c64ccfeeaa53305e3c81be1272178d976"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000805}, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e8, 0xd8, 0xd8, 0x468, 0x590, 0x468, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, &(0x7f0000000a00), {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "b633"}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x8000, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e24}}}, {{@uncond, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e20, 0x4e21], [0x4e21, 0x4e22], 0x4, 0x4, 0x8, 0xe}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x149}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0xffffff00, 'veth0_to_bond\x00', 'tunl0\x00', {}, {}, 0x67, 0x0, 0x78}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @empty, 0xff000000, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x1, 0x1, 0x63}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x6, 0x0, [0xd, 0x28, 0x17, 0x1f, 0x20, 0xc, 0x40, 0x3c, 0x30, 0x1, 0x31, 0x28, 0x1d, 0x24, 0x7, 0x26], 0x2, 0x3, 0x8f}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x748) connect$rds(r1, &(0x7f0000001200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8000) recvfrom$rxrpc(r1, &(0x7f0000001380)=""/69, 0x45, 0x2042, &(0x7f0000001400)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x24) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000001440)={0x8, 0x6, 0x8, 0x9, 0x1d6, 0x4, 0x1ff, 0x400000, r6}, 0x20) recvfrom$inet6(r5, &(0x7f0000001480)=""/35, 0x23, 0x2, &(0x7f00000014c0)={0xa, 0x4e20, 0x8, @remote, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4228956bf86d05b98b7235d5a8325bef83f165adfc27e6bc39e73285c15bb68c"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9e021260c99d057c1323be82a1d71a8f"}]}]}, 0x58}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001900)={'gretap0\x00', &(0x7f0000001840)={'gretap0\x00', r4, 0x8000, 0x80, 0x5, 0x9, {{0x24, 0x4, 0x1, 0x5, 0x90, 0x67, 0x0, 0x9, 0x12, 0x0, @initdev={0xac, 0x1e, 0x76, 0x0}, @empty, {[@end, @noop, @noop, @timestamp_prespec={0x44, 0x3c, 0xc5, 0x3, 0x3, [{@multicast1, 0x10}, {@empty, 0x6}, {@empty, 0xfffffff9}, {@remote, 0xa0}, {@remote, 0x81}, {@local, 0x7}, {@broadcast, 0x80000001}]}, @timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0x4, [{@multicast1, 0xb3a}, {@empty, 0x45}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x2}, {@loopback, 0x177}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xbcd1}, {@empty, 0xffff7fff}]}, @noop]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0x20, &(0x7f0000001a80)={&(0x7f00000019c0)=""/37, 0x25, 0x0, &(0x7f0000001a00)=""/99, 0x63}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x20, 0x13, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc878}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1000}, @call={0x85, 0x0, 0x0, 0x1e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000001740)='syzkaller\x00', 0x4, 0x89, &(0x7f0000001780)=""/137, 0x41000, 0x55, '\x00', r11, @fallback=0x1e, r0, 0x8, &(0x7f0000001940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x7, 0x0, 0x7fffffff}, 0x10, r12, r1, 0x5, &(0x7f0000001c00)=[r1, r1, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000001c40)=[{0x0, 0x2, 0x1, 0xb}, {0x2, 0x1, 0x10, 0x3}, {0x4, 0x4, 0x8, 0x1}, {0x4, 0x1, 0x0, 0xa}, {0x2, 0x4, 0xb}], 0x10, 0x551}, 0x94) kernel console output (not intermixed with test programs): 20 [ 340.517743][T18700] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.517768][T18700] do_sock_setsockopt+0x17c/0x1b0 [ 340.517791][T18700] __x64_sys_setsockopt+0x13f/0x1b0 [ 340.517815][T18700] do_syscall_64+0xfa/0x3b0 [ 340.517832][T18700] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.517851][T18700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.517869][T18700] ? clear_bhb_loop+0x60/0xb0 [ 340.517891][T18700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.517908][T18700] RIP: 0033:0x7f8bdaf8eec9 [ 340.517925][T18700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.517939][T18700] RSP: 002b:00007f8bdbe1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.517957][T18700] RAX: ffffffffffffffda RBX: 00007f8bdb1e5fa0 RCX: 00007f8bdaf8eec9 [ 340.517970][T18700] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 340.517979][T18700] RBP: 00007f8bdb011f91 R08: 0000000000000004 R09: 0000000000000000 [ 340.517991][T18700] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.518003][T18700] R13: 00007f8bdb1e6038 R14: 00007f8bdb1e5fa0 R15: 00007ffd84779da8 [ 340.518032][T18700] [ 340.518046][T18700] Mem-Info: [ 340.604141][T18711] team0: Device gtp0 is of different type [ 340.675634][T18700] active_anon:4688 inactive_anon:0 isolated_anon:0 [ 340.675634][T18700] active_file:3398 inactive_file:39991 isolated_file:0 [ 340.675634][T18700] unevictable:768 dirty:58 writeback:0 [ 340.675634][T18700] slab_reclaimable:13410 slab_unreclaimable:133413 [ 340.675634][T18700] mapped:29141 shmem:1363 pagetables:1075 [ 340.675634][T18700] sec_pagetables:0 bounce:0 [ 340.675634][T18700] kernel_misc_reclaimable:0 [ 340.675634][T18700] free:1285629 free_pcp:13709 free_cma:0 [ 340.887191][T18700] Node 0 active_anon:18776kB inactive_anon:0kB active_file:13592kB inactive_file:159768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116548kB dirty:228kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15724kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.919462][T18700] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.949883][T18700] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.985839][T18700] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 340.991653][T18700] Node 0 DMA32 free:1235924kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18728kB inactive_anon:0kB active_file:13592kB inactive_file:158192kB unevictable:1536kB writepending:228kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:38784kB local_pcp:21296kB free_cma:0kB [ 341.025221][T18700] lowmem_reserve[]: 0 0 1 1 1 [ 341.029994][T18700] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 341.068134][T18700] lowmem_reserve[]: 0 0 0 0 0 [ 341.072889][T18700] Node 1 Normal free:3891952kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15232kB local_pcp:12224kB free_cma:0kB [ 341.111818][T18700] lowmem_reserve[]: 0 0 0 0 0 [ 341.118759][T18700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 341.175710][T18700] Node 0 DMA32: 1820*4kB (UM) 114*8kB (UME) 50*16kB (UME) 134*32kB (UM) 66*64kB (UM) 41*128kB (UME) 20*256kB (UME) 7*512kB (U) 8*1024kB (UM) 8*2048kB (UME) 288*4096kB (M) = 1235680kB [ 341.195283][T18700] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 341.225293][T18700] Node 1 Normal: 162*4kB (UME) 49*8kB (UME) 48*16kB (UME) 167*32kB (UME) 38*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3891952kB [ 341.252681][T18700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.283725][T18700] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.297794][T18700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.328180][T18700] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.358683][T18700] 44750 total pagecache pages [ 341.396182][T18736] netlink: 'syz.1.3709': attribute type 1 has an invalid length. [ 341.405317][T18700] 0 pages in swap cache [ 341.409495][T18700] Free swap = 124996kB [ 341.428642][T18700] Total swap = 124996kB [ 341.432819][T18700] 2097051 pages RAM [ 341.467240][T18700] 0 pages HighMem/MovableOnly [ 341.476430][T18700] 425672 pages reserved [ 341.502396][T18700] 0 pages cma reserved [ 341.640118][T18745] __nla_validate_parse: 72 callbacks suppressed [ 341.640137][T18745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3714'. [ 341.648599][T18748] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3715'. [ 341.899269][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3719'. [ 342.357264][T18739] delete_channel: no stack [ 342.480204][T18789] vlan3: entered allmulticast mode [ 342.491540][T18789] hsr0: entered allmulticast mode [ 342.499158][T18789] hsr_slave_0: entered allmulticast mode [ 342.511125][T18789] hsr_slave_1: entered allmulticast mode [ 342.550169][T18794] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3725'. [ 342.807646][T18806] netlink: 'syz.3.3732': attribute type 4 has an invalid length. [ 342.829065][T18811] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3732'. [ 342.865227][T18814] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3736'. [ 342.893100][T18813] dvmrp0: entered allmulticast mode [ 342.909680][T18813] dvmrp0: left allmulticast mode [ 343.081292][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3741'. [ 343.090858][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3741'. [ 343.102174][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3741'. [ 343.114651][T18832] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3740'. [ 343.124868][T18834] netlink: 'syz.2.3742': attribute type 18 has an invalid length. [ 343.125849][T18826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.891191][T18888] netlink: 'syz.2.3754': attribute type 30 has an invalid length. [ 343.909613][T18888] 8021q: VLANs not supported on lo [ 343.991214][T18897] netlink: 'syz.4.3759': attribute type 3 has an invalid length. [ 344.053537][T18901] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.948229][T18945] netlink: 'syz.3.3774': attribute type 21 has an invalid length. [ 345.183803][ T5873] Bluetooth: hci2: command 0x0405 tx timeout [ 345.526250][T18985] macvlan0: entered promiscuous mode [ 345.542431][T18985] batadv0: entered promiscuous mode [ 345.551965][T18986] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20001 [ 345.581530][T18985] batadv0: left promiscuous mode [ 345.609881][T18986] netlink: 'syz.1.3789': attribute type 3 has an invalid length. [ 345.621232][T18991] TCP: TCP_TX_DELAY enabled [ 345.636146][T18985] macvlan0: left promiscuous mode [ 345.663230][T18986] netlink: 'syz.1.3789': attribute type 3 has an invalid length. [ 345.668452][T18993] netlink: 'syz.3.3792': attribute type 10 has an invalid length. [ 345.947739][T19019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.955067][T19019] IPv6: NLM_F_CREATE should be set when creating new route [ 345.962316][T19019] IPv6: NLM_F_CREATE should be set when creating new route [ 345.969588][T19019] IPv6: NLM_F_CREATE should be set when creating new route [ 345.996201][T19019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.826114][T19064] sctp: [Deprecated]: syz.0.3811 (pid 19064) Use of int in max_burst socket option deprecated. [ 346.826114][T19064] Use struct sctp_assoc_value instead [ 346.932677][T19073] __nla_validate_parse: 25 callbacks suppressed [ 346.932695][T19073] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3814'. [ 346.972580][T19073] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3814'. [ 346.997639][T19075] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3814'. [ 347.010955][T19075] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3814'. [ 347.017220][T19082] netlink: 'syz.1.3815': attribute type 23 has an invalid length. [ 347.163267][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3819'. [ 347.481723][T19113] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 347.493655][T19113] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 347.525485][T19113] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 347.666214][T19124] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3830'. [ 347.666315][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3829'. [ 347.677076][T19124] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3830'. [ 347.724488][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3829'. [ 347.727647][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 347.852781][T19131] netlink: 'syz.4.3832': attribute type 7 has an invalid length. [ 347.878591][T19131] netlink: 'syz.4.3832': attribute type 8 has an invalid length. [ 347.933342][T19131] netlink: 'syz.4.3832': attribute type 14 has an invalid length. [ 348.101182][T19147] openvswitch: netlink: IP tunnel TTL not specified. [ 348.331436][T19160] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 348.376415][T19168] gretap0: entered promiscuous mode [ 348.772064][T19179] lo speed is unknown, defaulting to 1000 [ 348.781040][T19179] lo speed is unknown, defaulting to 1000 [ 348.790686][T19179] lo speed is unknown, defaulting to 1000 [ 348.958194][T19179] infiniband syz0: set down [ 348.962765][ T10] lo speed is unknown, defaulting to 1000 [ 348.963543][T19179] infiniband syz0: added lo [ 349.002933][T19179] RDS/IB: syz0: added [ 349.007575][T19179] smc: adding ib device syz0 with port count 1 [ 349.013794][T19179] smc: ib device syz0 port 1 has pnetid [ 349.020414][ T10] lo speed is unknown, defaulting to 1000 [ 349.027700][T19179] lo speed is unknown, defaulting to 1000 [ 349.177780][T19179] lo speed is unknown, defaulting to 1000 [ 349.356041][T19179] lo speed is unknown, defaulting to 1000 [ 349.605756][T19200] tipc: Enabled bearer , priority 0 [ 349.628996][T19200] syzkaller0: entered promiscuous mode [ 349.653004][T19200] syzkaller0: entered allmulticast mode [ 349.810595][T19199] tipc: Resetting bearer [ 349.880931][T19199] tipc: Disabling bearer [ 350.047927][T19179] lo speed is unknown, defaulting to 1000 [ 350.318268][T19229] validate_nla: 2 callbacks suppressed [ 350.318286][T19229] netlink: 'syz.4.3866': attribute type 1 has an invalid length. [ 350.319536][T19224] netlink: 'syz.1.3864': attribute type 1 has an invalid length. [ 350.379068][T19229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.434490][T19233] bond1: (slave geneve2): making interface the new active one [ 350.453015][T19233] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 350.687551][T19179] lo speed is unknown, defaulting to 1000 [ 351.300740][T19179] lo speed is unknown, defaulting to 1000 [ 351.601850][T19272] hsr0 speed is unknown, defaulting to 1000 [ 351.609703][T19272] wg1 speed is unknown, defaulting to 1000 [ 351.986317][T19179] lo speed is unknown, defaulting to 1000 [ 352.083195][T19316] syzkaller1: entered promiscuous mode [ 352.089017][T19316] syzkaller1: entered allmulticast mode [ 352.424396][T19272] lo speed is unknown, defaulting to 1000 [ 352.749343][T19345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.815556][T19179] lo speed is unknown, defaulting to 1000 [ 353.071893][T19353] __nla_validate_parse: 11 callbacks suppressed [ 353.071911][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 353.232293][T19361] syzkaller0: entered promiscuous mode [ 353.248388][T19361] syzkaller0: entered allmulticast mode [ 353.284141][T19356] tipc: Enabled bearer , priority 0 [ 353.291139][T19179] lo speed is unknown, defaulting to 1000 [ 353.308383][T19356] netlink: 'syz.1.3907': attribute type 4 has an invalid length. [ 353.407380][T19361] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.458167][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3909'. [ 353.458167][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3909'. [ 353.487417][T19373] tipc: Resetting bearer [ 353.507531][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 353.527559][T19355] tipc: Resetting bearer [ 353.536213][T19369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3909'. [ 353.611243][T19355] tipc: Disabling bearer [ 353.797305][T19385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3914'. [ 353.808551][T19387] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3915'. [ 353.821673][T19390] batadv_slave_1: entered promiscuous mode [ 353.920054][T19393] batadv_slave_1: left promiscuous mode [ 354.012419][T19398] IPVS: Unknown mcast interface: vcan0 [ 354.145106][T19410] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3919'. [ 354.172843][T19413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3919'. [ 354.264390][T19416] tipc: Enabled bearer , priority 0 [ 354.303870][T19408] syzkaller0: entered promiscuous mode [ 354.321857][T19408] syzkaller0: entered allmulticast mode [ 354.338416][T19401] tipc: Resetting bearer [ 354.349686][T19401] netlink: 'syz.2.3920': attribute type 33 has an invalid length. [ 354.364803][T19397] tipc: Resetting bearer [ 354.396776][T19397] tipc: Disabling bearer [ 354.748837][T19438] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 354.772821][T19434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3928'. [ 355.661575][T19453] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 355.803542][T19470] netlink: 'syz.2.3938': attribute type 5 has an invalid length. [ 355.847365][T19460] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 356.248657][T19493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.280991][T19497] IPVS: sync thread started: state = MASTER, mcast_ifn = wg0, syncid = 2, id = 0 [ 356.441133][T19502] geneve2: entered promiscuous mode [ 356.448489][T19502] geneve2: entered allmulticast mode [ 356.457597][T19480] tipc: Enabling of bearer rejected, failed to enable media [ 356.492778][T15441] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.501856][T15441] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 356.512411][T19505] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 356.521646][T19505] CPU: 1 UID: 0 PID: 19505 Comm: syz.4.3948 Not tainted syzkaller #0 PREEMPT(full) [ 356.521668][T19505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.521678][T19505] Call Trace: [ 356.521684][T19505] [ 356.521691][T19505] dump_stack_lvl+0x189/0x250 [ 356.521719][T19505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.521738][T19505] ? __pfx__printk+0x10/0x10 [ 356.521761][T19505] ? kernfs_path_from_node+0x2f/0x290 [ 356.521774][T19505] ? kernfs_path_from_node+0x250/0x290 [ 356.521784][T19505] ? kernfs_path_from_node+0x2f/0x290 [ 356.521796][T19505] sysfs_warn_dup+0x8e/0xa0 [ 356.521807][T19505] sysfs_do_create_link_sd+0xc0/0x110 [ 356.521826][T19505] device_add_class_symlinks+0x1cf/0x240 [ 356.521840][T19505] device_add+0x475/0xb50 [ 356.521854][T19505] wiphy_register+0x1ba6/0x28d0 [ 356.521875][T19505] ? __pfx_wiphy_register+0x10/0x10 [ 356.521885][T19505] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 356.521903][T19505] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 356.521919][T19505] ieee80211_register_hw+0x3484/0x4100 [ 356.521941][T19505] ? ieee80211_register_hw+0x14c1/0x4100 [ 356.521960][T19505] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 356.521975][T19505] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 356.521996][T19505] ? __hrtimer_setup+0x187/0x210 [ 356.522005][T19505] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 356.522016][T19505] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 356.522048][T19505] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 356.522062][T19505] ? trace_kmalloc+0x1f/0xd0 [ 356.522074][T19505] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 356.522087][T19505] ? kstrndup+0xbf/0x160 [ 356.522104][T19505] hwsim_new_radio_nl+0xea4/0x1b10 [ 356.522122][T19505] ? __pfx___nla_validate_parse+0x10/0x10 [ 356.522153][T19505] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.522187][T19505] ? __nla_parse+0x40/0x60 [ 356.522209][T19505] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 356.522228][T19505] genl_family_rcv_msg_doit+0x215/0x300 [ 356.522246][T19505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 356.522267][T19505] ? bpf_lsm_capable+0x9/0x20 [ 356.522280][T19505] ? security_capable+0x7e/0x2e0 [ 356.522299][T19505] genl_rcv_msg+0x60e/0x790 [ 356.522316][T19505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.522329][T19505] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.522352][T19505] netlink_rcv_skb+0x205/0x470 [ 356.522360][T19505] ? __lock_acquire+0xab9/0xd20 [ 356.522375][T19505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.522389][T19505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.522410][T19505] ? down_read+0x1ad/0x2e0 [ 356.522424][T19505] genl_rcv+0x28/0x40 [ 356.522435][T19505] netlink_unicast+0x82f/0x9e0 [ 356.522456][T19505] ? __pfx_netlink_unicast+0x10/0x10 [ 356.522472][T19505] ? netlink_sendmsg+0x642/0xb30 [ 356.522481][T19505] ? skb_put+0x11b/0x210 [ 356.522496][T19505] netlink_sendmsg+0x805/0xb30 [ 356.522511][T19505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.522524][T19505] ? aa_sock_msg_perm+0xf1/0x1d0 [ 356.522535][T19505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.522546][T19505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.522556][T19505] __sock_sendmsg+0x219/0x270 [ 356.522575][T19505] ____sys_sendmsg+0x505/0x830 [ 356.522591][T19505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.522609][T19505] ? import_iovec+0x74/0xa0 [ 356.522625][T19505] ___sys_sendmsg+0x21f/0x2a0 [ 356.522638][T19505] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.522672][T19505] ? __fget_files+0x2a/0x420 [ 356.522681][T19505] ? __fget_files+0x3a0/0x420 [ 356.522707][T19505] __x64_sys_sendmsg+0x19b/0x260 [ 356.522731][T19505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.522757][T19505] ? rcu_is_watching+0x15/0xb0 [ 356.522770][T19505] ? do_syscall_64+0xbe/0x3b0 [ 356.522785][T19505] do_syscall_64+0xfa/0x3b0 [ 356.522795][T19505] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.522804][T19505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.522819][T19505] ? clear_bhb_loop+0x60/0xb0 [ 356.522831][T19505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.522840][T19505] RIP: 0033:0x7f8bdaf8eec9 [ 356.522850][T19505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.522859][T19505] RSP: 002b:00007f8bdbe1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.522870][T19505] RAX: ffffffffffffffda RBX: 00007f8bdb1e5fa0 RCX: 00007f8bdaf8eec9 [ 356.522877][T19505] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 356.522883][T19505] RBP: 00007f8bdb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.522888][T19505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.522894][T19505] R13: 00007f8bdb1e6038 R14: 00007f8bdb1e5fa0 R15: 00007ffd84779da8 [ 356.522911][T19505] [ 356.993673][T15441] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 357.002697][T15441] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 357.210774][T19517] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 357.218316][T19520] netlink: 'syz.1.3952': attribute type 10 has an invalid length. [ 357.250329][T19520] team0: Port device geneve0 added [ 357.587889][T19548] sit2: entered promiscuous mode [ 357.592876][T19548] sit2: entered allmulticast mode [ 357.759463][T19558] tc_dump_action: action bad kind [ 357.903095][ T5945] IPVS: starting estimator thread 0... [ 358.014361][T19575] IPVS: using max 27 ests per chain, 64800 per kthread [ 358.194120][T19571] hsr0 speed is unknown, defaulting to 1000 [ 358.203318][T19571] wg1 speed is unknown, defaulting to 1000 [ 358.216237][T19590] tipc: Enabled bearer , priority 0 [ 358.236280][T15441] bridge_slave_1: left allmulticast mode [ 358.253698][T15441] bridge_slave_1: left promiscuous mode [ 358.259492][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.270375][T15441] bridge_slave_0: left allmulticast mode [ 358.283068][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.218368][ T10] tipc: Node number set to 236793788 [ 359.264288][ T5873] Bluetooth: hci0: command tx timeout [ 359.626353][T15441] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 359.634703][T15441] bridge8 (unregistering): left promiscuous mode [ 359.691179][T15441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.701697][T15441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.716825][T15441] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 359.725640][T15441] bond0 (unregistering): Released all slaves [ 359.740568][T15441] bond1 (unregistering): Released all slaves [ 359.846123][T15441] bond2 (unregistering): Released all slaves [ 359.957660][T15441] bond3 (unregistering): (slave veth5): Releasing active interface [ 359.967060][T15441] bond3 (unregistering): Released all slaves [ 360.071715][T15441] bond4 (unregistering): Released all slaves [ 360.179703][T15441] bond5 (unregistering): Released all slaves [ 360.192314][T15441] bond6 (unregistering): Released all slaves [ 360.206206][T15441] bond7 (unregistering): Released all slaves [ 360.221274][T15441] bond8 (unregistering): Released all slaves [ 360.241818][T15441] bond9 (unregistering): Released all slaves [ 360.348420][T15441] bond10 (unregistering): (slave bond11): Releasing backup interface [ 360.356875][T15441] bond11 (unregistering): left promiscuous mode [ 360.363899][T15441] bond10 (unregistering): Released all slaves [ 360.467026][T15441] bond11 (unregistering): Released all slaves [ 360.570993][T15441] bond12 (unregistering): Released all slaves [ 360.682316][T15441] bond13 (unregistering): Released all slaves [ 360.695658][T19571] lo speed is unknown, defaulting to 1000 [ 360.700197][T19590] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 360.710410][T19590] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 360.766249][T19600] tipc: Resetting bearer [ 360.802299][T19605] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 360.985298][T15441] tipc: Left network mode [ 361.317685][T19636] __nla_validate_parse: 13 callbacks suppressed [ 361.317704][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'. [ 361.418980][T19631] tipc: Enabled bearer , priority 0 [ 361.472468][T19631] syzkaller0: entered promiscuous mode [ 361.488064][T19631] syzkaller0: entered allmulticast mode [ 361.545244][T19642] netlink: 'syz.0.3986': attribute type 1 has an invalid length. [ 361.553202][T19642] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3986'. [ 361.574471][T19625] openvswitch: netlink: IPv4 tunnel dst address is zero [ 361.671388][T19625] netlink: 'syz.2.3982': attribute type 2 has an invalid length. [ 361.703296][T19631] tipc: Resetting bearer [ 361.712481][T19631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.720906][T19631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.752399][T19630] tipc: Resetting bearer [ 361.812829][T19630] tipc: Disabling bearer [ 362.071223][T19654] netlink: 'syz.0.3992': attribute type 11 has an invalid length. [ 362.172936][T19651] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3988'. [ 362.257755][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'. [ 362.575329][T19674] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 362.798486][T19688] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4001'. [ 362.986379][T15441] hsr_slave_0: left promiscuous mode [ 362.993228][T15441] hsr_slave_1: left promiscuous mode [ 363.015976][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4002'. [ 363.024849][T15441] vlan0: left allmulticast mode [ 363.024879][T15441] veth0_vlan: left allmulticast mode [ 363.024895][T15441] vlan0: left promiscuous mode [ 363.025362][T15441] batadv_slave_1: left promiscuous mode [ 363.046802][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 363.058154][T15441] veth1_macvtap: left promiscuous mode [ 363.064343][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4004'. [ 363.073969][T15441] veth1_vlan: left promiscuous mode [ 363.116329][T19700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4004'. [ 363.209805][T15441] pim6reg (unregistering): left allmulticast mode [ 363.283127][T15441] pim6reg527 (unregistering): left allmulticast mode [ 363.813445][T15441] team0 (unregistering): Port device team_slave_1 removed [ 363.859376][T15441] team0 (unregistering): Port device team_slave_0 removed [ 364.275781][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.404976][T19717] netlink: 'syz.0.4011': attribute type 2 has an invalid length. [ 364.419459][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'. [ 364.446061][T19717] netlink: 'syz.0.4011': attribute type 4 has an invalid length. [ 364.483162][T19719] netlink: 'syz.3.4009': attribute type 1 has an invalid length. [ 364.489218][T19717] netlink: 'syz.0.4011': attribute type 4 has an invalid length. [ 364.587587][T19719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.656480][T19731] bond2: (slave gretap1): making interface the new active one [ 364.689742][T19731] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 364.737141][T17095] IPVS: starting estimator thread 0... [ 364.752325][T19735] vlan2: entered allmulticast mode [ 364.761066][T19735] bond0: entered allmulticast mode [ 364.823655][T19742] IPVS: using max 29 ests per chain, 69600 per kthread [ 365.081502][T15441] IPVS: stop unused estimator thread 0... [ 365.189679][T19767] syzkaller1: entered promiscuous mode [ 365.197682][T19767] syzkaller1: entered allmulticast mode [ 365.201794][T19774] netlink: 'syz.0.4024': attribute type 10 has an invalid length. [ 365.273983][T19774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.323314][T19774] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 365.357421][T19775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.367577][T19775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.380385][T19775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.391063][T19775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.448346][T19775] bond0: (slave batadv0): Releasing backup interface [ 365.573471][T19797] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (67108868), value rounded to 0 ms [ 365.693399][T19802] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 366.043424][T19802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.056164][T19802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.071696][T19802] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 366.082266][T19802] bond0 (unregistering): Released all slaves [ 366.099884][T19817] netlink: 'syz.0.4038': attribute type 5 has an invalid length. [ 366.123095][T19822] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.367927][T19840] delete_channel: no stack [ 366.388699][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 366.425160][T19838] geneve2: entered promiscuous mode [ 366.430236][T19845] __nla_validate_parse: 9 callbacks suppressed [ 366.430253][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 366.430382][T19838] geneve2: entered allmulticast mode [ 366.473052][T15441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.486943][T15441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.509812][T15441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.534276][T15441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.567169][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 366.594928][T19850] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 366.722068][T19850] tipc: Enabling of bearer rejected, failed to enable media [ 366.779080][T19859] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4053'. [ 367.093150][T19879] xt_l2tp: v2 sid > 0xffff: 1114112 [ 367.180843][T19887] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4060'. [ 367.209225][T19887] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4060'. [ 367.253310][T19887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4060'. [ 367.405052][T19901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4065'. [ 367.507964][T19901] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4065'. [ 367.522767][T19908] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4065'. [ 367.582928][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4070'. [ 367.771197][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.000703][T19946] netlink: 'syz.3.4080': attribute type 1 has an invalid length. [ 368.459526][T19985] ipvlan3: entered promiscuous mode [ 368.538390][T19993] gretap0: entered promiscuous mode [ 368.631067][T20001] netlink: 'syz.0.4094': attribute type 3 has an invalid length. [ 368.702584][T20010] sctp: [Deprecated]: syz.2.4093 (pid 20010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.702584][T20010] Use struct sctp_sack_info instead [ 368.753070][T20011] syzkaller1: entered promiscuous mode [ 368.759165][T20011] syzkaller1: entered allmulticast mode [ 369.023808][T20028] netlink: 'syz.4.4102': attribute type 11 has an invalid length. [ 369.060846][T20031] netlink: 'syz.4.4102': attribute type 11 has an invalid length. [ 369.232579][T20042] netlink: 'syz.2.4106': attribute type 1 has an invalid length. [ 369.643400][T20065] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 369.661438][T20065] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 369.680681][T20065] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 369.704323][T20065] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 370.357095][T20111] xt_limit: Overflow, try lower: 271964/0 [ 370.443437][T20125] netlink: 'syz.4.4122': attribute type 1 has an invalid length. [ 370.801657][T20153] macsec1: entered promiscuous mode [ 370.808951][T20153] macsec1: entered allmulticast mode [ 371.020325][T20155] netlink: 'syz.0.4137': attribute type 1 has an invalid length. [ 371.280629][T20176] openvswitch: netlink: Message has -1 unknown bytes. [ 371.454919][T20195] __nla_validate_parse: 18 callbacks suppressed [ 371.454935][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4148'. [ 371.486628][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'. [ 371.539830][T20193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4148'. [ 372.138105][T20241] delete_channel: no stack [ 372.167514][T20241] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 372.208553][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 372.283352][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'. [ 372.306635][T20254] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4168'. [ 372.429070][T20260] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 372.701230][T20283] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4176'. [ 372.832061][T20285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4176'. [ 372.885080][T20287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4179'. [ 372.888658][T20285] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4176'. [ 372.900581][T20287] netlink: 'syz.2.4179': attribute type 3 has an invalid length. [ 372.908978][T20285] netlink: 'syz.3.4176': attribute type 5 has an invalid length. [ 372.969575][T20297] netlink: 'syz.1.4180': attribute type 12 has an invalid length. [ 373.345235][T20315] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 373.389991][T20315] team0: Port device dummy0 added [ 373.398305][T20320] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 373.485344][T20320] team0: Failed to send options change via netlink (err -105) [ 373.512919][T20320] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.530585][T20320] team0: Port device dummy0 removed [ 373.538371][T20326] tipc: New replicast peer: 255.255.255.255 [ 373.551949][T20326] tipc: Enabled bearer , priority 10 [ 373.593919][T20318] gtp0: entered promiscuous mode [ 373.598896][T20318] gtp0: entered allmulticast mode [ 373.794710][T20341] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 373.853199][T20348] batadv_slave_1: entered promiscuous mode [ 373.899535][T20348] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 373.912325][T20348] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.942916][T20347] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 374.011480][T20362] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 374.161907][T20371] netlink: 'syz.0.4198': attribute type 1 has an invalid length. [ 374.361200][T20383] netlink: 'syz.3.4205': attribute type 13 has an invalid length. [ 374.371696][T20383] netlink: 'syz.3.4205': attribute type 58 has an invalid length. [ 374.520150][T20391] team0: Device wireguard1 is of different type [ 374.663819][ T5945] tipc: Node number set to 4169172144 [ 374.720744][T20391] team0: Device wireguard1 is of different type [ 374.809165][T20408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.936465][T20391] team0: Device wireguard1 is of different type [ 375.054376][T20398] hsr0 speed is unknown, defaulting to 1000 [ 375.062000][T20398] wg1 speed is unknown, defaulting to 1000 [ 375.069757][T20398] lo speed is unknown, defaulting to 1000 [ 375.174991][T20391] team0: Device wireguard1 is of different type [ 375.440575][T20429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.268995][T20476] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 376.317014][T20476] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 376.487090][T20488] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 376.503636][ T30] audit: type=1800 audit(1758665123.430:8): pid=20488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4239" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 376.536734][T20488] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 376.561184][T20488] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 376.656003][T20488] syz.1.4239 (20488) used greatest stack depth: 16584 bytes left [ 376.788910][T20511] __nla_validate_parse: 19 callbacks suppressed [ 376.788929][T20511] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4245'. [ 376.893014][T20516] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4247'. [ 376.931469][T20519] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4250'. [ 377.066210][T20527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4250'. [ 377.277229][T20538] bridge3: entered promiscuous mode [ 377.329538][T20538] bridge3: entered allmulticast mode [ 377.458541][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 377.531782][T20555] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 377.577640][T20555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4257'. [ 377.582730][T20554] netlink: 'syz.0.4257': attribute type 5 has an invalid length. [ 377.596938][T20553] netlink: 'syz.4.4258': attribute type 1 has an invalid length. [ 377.605045][T20553] netlink: 'syz.4.4258': attribute type 2 has an invalid length. [ 377.612779][T20553] netlink: 'syz.4.4258': attribute type 1 has an invalid length. [ 377.640424][T20553] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.4258'. [ 377.664404][T20548] hsr_slave_0 (unregistering): left promiscuous mode [ 377.697206][T20519] hsr0 speed is unknown, defaulting to 1000 [ 377.705520][T20519] wg1 speed is unknown, defaulting to 1000 [ 377.719460][T20519] lo speed is unknown, defaulting to 1000 [ 377.897606][T20589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4260'. [ 377.904692][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4261'. [ 378.251943][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4261'. [ 378.486690][T20608] netlink: 'syz.3.4266': attribute type 1 has an invalid length. [ 378.754305][T20622] gretap0: entered promiscuous mode [ 378.847645][T20625] nbd: couldn't find a device at index 3 [ 378.896727][T20624] netlink: 'syz.2.4273': attribute type 11 has an invalid length. [ 379.675743][T20653] netlink: 'syz.3.4282': attribute type 12 has an invalid length. [ 380.310751][T20685] geneve2: entered promiscuous mode [ 380.324197][T20685] geneve2: entered allmulticast mode [ 380.336188][T15451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.383811][T15427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.406761][T15427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.424070][ T9436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.705307][T20713] netlink: 'syz.4.4301': attribute type 10 has an invalid length. [ 380.781657][T20713] team0: Device veth1_macvtap failed to register rx_handler [ 380.968051][T20734] netlink: 'syz.1.4307': attribute type 26 has an invalid length. [ 382.752192][T20762] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 382.771087][T20762] __nla_validate_parse: 15 callbacks suppressed [ 382.771105][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4316'. [ 382.796897][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 382.803854][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4316'. [ 382.890231][T20764] veth5: entered allmulticast mode [ 382.899058][T20771] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4320'. [ 382.928260][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4322'. [ 382.993223][T20768] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 383.125016][T20785] tipc: Enabling of bearer rejected, already enabled [ 383.151163][T20783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'. [ 383.173491][T20783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4324'. [ 383.182764][T20783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4324'. [ 383.310430][T20789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.361157][T20801] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4328'. [ 383.578459][T20817] netlink: 'syz.2.4335': attribute type 1 has an invalid length. [ 383.590990][T20817] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4335'. [ 383.730321][T20829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 383.736832][T20829] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 385.181253][T20931] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 385.210868][T20936] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 385.699476][T20969] netlink: 'syz.4.4380': attribute type 21 has an invalid length. [ 385.722864][T20969] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.756195][T20972] tipc: Enabled bearer , priority 0 [ 385.771120][T20972] syzkaller0: entered promiscuous mode [ 385.780745][T20972] syzkaller0: entered allmulticast mode [ 385.963399][T20982] tipc: Resetting bearer [ 385.984290][T20972] netlink: 'syz.2.4379': attribute type 18 has an invalid length. [ 385.989412][T20982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.000430][T20982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.057181][T15451] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.093369][T15451] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.124563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.132976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.154106][T20971] tipc: Resetting bearer [ 386.194703][T20971] tipc: Disabling bearer [ 386.211061][T15427] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.248060][T15427] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.850621][T21038] netlink: 'syz.4.4403': attribute type 7 has an invalid length. [ 387.001377][T21047] openvswitch: netlink: Message has 5 unknown bytes. [ 387.289481][T21071] pim6reg1: entered promiscuous mode [ 387.303657][T21071] pim6reg1: entered allmulticast mode [ 387.380111][T21076] netlink: 'syz.0.4413': attribute type 1 has an invalid length. [ 387.448874][T21076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.688070][T21089] netlink: 'syz.2.4417': attribute type 1 has an invalid length. [ 387.787619][T21102] __nla_validate_parse: 26 callbacks suppressed [ 387.787638][T21102] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4421'. [ 387.867668][T21109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4422'. [ 387.879753][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 388.102527][T21124] tipc: Enabled bearer , priority 0 [ 388.155231][T21126] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4428'. [ 388.184938][T21124] tipc: Disabling bearer [ 388.279696][T21139] lo: entered allmulticast mode [ 388.302696][T21139] lo: left allmulticast mode [ 388.570862][T21164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4437'. [ 388.840563][T21178] netlink: 'syz.1.4444': attribute type 13 has an invalid length. [ 388.855142][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4445'. [ 388.878770][T21178] veth0_macvtap: left promiscuous mode [ 388.885399][T21178] macvtap0: entered allmulticast mode [ 388.914703][T21178] macvtap0: refused to change device tx_queue_len [ 388.923836][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4443'. [ 389.016094][T21177] nbd: must specify an index to disconnect [ 389.232987][T21199] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4448'. [ 389.425763][T21209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4453'. [ 389.732762][T21218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4457'. [ 389.783988][T21234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.786871][T21231] delete_channel: no stack [ 390.644262][T21277] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20001 [ 390.665187][T21281] 8021q: VLANs not supported on wg0 [ 390.673402][T21281] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 390.742237][T21285] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 390.961230][T21271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.962562][T21286] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 390.970842][T21271] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.989975][T21271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.047553][ T10] lo speed is unknown, defaulting to 1000 [ 391.063497][ T10] syz0: Port: 1 Link ACTIVE [ 391.084474][T17095] lo speed is unknown, defaulting to 1000 [ 391.316896][T21312] tipc: Enabling of bearer rejected, already enabled [ 391.681287][T21339] openvswitch: netlink: Flow actions attr not present in new flow. [ 391.727926][T21336] tipc: Enabled bearer , priority 0 [ 391.737401][T21336] syzkaller0: entered promiscuous mode [ 391.742885][T21336] syzkaller0: entered allmulticast mode [ 391.762757][T21336] tipc: Resetting bearer [ 391.775763][T21335] tipc: Resetting bearer [ 391.802669][T21335] tipc: Disabling bearer [ 392.098412][T21362] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 392.121933][T21362] CPU: 1 UID: 0 PID: 21362 Comm: syz.0.4497 Not tainted syzkaller #0 PREEMPT(full) [ 392.121960][T21362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.121974][T21362] Call Trace: [ 392.121982][T21362] [ 392.122000][T21362] dump_stack_lvl+0x189/0x250 [ 392.122029][T21362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.122051][T21362] ? __pfx__printk+0x10/0x10 [ 392.122080][T21362] ? kernfs_path_from_node+0x2f/0x290 [ 392.122099][T21362] ? kernfs_path_from_node+0x250/0x290 [ 392.122116][T21362] ? kernfs_path_from_node+0x2f/0x290 [ 392.122140][T21362] sysfs_warn_dup+0x8e/0xa0 [ 392.122159][T21362] sysfs_do_create_link_sd+0xc0/0x110 [ 392.122181][T21362] device_add_class_symlinks+0x1cf/0x240 [ 392.122207][T21362] device_add+0x475/0xb50 [ 392.122232][T21362] wiphy_register+0x1ba6/0x28d0 [ 392.122272][T21362] ? __pfx_wiphy_register+0x10/0x10 [ 392.122289][T21362] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 392.122319][T21362] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 392.122345][T21362] ieee80211_register_hw+0x3484/0x4100 [ 392.122383][T21362] ? ieee80211_register_hw+0x14c1/0x4100 [ 392.122417][T21362] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 392.122445][T21362] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.122476][T21362] ? __hrtimer_setup+0x187/0x210 [ 392.122493][T21362] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 392.122514][T21362] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 392.122568][T21362] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 392.122589][T21362] ? trace_kmalloc+0x1f/0xd0 [ 392.122608][T21362] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 392.122630][T21362] ? kstrndup+0xbf/0x160 [ 392.122659][T21362] hwsim_new_radio_nl+0xea4/0x1b10 [ 392.122686][T21362] ? __pfx___nla_validate_parse+0x10/0x10 [ 392.122722][T21362] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 392.122761][T21362] ? __nla_parse+0x40/0x60 [ 392.122785][T21362] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 392.122818][T21362] genl_family_rcv_msg_doit+0x215/0x300 [ 392.122847][T21362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 392.122883][T21362] ? bpf_lsm_capable+0x9/0x20 [ 392.122903][T21362] ? security_capable+0x7e/0x2e0 [ 392.122934][T21362] genl_rcv_msg+0x60e/0x790 [ 392.122966][T21362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.122996][T21362] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 392.123035][T21362] netlink_rcv_skb+0x205/0x470 [ 392.123052][T21362] ? __lock_acquire+0xab9/0xd20 [ 392.123074][T21362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.123097][T21362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.123135][T21362] ? down_read+0x1ad/0x2e0 [ 392.123158][T21362] genl_rcv+0x28/0x40 [ 392.123178][T21362] netlink_unicast+0x82f/0x9e0 [ 392.123212][T21362] ? __pfx_netlink_unicast+0x10/0x10 [ 392.123239][T21362] ? netlink_sendmsg+0x642/0xb30 [ 392.123254][T21362] ? skb_put+0x11b/0x210 [ 392.123274][T21362] netlink_sendmsg+0x805/0xb30 [ 392.123302][T21362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.123324][T21362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 392.123345][T21362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.123364][T21362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.123385][T21362] __sock_sendmsg+0x219/0x270 [ 392.123415][T21362] ____sys_sendmsg+0x505/0x830 [ 392.123443][T21362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.123476][T21362] ? import_iovec+0x74/0xa0 [ 392.123502][T21362] ___sys_sendmsg+0x21f/0x2a0 [ 392.123526][T21362] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.123585][T21362] ? __fget_files+0x2a/0x420 [ 392.123600][T21362] ? __fget_files+0x3a0/0x420 [ 392.123627][T21362] __x64_sys_sendmsg+0x19b/0x260 [ 392.123652][T21362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.123686][T21362] ? rcu_is_watching+0x15/0xb0 [ 392.123710][T21362] ? do_syscall_64+0xbe/0x3b0 [ 392.123734][T21362] do_syscall_64+0xfa/0x3b0 [ 392.123751][T21362] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.123769][T21362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.123787][T21362] ? clear_bhb_loop+0x60/0xb0 [ 392.123809][T21362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.123833][T21362] RIP: 0033:0x7fa4daf8eec9 [ 392.123850][T21362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.123866][T21362] RSP: 002b:00007fa4dbd9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.123886][T21362] RAX: ffffffffffffffda RBX: 00007fa4db1e5fa0 RCX: 00007fa4daf8eec9 [ 392.123899][T21362] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 392.123910][T21362] RBP: 00007fa4db011f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.123921][T21362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.123933][T21362] R13: 00007fa4db1e6038 R14: 00007fa4db1e5fa0 R15: 00007ffd20c17f58 [ 392.123965][T21362] [ 392.770006][T21380] netlink: 'syz.3.4502': attribute type 1 has an invalid length. [ 392.778498][T21380] netlink: 'syz.3.4502': attribute type 2 has an invalid length. [ 392.952755][T21398] __nla_validate_parse: 10 callbacks suppressed [ 392.952773][T21398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4505'. [ 393.368311][T21422] netlink: 'syz.0.4510': attribute type 1 has an invalid length. [ 393.398315][T21422] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4510'. [ 393.511658][T21432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4514'. [ 393.677475][T21440] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4517'. [ 393.831517][T21453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4518'. [ 393.959681][T21463] delete_channel: no stack [ 393.965868][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 393.978086][T21463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4525'. [ 394.406211][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4531'. [ 394.445092][T21489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.454316][T21488] netlink: 'syz.0.4532': attribute type 1 has an invalid length. [ 394.455704][T21489] batadv_slave_1 (unregistering): left promiscuous mode [ 394.814142][T21501] netlink: 'syz.0.4534': attribute type 9 has an invalid length. [ 394.828822][T21501] macvlan2: entered promiscuous mode [ 394.847628][T21501] netlink: 'syz.0.4534': attribute type 9 has an invalid length. [ 394.862136][T21501] macvlan3: entered promiscuous mode [ 395.016044][T21518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4541'. [ 395.097078][T21521] tipc: Enabled bearer , priority 0 [ 395.132795][T21521] syzkaller0: entered promiscuous mode [ 395.138473][T21521] syzkaller0: entered allmulticast mode [ 395.147186][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4541'. [ 395.229182][T21521] tipc: Resetting bearer [ 395.271596][T21533] pim6reg1: entered promiscuous mode [ 395.288966][T21533] pim6reg1: entered allmulticast mode [ 395.393400][T21527] tipc: Resetting bearer [ 395.471969][T21527] tipc: Disabling bearer [ 396.009882][T21598] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 396.017660][T21598] team0: Device macvtap0 is already an upper device of the team interface [ 396.880154][T21625] tipc: Enabled bearer , priority 0 [ 396.931419][T21625] tipc: Disabling bearer [ 397.209831][T21652] netlink: 'syz.4.4577': attribute type 39 has an invalid length. [ 398.049793][T21710] tipc: Enabled bearer , priority 0 [ 398.057802][T21710] syzkaller0: entered promiscuous mode [ 398.063405][T21710] syzkaller0: entered allmulticast mode [ 398.102169][T21710] tipc: Resetting bearer [ 398.169233][T21709] tipc: Resetting bearer [ 398.201511][T21709] tipc: Disabling bearer [ 398.396023][T21723] __nla_validate_parse: 9 callbacks suppressed [ 398.396042][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4604'. [ 398.472764][T21729] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 398.473018][T21731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4607'. [ 398.490240][T21729] netlink: 'syz.0.4606': attribute type 10 has an invalid length. [ 398.512062][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 398.516779][T21731] unsupported nlmsg_type 40 [ 398.552120][T21731] netlink: 'syz.3.4607': attribute type 1 has an invalid length. [ 398.606886][T21731] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4607'. [ 398.759657][T21747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4612'. [ 398.844524][T21752] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 398.893466][T21756] tipc: Enabled bearer , priority 0 [ 398.980216][T21763] syzkaller0: entered promiscuous mode [ 399.013125][T21763] syzkaller0: entered allmulticast mode [ 399.101053][T21763] tipc: Resetting bearer [ 399.235827][T21779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4623'. [ 399.289623][T21779] netlink: 'syz.2.4623': attribute type 1 has an invalid length. [ 399.313691][T21779] netlink: 'syz.2.4623': attribute type 3 has an invalid length. [ 399.333359][T21779] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4623'. [ 399.359487][ T5873] Bluetooth: hci2: link tx timeout [ 399.369092][ T5873] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 399.668441][T21755] tipc: Resetting bearer [ 399.732578][T21755] tipc: Disabling bearer [ 400.085194][T21829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4639'. [ 400.095444][T21825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.460468][T21857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4647'. [ 400.542660][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 400.616454][T21863] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 400.660204][T21865] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.668640][T21865] bridge0: entered allmulticast mode [ 401.153373][T21887] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 401.167572][T21887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.227675][T21891] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 401.255513][T21891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.280945][T21892] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 401.429394][ T5873] Bluetooth: hci2: command 0x0405 tx timeout [ 401.463433][T21899] delete_channel: no stack [ 401.920264][T21918] netlink: 'syz.1.4666': attribute type 1 has an invalid length. [ 401.976172][T21921] dvmrp0: entered allmulticast mode [ 402.402012][T21946] openvswitch: netlink: Message has 4 unknown bytes. [ 402.616752][T21966] sctp: [Deprecated]: syz.4.4682 (pid 21966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.616752][T21966] Use struct sctp_sack_info instead [ 402.708783][T21966] syzkaller0: entered promiscuous mode [ 402.717433][T21966] syzkaller0: entered allmulticast mode [ 402.878214][T21979] tipc: Enabled bearer , priority 0 [ 402.932732][T21979] syzkaller0: entered promiscuous mode [ 402.947048][T21979] syzkaller0: entered allmulticast mode [ 402.963487][T21984] macvlan4: entered promiscuous mode [ 402.969119][T21984] macvlan4: entered allmulticast mode [ 402.975930][T21984] bond3: entered promiscuous mode [ 402.982140][T21984] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 403.007576][T21984] bond3: left promiscuous mode [ 403.357804][T21978] tipc: Resetting bearer [ 403.410361][T21978] tipc: Disabling bearer [ 403.594971][T22027] __nla_validate_parse: 7 callbacks suppressed [ 403.594987][T22027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4691'. [ 403.702656][T22014] tunl0: entered promiscuous mode [ 403.713354][T22014] netlink: 'syz.0.4691': attribute type 3 has an invalid length. [ 403.723254][T22014] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4691'. [ 403.798866][T22027] team1: entered promiscuous mode [ 403.804239][T22038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4698'. [ 403.826780][T22027] team1: entered allmulticast mode [ 403.856667][T22043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4698'. [ 404.398725][T22082] netdevsim netdevsim2 ,: renamed from netdevsim0 [ 404.506503][T22087] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4712'. [ 404.561523][T22094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4712'. [ 404.682257][T22099] bridge0: port 2(syz_tun) entered blocking state [ 404.729094][T22099] bridge0: port 2(syz_tun) entered disabled state [ 404.742448][T22099] syz_tun: entered allmulticast mode [ 404.755493][T22099] syz_tun: entered promiscuous mode [ 404.789264][T22099] netlink: 'syz.4.4717': attribute type 10 has an invalid length. [ 404.982535][T22114] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4720'. [ 405.519497][T22145] netlink: 'syz.0.4730': attribute type 1 has an invalid length. [ 405.536065][T22145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4730'. [ 405.584462][T22145] nbd: illegal input index 1048576 [ 405.704377][T22151] tipc: Can't bind to reserved service type 3 [ 405.761263][T22155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.032514][ T9436] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 406.043098][ T9436] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 406.050701][T22170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.146678][T22188] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4741'. [ 406.289743][T22189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4741'. [ 406.516503][T22208] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 407.032983][T22244] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 407.115779][T22248] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 407.158152][T22248] CPU: 0 UID: 0 PID: 22248 Comm: syz.4.4762 Not tainted syzkaller #0 PREEMPT(full) [ 407.158179][T22248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.158191][T22248] Call Trace: [ 407.158199][T22248] [ 407.158207][T22248] dump_stack_lvl+0x189/0x250 [ 407.158239][T22248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.158260][T22248] ? __pfx__printk+0x10/0x10 [ 407.158289][T22248] ? kernfs_path_from_node+0x2f/0x290 [ 407.158309][T22248] ? kernfs_path_from_node+0x250/0x290 [ 407.158327][T22248] ? kernfs_path_from_node+0x2f/0x290 [ 407.158351][T22248] sysfs_warn_dup+0x8e/0xa0 [ 407.158371][T22248] sysfs_do_create_link_sd+0xc0/0x110 [ 407.158393][T22248] device_add_class_symlinks+0x1cf/0x240 [ 407.158420][T22248] device_add+0x475/0xb50 [ 407.158446][T22248] wiphy_register+0x1ba6/0x28d0 [ 407.158484][T22248] ? __pfx_wiphy_register+0x10/0x10 [ 407.158502][T22248] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 407.158534][T22248] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 407.158561][T22248] ieee80211_register_hw+0x3484/0x4100 [ 407.158600][T22248] ? ieee80211_register_hw+0x14c1/0x4100 [ 407.158634][T22248] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 407.158661][T22248] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 407.158695][T22248] ? __hrtimer_setup+0x187/0x210 [ 407.158712][T22248] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 407.158740][T22248] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 407.158803][T22248] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 407.158826][T22248] ? trace_kmalloc+0x1f/0xd0 [ 407.158847][T22248] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 407.158870][T22248] ? kstrndup+0xbf/0x160 [ 407.158901][T22248] hwsim_new_radio_nl+0xea4/0x1b10 [ 407.158928][T22248] ? __pfx___nla_validate_parse+0x10/0x10 [ 407.158964][T22248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 407.159003][T22248] ? __nla_parse+0x40/0x60 [ 407.159026][T22248] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 407.159058][T22248] genl_family_rcv_msg_doit+0x215/0x300 [ 407.159089][T22248] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 407.159128][T22248] ? bpf_lsm_capable+0x9/0x20 [ 407.159149][T22248] ? security_capable+0x7e/0x2e0 [ 407.159180][T22248] genl_rcv_msg+0x60e/0x790 [ 407.159210][T22248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.159230][T22248] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 407.159271][T22248] netlink_rcv_skb+0x205/0x470 [ 407.159288][T22248] ? __lock_acquire+0xab9/0xd20 [ 407.159311][T22248] ? __pfx_genl_rcv_msg+0x10/0x10 [ 407.159335][T22248] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.159376][T22248] ? down_read+0x1ad/0x2e0 [ 407.159400][T22248] genl_rcv+0x28/0x40 [ 407.159420][T22248] netlink_unicast+0x82f/0x9e0 [ 407.159455][T22248] ? __pfx_netlink_unicast+0x10/0x10 [ 407.159482][T22248] ? netlink_sendmsg+0x642/0xb30 [ 407.159497][T22248] ? skb_put+0x11b/0x210 [ 407.159522][T22248] netlink_sendmsg+0x805/0xb30 [ 407.159552][T22248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.159575][T22248] ? aa_sock_msg_perm+0xf1/0x1d0 [ 407.159595][T22248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.159613][T22248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.159633][T22248] __sock_sendmsg+0x219/0x270 [ 407.159662][T22248] ____sys_sendmsg+0x505/0x830 [ 407.159690][T22248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.159723][T22248] ? import_iovec+0x74/0xa0 [ 407.159756][T22248] ___sys_sendmsg+0x21f/0x2a0 [ 407.159781][T22248] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.159846][T22248] ? __fget_files+0x2a/0x420 [ 407.159862][T22248] ? __fget_files+0x3a0/0x420 [ 407.159891][T22248] __x64_sys_sendmsg+0x19b/0x260 [ 407.159916][T22248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.159950][T22248] ? rcu_is_watching+0x15/0xb0 [ 407.159973][T22248] ? do_syscall_64+0xbe/0x3b0 [ 407.159998][T22248] do_syscall_64+0xfa/0x3b0 [ 407.160016][T22248] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.160034][T22248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.160052][T22248] ? clear_bhb_loop+0x60/0xb0 [ 407.160075][T22248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.160092][T22248] RIP: 0033:0x7f8bdaf8eec9 [ 407.160108][T22248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.160124][T22248] RSP: 002b:00007f8bdbe1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.160144][T22248] RAX: ffffffffffffffda RBX: 00007f8bdb1e5fa0 RCX: 00007f8bdaf8eec9 [ 407.160158][T22248] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 407.160169][T22248] RBP: 00007f8bdb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.160181][T22248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.160192][T22248] R13: 00007f8bdb1e6038 R14: 00007f8bdb1e5fa0 R15: 00007ffd84779da8 [ 407.160224][T22248] [ 407.902263][T22273] netlink: 'syz.0.4771': attribute type 4 has an invalid length. [ 407.942333][T22280] netlink: 'syz.4.4770': attribute type 1 has an invalid length. [ 408.010154][T22283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.089780][ T30] audit: type=1107 audit(1758665155.030:9): pid=22281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L$y[$<Wx:!hTs*ǔ=GQAͭMHnXdP' [ 408.844854][T22337] __nla_validate_parse: 6 callbacks suppressed [ 408.844872][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4787'. [ 409.014504][T22351] netlink: 'syz.2.4790': attribute type 15 has an invalid length. [ 409.042653][T22349] netlink: 'syz.2.4790': attribute type 15 has an invalid length. [ 409.161950][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4794'. [ 409.279448][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'. [ 409.381150][T22366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4797'. [ 409.479786][T22384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4801'. [ 409.765606][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 409.780664][T22407] Unsupported ieee802154 address type: 0 [ 409.969486][T22427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.042245][T22431] syz.3.4818 uses old SIOCAX25GETINFO [ 410.588997][T22449] veth0_to_team: entered promiscuous mode [ 410.607259][T22449] veth0_to_team: entered allmulticast mode [ 410.629482][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'. [ 410.792938][T22452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4826'. [ 410.895390][T22460] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4828'. [ 411.117295][T22473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.427437][T22492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 411.777823][T22509] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4839'. [ 411.968307][T22514] can: request_module (can-proto-0) failed. [ 411.999292][T22513] can: request_module (can-proto-0) failed. [ 412.096100][T22527] tipc: Enabling of bearer rejected, already enabled [ 412.812977][T22569] netlink: 'syz.0.4858': attribute type 1 has an invalid length. [ 412.837727][T22569] netlink: 'syz.0.4858': attribute type 2 has an invalid length. [ 412.859507][T22570] netlink: 'syz.0.4858': attribute type 1 has an invalid length. [ 412.913842][T22570] netlink: 'syz.0.4858': attribute type 2 has an invalid length. [ 413.107327][T22586] netlink: 'syz.0.4863': attribute type 1 has an invalid length. [ 413.186192][T22586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.295905][T22591] veth3: entered promiscuous mode [ 413.311996][T22591] bond4: (slave veth3): Enslaving as an active interface with a down link [ 413.363795][T22586] vlan3: entered allmulticast mode [ 413.369034][T22586] bond4: entered allmulticast mode [ 413.391386][T22586] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 413.855210][T22621] gtp0: entered promiscuous mode [ 413.862081][T22621] gtp0: entered allmulticast mode [ 413.952864][T22628] dvmrp0: entered allmulticast mode [ 413.971371][T22619] dvmrp0: left allmulticast mode [ 414.261248][T22651] netlink: 'syz.4.4880': attribute type 10 has an invalid length. [ 414.326860][T22654] netlink: 'syz.2.4878': attribute type 21 has an invalid length. [ 414.393124][T22658] __nla_validate_parse: 9 callbacks suppressed [ 414.393142][T22658] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4878'. [ 414.427838][T22643] syzkaller0: entered promiscuous mode [ 414.458784][T22643] syzkaller0: entered allmulticast mode [ 414.489353][T22651] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 414.497464][T22654] netlink: 'syz.2.4878': attribute type 6 has an invalid length. [ 414.544381][T22654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4878'. [ 414.908270][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4889'. [ 415.582391][T22700] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 416.670622][T22700] dvmrp0: entered allmulticast mode [ 416.834893][T22715] ipvlan0: entered promiscuous mode [ 417.127907][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4905'. [ 417.189383][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4909'. [ 417.228232][T22742] netlink: 'syz.1.4911': attribute type 4 has an invalid length. [ 417.300590][T22745] pim6reg1: entered promiscuous mode [ 417.306603][T22745] pim6reg1: entered allmulticast mode [ 417.428204][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4912'. [ 417.446754][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4912'. [ 417.690022][T22769] IPVS: ip_vs_add_dest(): server weight less than zero [ 417.902645][T22793] netlink: 'syz.0.4926': attribute type 10 has an invalid length. [ 417.913056][T22793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4926'. [ 417.919468][T22790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4925'. [ 417.923394][T22793] dummy0: entered promiscuous mode [ 417.959165][T22793] bridge0: port 3(dummy0) entered blocking state [ 417.988176][T22798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4928'. [ 417.996872][T22793] bridge0: port 3(dummy0) entered disabled state [ 418.002523][T22791] can: request_module (can-proto-0) failed. [ 418.018631][T22793] dummy0: entered allmulticast mode [ 418.048188][T22793] dummy0: left allmulticast mode [ 418.065181][T22793] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 418.987425][T22874] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 418.988578][T22873] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 419.115736][T22880] netlink: 'syz.1.4952': attribute type 12 has an invalid length. [ 419.124574][T22880] netlink: 'syz.1.4952': attribute type 29 has an invalid length. [ 419.133246][T22880] netlink: 'syz.1.4952': attribute type 2 has an invalid length. [ 419.277828][T22887] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 419.444375][T22892] __nla_validate_parse: 8 callbacks suppressed [ 419.444393][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4959'. [ 419.480132][T22892] netlink: 'syz.3.4959': attribute type 9 has an invalid length. [ 419.493682][T22892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4959'. [ 419.871807][T22908] netlink: 'syz.3.4965': attribute type 10 has an invalid length. [ 419.964789][T22908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.974694][T22914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.988838][T22908] batadv0: entered allmulticast mode [ 420.005147][T22912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4966'. [ 420.031246][T22908] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 420.071339][T22905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4965'. [ 420.481111][T22941] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 420.664039][T22958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4981'. [ 420.682212][T22961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.704511][T22958] openvswitch: netlink: Flow key attr not present in new flow. [ 420.713317][T22962] netlink: 'syz.3.4984': attribute type 3 has an invalid length. [ 420.753844][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'. [ 421.315813][T22979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4988'. [ 421.406636][T22984] netlink: 'syz.0.4989': attribute type 1 has an invalid length. [ 421.424117][T22984] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4989'. [ 421.451050][T22984] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 421.567997][T22999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4993'. [ 421.787978][T23012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4999'. [ 421.837436][T23012] tipc: Enabling of bearer rejected, already enabled [ 421.926478][T23014] delete_channel: no stack [ 422.089736][T23036] macsec0: entered promiscuous mode [ 422.111352][T23036] macsec0: entered allmulticast mode [ 422.131683][T23036] veth1_macvtap: entered allmulticast mode [ 422.150260][T23036] macsec0: left promiscuous mode [ 422.167429][T23036] macsec0: left allmulticast mode [ 422.180805][T23036] veth1_macvtap: left allmulticast mode [ 422.206341][T23041] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 422.222211][T23041] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 422.373341][T23030] hsr0 speed is unknown, defaulting to 1000 [ 422.381166][T23030] wg1 speed is unknown, defaulting to 1000 [ 422.383383][T23047] netlink: 'syz.0.5008': attribute type 10 has an invalid length. [ 422.390356][T23030] lo speed is unknown, defaulting to 1000 [ 422.460338][T23047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 422.563499][T23053] gretap0: left promiscuous mode [ 422.642399][T23053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.830139][T23064] tipc: Enabling of bearer rejected, failed to enable media [ 423.185689][T23086] gretap0: entered promiscuous mode [ 423.792070][T23121] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 423.800326][T23121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.472363][T23147] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 424.490970][T23147] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 424.767445][T23169] __nla_validate_parse: 10 callbacks suppressed [ 424.767463][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5043'. [ 424.780729][T23167] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 424.789980][T23169] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 425.315414][T23202] netlink: 'syz.2.5050': attribute type 1 has an invalid length. [ 425.375706][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5050'. [ 425.470446][T23214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5053'. [ 425.669106][T23225] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 425.708461][T23226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5056'. [ 425.805256][T23234] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5060'. [ 425.832555][T23234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5060'. [ 425.871783][T23234] netlink: 'syz.1.5060': attribute type 3 has an invalid length. [ 425.997392][T23250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5063'. [ 426.136867][T23258] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5065'. [ 426.137344][T23250] team1: entered promiscuous mode [ 426.169572][T23250] team1: entered allmulticast mode [ 426.762036][T23289] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5076'. [ 426.777397][T23292] netlink: 'syz.1.5075': attribute type 1 has an invalid length. [ 426.790966][T23292] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5075'. [ 427.107794][T23312] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 427.124247][T23312] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 427.199171][T23321] netlink: 'syz.0.5085': attribute type 1 has an invalid length. [ 427.221716][T23321] netlink: 'syz.0.5085': attribute type 1 has an invalid length. [ 427.308887][T23326] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 427.450746][T23338] netlink: 'syz.0.5093': attribute type 18 has an invalid length. [ 427.614310][T23352] lo: entered promiscuous mode [ 427.649525][T23352] gre0: entered promiscuous mode [ 427.710569][T23352] erspan0: entered promiscuous mode [ 427.727238][T23352] erspan0: left allmulticast mode [ 427.747853][T23352] ip_vti0: entered promiscuous mode [ 428.106243][T23376] FAULT_INJECTION: forcing a failure. [ 428.106243][T23376] name failslab, interval 1, probability 0, space 0, times 0 [ 428.130467][T23376] CPU: 0 UID: 0 PID: 23376 Comm: syz.0.5104 Not tainted syzkaller #0 PREEMPT(full) [ 428.130492][T23376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.130503][T23376] Call Trace: [ 428.130510][T23376] [ 428.130518][T23376] dump_stack_lvl+0x189/0x250 [ 428.130542][T23376] ? __pfx____ratelimit+0x10/0x10 [ 428.130560][T23376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.130580][T23376] ? __pfx__printk+0x10/0x10 [ 428.130607][T23376] ? __pfx___might_resched+0x10/0x10 [ 428.130623][T23376] ? fs_reclaim_acquire+0x7d/0x100 [ 428.130649][T23376] should_fail_ex+0x414/0x560 [ 428.130678][T23376] should_failslab+0xa8/0x100 [ 428.130702][T23376] __kmalloc_noprof+0xcb/0x4f0 [ 428.130722][T23376] ? kfree+0x4d/0x440 [ 428.130738][T23376] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.130762][T23376] tomoyo_realpath_from_path+0xe3/0x5d0 [ 428.130781][T23376] ? tomoyo_domain+0xd9/0x130 [ 428.130806][T23376] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 428.130827][T23376] tomoyo_path_number_perm+0x1e8/0x5a0 [ 428.130852][T23376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 428.130893][T23376] ? __lock_acquire+0xab9/0xd20 [ 428.130936][T23376] ? __fget_files+0x2a/0x420 [ 428.130955][T23376] ? __fget_files+0x2a/0x420 [ 428.130969][T23376] ? __fget_files+0x3a0/0x420 [ 428.130983][T23376] ? __fget_files+0x2a/0x420 [ 428.131003][T23376] security_file_ioctl+0xcb/0x2d0 [ 428.131027][T23376] __se_sys_ioctl+0x47/0x170 [ 428.131049][T23376] do_syscall_64+0xfa/0x3b0 [ 428.131066][T23376] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.131084][T23376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.131101][T23376] ? clear_bhb_loop+0x60/0xb0 [ 428.131122][T23376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.131138][T23376] RIP: 0033:0x7fa4daf8eec9 [ 428.131154][T23376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.131167][T23376] RSP: 002b:00007fa4dbd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.131185][T23376] RAX: ffffffffffffffda RBX: 00007fa4db1e5fa0 RCX: 00007fa4daf8eec9 [ 428.131198][T23376] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 428.131209][T23376] RBP: 00007fa4dbd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 428.131219][T23376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.131230][T23376] R13: 00007fa4db1e6038 R14: 00007fa4db1e5fa0 R15: 00007ffd20c17f58 [ 428.131260][T23376] [ 428.131268][T23376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 428.702403][T23416] netlink: 'syz.0.5114': attribute type 1 has an invalid length. [ 428.822329][T23416] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.847200][T23417] vlan3: entered promiscuous mode [ 428.852430][T23417] bond5: entered promiscuous mode [ 428.858576][T23417] vlan3: entered allmulticast mode [ 428.864082][T23417] bond5: entered allmulticast mode [ 429.026435][T23431] netlink: 'syz.0.5119': attribute type 2 has an invalid length. [ 429.298177][T23454] netlink: 'syz.0.5126': attribute type 1 has an invalid length. [ 429.350654][T23454] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.684438][T23477] netlink: 'syz.1.5133': attribute type 10 has an invalid length. [ 429.721613][T23477] hsr0: mtu greater than device maximum [ 429.869969][T23490] __nla_validate_parse: 10 callbacks suppressed [ 429.869987][T23490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5138'. [ 430.065144][T23503] xt_bpf: check failed: parse error [ 430.406698][T23524] tipc: Enabling of bearer rejected, media not registered [ 430.570432][T23536] netlink: 'syz.1.5147': attribute type 4 has an invalid length. [ 430.739365][T23544] FAULT_INJECTION: forcing a failure. [ 430.739365][T23544] name failslab, interval 1, probability 0, space 0, times 0 [ 430.752602][T23544] CPU: 1 UID: 0 PID: 23544 Comm: syz.1.5153 Not tainted syzkaller #0 PREEMPT(full) [ 430.752625][T23544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.752635][T23544] Call Trace: [ 430.752643][T23544] [ 430.752651][T23544] dump_stack_lvl+0x189/0x250 [ 430.752675][T23544] ? __pfx____ratelimit+0x10/0x10 [ 430.752693][T23544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.752712][T23544] ? __pfx__printk+0x10/0x10 [ 430.752731][T23544] ? trace_contention_end+0x39/0x120 [ 430.752764][T23544] should_fail_ex+0x414/0x560 [ 430.752793][T23544] should_failslab+0xa8/0x100 [ 430.752817][T23544] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 430.752839][T23544] ? __alloc_skb+0x112/0x2d0 [ 430.752862][T23544] __alloc_skb+0x112/0x2d0 [ 430.752885][T23544] wireless_send_event+0x2bf/0xc30 [ 430.752908][T23544] ? wext_ioctl_dispatch+0xa2/0x410 [ 430.752934][T23544] ? __pfx_wireless_send_event+0x10/0x10 [ 430.752956][T23544] ? full_name_hash+0x92/0xe0 [ 430.752975][T23544] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 430.752993][T23544] ioctl_standard_call+0x145/0x1b0 [ 430.753016][T23544] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 430.753032][T23544] wext_ioctl_dispatch+0xeb/0x410 [ 430.753048][T23544] ? __pfx_ioctl_standard_call+0x10/0x10 [ 430.753071][T23544] wext_handle_ioctl+0x100/0x1c0 [ 430.753094][T23544] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 430.753110][T23544] ? __lock_acquire+0xab9/0xd20 [ 430.753157][T23544] sock_ioctl+0x15f/0x790 [ 430.753183][T23544] ? __pfx_sock_ioctl+0x10/0x10 [ 430.753205][T23544] ? __fget_files+0x2a/0x420 [ 430.753220][T23544] ? __fget_files+0x3a0/0x420 [ 430.753233][T23544] ? __fget_files+0x2a/0x420 [ 430.753252][T23544] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.753272][T23544] ? __pfx_sock_ioctl+0x10/0x10 [ 430.753293][T23544] __se_sys_ioctl+0xfc/0x170 [ 430.753316][T23544] do_syscall_64+0xfa/0x3b0 [ 430.753333][T23544] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.753350][T23544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.753367][T23544] ? clear_bhb_loop+0x60/0xb0 [ 430.753387][T23544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.753403][T23544] RIP: 0033:0x7ff0df78eec9 [ 430.753419][T23544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.753433][T23544] RSP: 002b:00007ff0e06c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.753451][T23544] RAX: ffffffffffffffda RBX: 00007ff0df9e5fa0 RCX: 00007ff0df78eec9 [ 430.753463][T23544] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000004 [ 430.753475][T23544] RBP: 00007ff0e06c7090 R08: 0000000000000000 R09: 0000000000000000 [ 430.753486][T23544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.753496][T23544] R13: 00007ff0df9e6038 R14: 00007ff0df9e5fa0 R15: 00007fff3f87bdc8 [ 430.753526][T23544] [ 431.228227][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 431.400904][T23572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5159'. [ 431.430660][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5160'. [ 431.978145][T23607] netlink: 277 bytes leftover after parsing attributes in process `syz.4.5170'. [ 432.179790][T23619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5172'. [ 432.440237][T23624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5174'. [ 432.462793][T23614] hsr0 speed is unknown, defaulting to 1000 [ 432.471331][T23614] wg1 speed is unknown, defaulting to 1000 [ 432.479813][T23614] lo speed is unknown, defaulting to 1000 [ 432.810338][T23632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5177'. [ 433.048873][T23642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5181'. [ 433.062610][T23639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5180'. [ 433.067674][T23641] netlink: 'syz.2.5181': attribute type 2 has an invalid length. [ 433.543371][T23654] syzkaller1: entered promiscuous mode [ 433.563054][T23654] syzkaller1: entered allmulticast mode [ 433.592601][T23657] lo: entered promiscuous mode [ 433.623411][T23657] netlink: 'syz.4.5185': attribute type 2 has an invalid length. [ 433.682177][T23657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.942791][T23721] __nla_validate_parse: 8 callbacks suppressed [ 434.942809][T23721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5205'. [ 434.996823][T23732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5210'. [ 435.172050][T23741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5213'. [ 435.354102][T23754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.487015][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5219'. [ 435.538963][T23761] syzkaller1: entered promiscuous mode [ 435.557951][T23761] syzkaller1: entered allmulticast mode [ 435.709999][T23780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.779285][T23775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.839556][T23787] tipc: Resetting bearer [ 435.873453][T23790] netlink: 'syz.3.5228': attribute type 1 has an invalid length. [ 435.912859][T23775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.959163][T23790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.416758][T23790] veth5: entered promiscuous mode [ 436.430460][T23790] bond5: (slave veth5): Enslaving as an active interface with an up link [ 436.676439][T23812] netlink: 'syz.4.5233': attribute type 4 has an invalid length. [ 436.739279][T23813] : entered promiscuous mode [ 436.831291][T23828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5239'. [ 437.138947][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5241'. [ 437.189084][T23842] sctp: [Deprecated]: syz.1.5240 (pid 23842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.189084][T23842] Use struct sctp_sack_info instead [ 437.316127][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5243'. [ 437.338025][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5243'. [ 437.358486][T23854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5243'. [ 437.400297][T23854] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5243'. [ 437.601256][T15458] tipc: Subscription rejected, illegal request [ 437.706837][T23876] FAULT_INJECTION: forcing a failure. [ 437.706837][T23876] name failslab, interval 1, probability 0, space 0, times 0 [ 437.733747][T23876] CPU: 0 UID: 0 PID: 23876 Comm: syz.4.5250 Not tainted syzkaller #0 PREEMPT(full) [ 437.733772][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.733782][T23876] Call Trace: [ 437.733789][T23876] [ 437.733796][T23876] dump_stack_lvl+0x189/0x250 [ 437.733820][T23876] ? __pfx____ratelimit+0x10/0x10 [ 437.733838][T23876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.733856][T23876] ? __pfx__printk+0x10/0x10 [ 437.733874][T23876] ? genl_rcv+0x28/0x40 [ 437.733892][T23876] ? ____sys_sendmsg+0x505/0x830 [ 437.733908][T23876] ? __x64_sys_sendmsg+0x19b/0x260 [ 437.733936][T23876] should_fail_ex+0x414/0x560 [ 437.733964][T23876] should_failslab+0xa8/0x100 [ 437.733988][T23876] kmem_cache_alloc_noprof+0x73/0x3c0 [ 437.734009][T23876] ? skb_clone+0x212/0x3a0 [ 437.734032][T23876] skb_clone+0x212/0x3a0 [ 437.734054][T23876] __netlink_deliver_tap+0x404/0x850 [ 437.734086][T23876] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.734104][T23876] netlink_deliver_tap+0x19c/0x1b0 [ 437.734123][T23876] netlink_sendskb+0x68/0x140 [ 437.734149][T23876] netlink_unicast+0x397/0x9e0 [ 437.734169][T23876] ? __asan_memcpy+0x40/0x70 [ 437.734195][T23876] ? __pfx_netlink_unicast+0x10/0x10 [ 437.734229][T23876] netlink_rcv_skb+0x28c/0x470 [ 437.734245][T23876] ? __lock_acquire+0xab9/0xd20 [ 437.734266][T23876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.734287][T23876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.734322][T23876] ? down_read+0x1ad/0x2e0 [ 437.734345][T23876] genl_rcv+0x28/0x40 [ 437.734363][T23876] netlink_unicast+0x82f/0x9e0 [ 437.734396][T23876] ? __pfx_netlink_unicast+0x10/0x10 [ 437.734422][T23876] ? netlink_sendmsg+0x642/0xb30 [ 437.734436][T23876] ? skb_put+0x11b/0x210 [ 437.734456][T23876] netlink_sendmsg+0x805/0xb30 [ 437.734483][T23876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.734504][T23876] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.734523][T23876] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.734540][T23876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.734559][T23876] __sock_sendmsg+0x219/0x270 [ 437.734584][T23876] ____sys_sendmsg+0x505/0x830 [ 437.734611][T23876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.734641][T23876] ? import_iovec+0x74/0xa0 [ 437.734666][T23876] ___sys_sendmsg+0x21f/0x2a0 [ 437.734697][T23876] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.734757][T23876] ? __fget_files+0x2a/0x420 [ 437.734772][T23876] ? __fget_files+0x3a0/0x420 [ 437.734800][T23876] __x64_sys_sendmsg+0x19b/0x260 [ 437.734823][T23876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.734853][T23876] ? __pfx_ksys_write+0x10/0x10 [ 437.734871][T23876] ? rcu_is_watching+0x15/0xb0 [ 437.734894][T23876] ? do_syscall_64+0xbe/0x3b0 [ 437.734915][T23876] do_syscall_64+0xfa/0x3b0 [ 437.734929][T23876] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.734944][T23876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.734960][T23876] ? clear_bhb_loop+0x60/0xb0 [ 437.734978][T23876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.734991][T23876] RIP: 0033:0x7f8bdaf8eec9 [ 437.735007][T23876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.735021][T23876] RSP: 002b:00007f8bdbe1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.735038][T23876] RAX: ffffffffffffffda RBX: 00007f8bdb1e5fa0 RCX: 00007f8bdaf8eec9 [ 437.735051][T23876] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 437.735061][T23876] RBP: 00007f8bdbe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 437.735071][T23876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.735080][T23876] R13: 00007f8bdb1e6038 R14: 00007f8bdb1e5fa0 R15: 00007ffd84779da8 [ 437.735108][T23876] [ 438.409505][T23884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.624516][T23884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.660091][T23912] veth1_to_bond: entered allmulticast mode [ 438.805496][T23884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.840949][T23911] veth1_to_bond: left allmulticast mode [ 438.948424][T23884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.967960][T23925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.083370][T15458] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.132334][T15458] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.171504][T15447] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.250570][T15447] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.471317][T23960] openvswitch: netlink: IP tunnel TTL not specified. [ 439.594417][T23970] netlink: 'syz.2.5280': attribute type 25 has an invalid length. [ 440.000568][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.336976][T24009] sctp: [Deprecated]: syz.2.5291 (pid 24009) Use of int in maxseg socket option. [ 440.336976][T24009] Use struct sctp_assoc_value instead [ 440.645659][T24021] __nla_validate_parse: 14 callbacks suppressed [ 440.645676][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5296'. [ 441.105000][T24052] bond1: option mode: unable to set because the bond device is up [ 441.682824][T24067] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5309'. [ 442.437127][T24085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5314'. [ 442.683869][T24096] pim6reg: entered allmulticast mode [ 443.163678][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5318'. [ 443.181221][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5318'. [ 443.324480][T24110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5320'. [ 443.411753][T24116] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5321'. [ 443.691761][T24138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.720591][ T30] audit: type=1107 audit(1758665190.660:10): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 443.862515][T24146] netlink: 'syz.1.5329': attribute type 29 has an invalid length. [ 443.894053][T24146] netlink: 'syz.1.5329': attribute type 29 has an invalid length. [ 443.913965][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024450400: rx timeout, send abort [ 443.922328][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024453000: rx timeout, send abort [ 443.930775][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024450400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.945157][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024453000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.960699][T24150] netlink: 604 bytes leftover after parsing attributes in process `syz.1.5329'. [ 443.978996][T24144] syz.0.5327: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 444.022010][T24144] CPU: 1 UID: 0 PID: 24144 Comm: syz.0.5327 Not tainted syzkaller #0 PREEMPT(full) [ 444.022036][T24144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.022046][T24144] Call Trace: [ 444.022053][T24144] [ 444.022060][T24144] dump_stack_lvl+0x189/0x250 [ 444.022089][T24144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.022109][T24144] ? __pfx__printk+0x10/0x10 [ 444.022130][T24144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 444.022151][T24144] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 444.022173][T24144] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 444.022195][T24144] warn_alloc+0x214/0x310 [ 444.022224][T24144] ? __pfx_warn_alloc+0x10/0x10 [ 444.022256][T24144] ? __get_vm_area_node+0x28f/0x300 [ 444.022279][T24144] ? hash_ipmac_create+0x358/0xfe0 [ 444.022303][T24144] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 444.022324][T24144] ? do_syscall_64+0xfa/0x3b0 [ 444.022373][T24144] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.022401][T24144] ? rcu_is_watching+0x15/0xb0 [ 444.022419][T24144] ? hash_ipmac_create+0x358/0xfe0 [ 444.022438][T24144] ? hash_ipmac_create+0x358/0xfe0 [ 444.022456][T24144] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 444.022478][T24144] ? hash_ipmac_create+0x358/0xfe0 [ 444.022498][T24144] ? hash_ipmac_create+0x2fe/0xfe0 [ 444.022523][T24144] hash_ipmac_create+0x358/0xfe0 [ 444.022552][T24144] ? __nla_parse+0x40/0x60 [ 444.022570][T24144] ? __pfx_hash_ipmac_create+0x10/0x10 [ 444.022593][T24144] ip_set_create+0xa97/0x1940 [ 444.022615][T24144] ? ip_set_create+0x4a2/0x1940 [ 444.022649][T24144] ? __pfx_ip_set_create+0x10/0x10 [ 444.022709][T24144] nfnetlink_rcv_msg+0xb4a/0x1130 [ 444.022734][T24144] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 444.022776][T24144] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 444.022795][T24144] ? kasan_save_free_info+0x46/0x50 [ 444.022872][T24144] netlink_rcv_skb+0x205/0x470 [ 444.022892][T24144] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 444.022916][T24144] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.022946][T24144] ? bpf_lsm_capable+0x9/0x20 [ 444.022966][T24144] ? security_capable+0x7e/0x2e0 [ 444.022997][T24144] nfnetlink_rcv+0x26a/0x2520 [ 444.023023][T24144] ? __dev_queue_xmit+0x1d79/0x3b50 [ 444.023055][T24144] ? __dev_queue_xmit+0x27b/0x3b50 [ 444.023089][T24144] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 444.023111][T24144] ? __pfx___dev_queue_xmit+0x10/0x10 [ 444.023147][T24144] ? ref_tracker_free+0x63a/0x7d0 [ 444.023164][T24144] ? __asan_memcpy+0x40/0x70 [ 444.023182][T24144] ? __pfx_ref_tracker_free+0x10/0x10 [ 444.023217][T24144] ? skb_clone+0x246/0x3a0 [ 444.023240][T24144] ? __netlink_deliver_tap+0x807/0x850 [ 444.023258][T24144] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.023283][T24144] ? netlink_deliver_tap+0x2e/0x1b0 [ 444.023309][T24144] netlink_unicast+0x82f/0x9e0 [ 444.023342][T24144] ? __pfx_netlink_unicast+0x10/0x10 [ 444.023367][T24144] ? netlink_sendmsg+0x642/0xb30 [ 444.023383][T24144] ? skb_put+0x11b/0x210 [ 444.023405][T24144] netlink_sendmsg+0x805/0xb30 [ 444.023433][T24144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.023455][T24144] ? aa_sock_msg_perm+0xf1/0x1d0 [ 444.023474][T24144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.023491][T24144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.023511][T24144] __sock_sendmsg+0x219/0x270 [ 444.023538][T24144] ____sys_sendmsg+0x505/0x830 [ 444.023565][T24144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.023592][T24144] ? import_iovec+0x74/0xa0 [ 444.023612][T24144] ___sys_sendmsg+0x21f/0x2a0 [ 444.023633][T24144] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.023689][T24144] ? __fget_files+0x2a/0x420 [ 444.023704][T24144] ? __fget_files+0x3a0/0x420 [ 444.023731][T24144] __x64_sys_sendmsg+0x19b/0x260 [ 444.023754][T24144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.023786][T24144] ? rcu_is_watching+0x15/0xb0 [ 444.023814][T24144] ? do_syscall_64+0xbe/0x3b0 [ 444.023837][T24144] do_syscall_64+0xfa/0x3b0 [ 444.023854][T24144] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.023871][T24144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.023888][T24144] ? clear_bhb_loop+0x60/0xb0 [ 444.023910][T24144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.023926][T24144] RIP: 0033:0x7fa4daf8eec9 [ 444.023943][T24144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.023958][T24144] RSP: 002b:00007fa4dbd7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.023977][T24144] RAX: ffffffffffffffda RBX: 00007fa4db1e6090 RCX: 00007fa4daf8eec9 [ 444.023990][T24144] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 444.024002][T24144] RBP: 00007fa4db011f91 R08: 0000000000000000 R09: 0000000000000000 [ 444.024013][T24144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.024024][T24144] R13: 00007fa4db1e6128 R14: 00007fa4db1e6090 R15: 00007ffd20c17f58 [ 444.024053][T24144] [ 444.525910][T24156] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5332'. [ 444.535659][T24144] Mem-Info: [ 444.538789][T24144] active_anon:3877 inactive_anon:0 isolated_anon:0 [ 444.538789][T24144] active_file:3463 inactive_file:40039 isolated_file:0 [ 444.538789][T24144] unevictable:768 dirty:86 writeback:0 [ 444.538789][T24144] slab_reclaimable:13409 slab_unreclaimable:129071 [ 444.538789][T24144] mapped:29092 shmem:1362 pagetables:1081 [ 444.538789][T24144] sec_pagetables:0 bounce:0 [ 444.538789][T24144] kernel_misc_reclaimable:0 [ 444.538789][T24144] free:1287685 free_pcp:15092 free_cma:0 [ 444.588302][T24144] Node 0 active_anon:15608kB inactive_anon:0kB active_file:13852kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116468kB dirty:344kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15676kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.622077][T24144] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.633325][T24160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5333'. [ 444.676810][T24144] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.730419][T24144] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 444.736633][T24144] Node 0 DMA32 free:1241848kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15460kB inactive_anon:0kB active_file:13852kB inactive_file:158384kB unevictable:1536kB writepending:344kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:47044kB local_pcp:22984kB free_cma:0kB [ 444.769892][T24144] lowmem_reserve[]: 0 0 1 1 1 [ 444.780011][T24144] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 444.809932][T24144] lowmem_reserve[]: 0 0 0 0 0 [ 444.814715][T24144] Node 1 Normal free:3893520kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13904kB local_pcp:1536kB free_cma:0kB [ 444.835729][T24163] netlink: 'syz.3.5335': attribute type 10 has an invalid length. [ 444.846890][T24144] lowmem_reserve[]: 0 0 0 0 0 [ 444.865057][T24144] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.880473][T24144] Node 0 DMA32: 1421*4kB (UME) 761*8kB (UME) 475*16kB (UME) 925*32kB (UME) 521*64kB (UME) 74*128kB (UME) 23*256kB (UME) 7*512kB (UME) 8*1024kB (UME) 3*2048kB (UM) 275*4096kB (UM) = 1241996kB [ 444.899561][T24144] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 444.912025][T24144] Node 1 Normal: 162*4kB (UME) 49*8kB (UME) 48*16kB (UME) 190*32kB (UME) 47*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3893520kB [ 444.930386][T24144] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.940019][T24144] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.949721][T24144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.959524][T24144] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.968986][T24144] 44861 total pagecache pages [ 444.973751][T24144] 0 pages in swap cache [ 444.977906][T24144] Free swap = 124996kB [ 444.982064][T24144] Total swap = 124996kB [ 444.987364][T24144] 2097051 pages RAM [ 444.991183][T24144] 0 pages HighMem/MovableOnly [ 444.995958][T24144] 425672 pages reserved [ 445.000121][T24144] 0 pages cma reserved [ 445.041153][T24171] netlink: 'syz.2.5337': attribute type 6 has an invalid length. [ 445.092167][T24171] netlink: 'syz.2.5337': attribute type 1 has an invalid length. [ 445.105736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.163518][T24175] nbd: socks must be embedded in a SOCK_ITEM attr [ 445.316786][T24188] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 445.667299][T24202] eql: remember to turn off Van-Jacobson compression on your slave devices [ 445.680989][T24202] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 445.748802][T24212] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 445.764200][T24212] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 445.829738][T24219] __nla_validate_parse: 3 callbacks suppressed [ 445.829758][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5354'. [ 445.848320][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5354'. [ 445.873683][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5354'. [ 445.904581][T24221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5353'. [ 445.940864][T24221] netlink: 'syz.2.5353': attribute type 42 has an invalid length. [ 446.090720][T24234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5358'. [ 446.101840][T24235] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.130054][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5359'. [ 446.154064][T24235] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5359'. [ 446.202956][T24237] can: request_module (can-proto-5) failed. [ 446.432315][T24255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5363'. [ 446.467505][T24255] delete_channel: no stack [ 446.697694][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5365'. [ 446.867095][T24264] openvswitch: netlink: IP tunnel dst address not specified [ 447.000201][T24267] IPv6: NLM_F_CREATE should be specified when creating new route [ 447.362977][T24279] block nbd0: not configured, cannot reconfigure [ 447.403243][T24282] 8021q: VLANs not supported on sit0 [ 447.408944][T24281] netlink: 'syz.2.5373': attribute type 1 has an invalid length. [ 447.512031][T24281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.532918][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5373'. [ 447.577242][T24285] bond1: (slave veth11): Enslaving as an active interface with a down link [ 447.635089][T24281] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 448.734843][T24339] team_slave_0: entered allmulticast mode [ 448.788992][T24339] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 448.841880][T24339] vxcan0: entered allmulticast mode [ 448.927525][T24354] sctp: [Deprecated]: syz.2.5393 (pid 24354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.927525][T24354] Use struct sctp_sack_info instead [ 448.957538][T24356] syz_tun: left allmulticast mode [ 448.962597][T24356] syz_tun: left promiscuous mode [ 448.988634][T24356] bridge0: port 2(syz_tun) entered disabled state [ 449.035932][T24356] bridge_slave_0: left allmulticast mode [ 449.041604][T24356] bridge_slave_0: left promiscuous mode [ 449.052183][T24356] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.328480][T24378] unknown channel width for channel at 909000KHz? [ 449.337724][T24378] unknown channel width for channel at 909000KHz? [ 449.349355][T24378] unknown channel width for channel at 909000KHz? [ 449.626964][T24404] netlink: 'syz.0.5410': attribute type 1 has an invalid length. [ 449.885551][T24404] gretap1: entered promiscuous mode [ 449.913453][T24404] bond7: (slave gretap1): making interface the new active one [ 449.939751][T24404] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 450.057259][T24433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.098468][T24439] netlink: 'syz.1.5419': attribute type 1 has an invalid length. [ 450.190144][T24439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.227642][T24442] bond6: (slave gretap1): making interface the new active one [ 450.236846][T24442] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 450.270763][T24446] bond0: option ad_select: unable to set because the bond device is up [ 451.136405][T24491] __nla_validate_parse: 6 callbacks suppressed [ 451.136423][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5435'. [ 451.421927][T24516] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 451.431932][ T5945] IPVS: starting estimator thread 0... [ 451.448907][T24513] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5442'. [ 451.452756][T24516] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5443'. [ 451.459902][T24513] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 451.468253][T24517] macvtap1: entered promiscuous mode [ 451.476213][T24513] openvswitch: netlink: Message has 6332 unknown bytes. [ 451.498597][T24517] macvtap1: entered allmulticast mode [ 451.506950][T24516] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 451.516048][T24514] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 451.524136][T24514] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5443'. [ 451.534690][T24514] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 451.536714][T24518] IPVS: using max 38 ests per chain, 91200 per kthread [ 451.595611][T24526] macvtap1: entered promiscuous mode [ 451.600935][T24526] macvtap1: entered allmulticast mode [ 451.618253][T24521] syzkaller0: entered promiscuous mode [ 451.626226][T24521] syzkaller0: entered allmulticast mode [ 451.978853][T24550] netlink: 'syz.2.5450': attribute type 8 has an invalid length. [ 452.121000][T24556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5452'. [ 452.159983][T24558] netlink: 'syz.4.5454': attribute type 39 has an invalid length. [ 452.262205][T24562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5455'. [ 452.329301][T24562] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5455'. [ 452.342708][T24573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5458'. [ 452.427083][T24565] syzkaller1: entered promiscuous mode [ 452.445316][T24565] syzkaller1: entered allmulticast mode [ 452.460165][T24574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5458'. [ 452.461799][T24578] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 452.478170][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5459'. [ 452.488985][T24576] tc_dump_action: action bad kind [ 453.413848][T24644] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 453.416316][T24645] tipc: Enabling of bearer rejected, media not registered [ 453.423204][T24644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.452484][T24648] openvswitch: netlink: Multiple metadata blocks provided [ 453.490346][T24648] vlan0: entered allmulticast mode [ 453.507209][T24648] bond0: entered allmulticast mode [ 453.512710][T24648] bond_slave_0: entered allmulticast mode [ 453.518888][T24648] bond_slave_1: entered allmulticast mode [ 454.379028][T24709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.425518][T24711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.811598][T24744] netlink: 'syz.2.5503': attribute type 1 has an invalid length. [ 454.828891][T24741] netlink: 'syz.2.5503': attribute type 1 has an invalid length. [ 454.851471][T24742] syzkaller1: entered promiscuous mode [ 454.888189][T24742] syzkaller1: entered allmulticast mode [ 454.947348][T24753] tipc: Enabled bearer , priority 0 [ 455.065722][T24755] tipc: Resetting bearer [ 455.076121][T24758] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 455.089332][T24758] CPU: 1 UID: 0 PID: 24758 Comm: syz.2.5510 Not tainted syzkaller #0 PREEMPT(full) [ 455.089366][T24758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 455.089376][T24758] Call Trace: [ 455.089383][T24758] [ 455.089390][T24758] dump_stack_lvl+0x189/0x250 [ 455.089417][T24758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.089433][T24758] ? __pfx__printk+0x10/0x10 [ 455.089450][T24758] ? kernfs_path_from_node+0x2f/0x290 [ 455.089462][T24758] ? kernfs_path_from_node+0x250/0x290 [ 455.089471][T24758] ? kernfs_path_from_node+0x2f/0x290 [ 455.089484][T24758] sysfs_warn_dup+0x8e/0xa0 [ 455.089495][T24758] sysfs_do_create_link_sd+0xc0/0x110 [ 455.089507][T24758] device_add_class_symlinks+0x1cf/0x240 [ 455.089522][T24758] device_add+0x475/0xb50 [ 455.089536][T24758] wiphy_register+0x1ba6/0x28d0 [ 455.089558][T24758] ? __pfx_wiphy_register+0x10/0x10 [ 455.089567][T24758] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 455.089585][T24758] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 455.089601][T24758] ieee80211_register_hw+0x3484/0x4100 [ 455.089623][T24758] ? ieee80211_register_hw+0x14c1/0x4100 [ 455.089642][T24758] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 455.089657][T24758] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 455.089687][T24758] ? __hrtimer_setup+0x187/0x210 [ 455.089697][T24758] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 455.089708][T24758] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 455.089741][T24758] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 455.089754][T24758] ? trace_kmalloc+0x1f/0xd0 [ 455.089766][T24758] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 455.089780][T24758] ? kstrndup+0xbf/0x160 [ 455.089796][T24758] hwsim_new_radio_nl+0xea4/0x1b10 [ 455.089812][T24758] ? __pfx___nla_validate_parse+0x10/0x10 [ 455.089831][T24758] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 455.089853][T24758] ? __nla_parse+0x40/0x60 [ 455.089865][T24758] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 455.089884][T24758] genl_family_rcv_msg_doit+0x215/0x300 [ 455.089902][T24758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 455.089923][T24758] ? bpf_lsm_capable+0x9/0x20 [ 455.089938][T24758] ? security_capable+0x7e/0x2e0 [ 455.089957][T24758] genl_rcv_msg+0x60e/0x790 [ 455.089974][T24758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.089986][T24758] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 455.090009][T24758] netlink_rcv_skb+0x205/0x470 [ 455.090018][T24758] ? __lock_acquire+0xab9/0xd20 [ 455.090032][T24758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.090049][T24758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.090071][T24758] ? down_read+0x1ad/0x2e0 [ 455.090084][T24758] genl_rcv+0x28/0x40 [ 455.090096][T24758] netlink_unicast+0x82f/0x9e0 [ 455.090116][T24758] ? __pfx_netlink_unicast+0x10/0x10 [ 455.090133][T24758] ? netlink_sendmsg+0x642/0xb30 [ 455.090142][T24758] ? skb_put+0x11b/0x210 [ 455.090155][T24758] netlink_sendmsg+0x805/0xb30 [ 455.090171][T24758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.090184][T24758] ? aa_sock_msg_perm+0xf1/0x1d0 [ 455.090195][T24758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.090206][T24758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.090216][T24758] __sock_sendmsg+0x219/0x270 [ 455.090234][T24758] ____sys_sendmsg+0x505/0x830 [ 455.090250][T24758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.090267][T24758] ? import_iovec+0x74/0xa0 [ 455.090283][T24758] ___sys_sendmsg+0x21f/0x2a0 [ 455.090296][T24758] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.090330][T24758] ? __fget_files+0x2a/0x420 [ 455.090339][T24758] ? __fget_files+0x3a0/0x420 [ 455.090357][T24758] __x64_sys_sendmsg+0x19b/0x260 [ 455.090371][T24758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.090390][T24758] ? rcu_is_watching+0x15/0xb0 [ 455.090403][T24758] ? do_syscall_64+0xbe/0x3b0 [ 455.090417][T24758] do_syscall_64+0xfa/0x3b0 [ 455.090427][T24758] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.090436][T24758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.090445][T24758] ? clear_bhb_loop+0x60/0xb0 [ 455.090458][T24758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.090467][T24758] RIP: 0033:0x7fd319d8eec9 [ 455.090476][T24758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.090484][T24758] RSP: 002b:00007fd31abdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.090496][T24758] RAX: ffffffffffffffda RBX: 00007fd319fe5fa0 RCX: 00007fd319d8eec9 [ 455.090502][T24758] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 455.090509][T24758] RBP: 00007fd319e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.090514][T24758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.090520][T24758] R13: 00007fd319fe6038 R14: 00007fd319fe5fa0 R15: 00007fffcd1ad828 [ 455.090536][T24758] [ 455.578824][T24749] tipc: Disabling bearer [ 455.653467][T24779] netlink: 'syz.2.5516': attribute type 83 has an invalid length. [ 455.892426][T24777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.002808][T24798] tipc: Enabled bearer , priority 0 [ 456.011503][T24798] syzkaller0: entered promiscuous mode [ 456.029254][T24798] syzkaller0: entered allmulticast mode [ 456.067451][T24797] tipc: Resetting bearer [ 456.137521][T24797] tipc: Disabling bearer [ 456.178954][T24817] netlink: 'syz.2.5528': attribute type 1 has an invalid length. [ 456.269046][T24817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.300445][T24828] __nla_validate_parse: 19 callbacks suppressed [ 456.300464][T24828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5530'. [ 456.368064][T24824] bond2: (slave veth13): Enslaving as an active interface with a down link [ 456.378209][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5530'. [ 456.413316][T24817] veth15: entered promiscuous mode [ 456.428953][T24817] bond2: (slave veth15): Enslaving as an active interface with a down link [ 456.647948][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5534'. [ 456.667642][T15447] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.667769][T24847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5534'. [ 456.690590][T15447] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.714667][T15447] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.736261][T24855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5534'. [ 456.751730][T15447] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.821996][T24857] bridge8: entered promiscuous mode [ 456.833348][T24857] bridge8: entered allmulticast mode [ 457.011648][T24862] veth5: entered promiscuous mode [ 457.041188][T24862] veth5: entered allmulticast mode [ 457.067519][T24873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5543'. [ 457.149046][T24874] netlink: 340 bytes leftover after parsing attributes in process `syz.1.5541'. [ 457.399789][T24888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5547'. [ 457.463197][T24894] syzkaller1: entered promiscuous mode [ 457.484100][T24894] syzkaller1: entered allmulticast mode [ 457.522364][T24888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5547'. [ 457.770459][T24911] tipc: Enabling of bearer rejected, failed to enable media [ 457.899816][T24927] netlink: 'syz.4.5557': attribute type 10 has an invalid length. [ 457.958132][T24927] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 458.071271][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5556'. [ 458.671674][T24967] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 458.686071][T24967] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 458.760530][T24975] macvlan2: entered promiscuous mode [ 458.766687][T24975] macvlan2: entered allmulticast mode [ 458.775975][T24975] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 458.791586][T24967] netlink: 'syz.1.5567': attribute type 10 has an invalid length. [ 459.164455][T25006] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 459.524051][T24998] hsr0 speed is unknown, defaulting to 1000 [ 459.538443][T24998] wg1 speed is unknown, defaulting to 1000 [ 459.611240][T24998] lo speed is unknown, defaulting to 1000 [ 459.858510][T25035] openvswitch: netlink: Missing key (keys=40, expected=80) [ 459.920848][T25039] netlink: 'syz.2.5590': attribute type 1 has an invalid length. [ 459.930752][T25038] netlink: 'syz.2.5590': attribute type 1 has an invalid length. [ 460.168632][T25038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.217725][T25042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.226168][T25042] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 460.244972][T25042] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 460.476613][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.485281][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.493019][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.509460][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.517528][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.532603][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.585457][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 460.607268][T25069] openvswitch: netlink: IP tunnel dst address not specified [ 461.170368][T25109] veth0_macvtap: entered promiscuous mode [ 461.182997][T25109] macvtap1: entered allmulticast mode [ 461.196883][T25109] veth0_macvtap: entered allmulticast mode [ 461.819219][T25115] hsr0 speed is unknown, defaulting to 1000 [ 461.828769][T25115] wg1 speed is unknown, defaulting to 1000 [ 461.842051][T25115] lo speed is unknown, defaulting to 1000 [ 462.215201][T25164] __nla_validate_parse: 7 callbacks suppressed [ 462.215220][T25164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5623'. [ 462.294106][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5626'. [ 462.344141][T25169] sch_tbf: burst 88 is lower than device veth11 mtu (1514) ! [ 462.422451][T25167] netlink: 'syz.3.5626': attribute type 1 has an invalid length. [ 462.430521][T25167] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5626'. [ 462.442179][T25167] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 462.531207][T25182] [ 462.533560][T25182] ====================================================== [ 462.540567][T25182] WARNING: possible circular locking dependency detected [ 462.547594][T25182] syzkaller #0 Not tainted [ 462.552011][T25182] ------------------------------------------------------ [ 462.559022][T25182] syz.3.5631/25182 is trying to acquire lock: [ 462.565086][T25182] ffffffff8f68f778 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 462.574626][T25182] [ 462.574626][T25182] but task is already holding lock: [ 462.581978][T25182] ffffffff8f68f718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 462.591540][T25182] [ 462.591540][T25182] which lock already depends on the new lock. [ 462.591540][T25182] [ 462.601939][T25182] [ 462.601939][T25182] the existing dependency chain (in reverse order) is: [ 462.610939][T25182] [ 462.610939][T25182] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 462.618923][T25182] lock_acquire+0x120/0x360 [ 462.623940][T25182] _raw_spin_lock_bh+0x36/0x50 [ 462.629212][T25182] nr_rt_ioctl+0x390/0xd50 [ 462.634137][T25182] sock_do_ioctl+0xd9/0x300 [ 462.639145][T25182] sock_ioctl+0x576/0x790 [ 462.643978][T25182] __se_sys_ioctl+0xfc/0x170 [ 462.649073][T25182] do_syscall_64+0xfa/0x3b0 [ 462.654078][T25182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.660476][T25182] [ 462.660476][T25182] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 462.668449][T25182] lock_acquire+0x120/0x360 [ 462.673458][T25182] _raw_spin_lock_bh+0x36/0x50 [ 462.678726][T25182] nr_rt_ioctl+0x193/0xd50 [ 462.683651][T25182] sock_do_ioctl+0xd9/0x300 [ 462.688662][T25182] sock_ioctl+0x576/0x790 [ 462.693494][T25182] __se_sys_ioctl+0xfc/0x170 [ 462.698585][T25182] do_syscall_64+0xfa/0x3b0 [ 462.703590][T25182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.709988][T25182] [ 462.709988][T25182] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 462.717792][T25182] validate_chain+0xb9b/0x2140 [ 462.723063][T25182] __lock_acquire+0xab9/0xd20 [ 462.728244][T25182] lock_acquire+0x120/0x360 [ 462.733254][T25182] _raw_spin_lock_bh+0x36/0x50 [ 462.738522][T25182] nr_rt_device_down+0xa9/0x720 [ 462.743900][T25182] nr_device_event+0x137/0x150 [ 462.749182][T25182] notifier_call_chain+0x1b3/0x3e0 [ 462.754795][T25182] __dev_notify_flags+0x18d/0x2e0 [ 462.760339][T25182] netif_change_flags+0xe8/0x1a0 [ 462.765780][T25182] dev_change_flags+0x130/0x260 [ 462.771141][T25182] dev_ioctl+0x7b4/0x1150 [ 462.775975][T25182] sock_do_ioctl+0x22c/0x300 [ 462.781067][T25182] sock_ioctl+0x576/0x790 [ 462.785904][T25182] __se_sys_ioctl+0xfc/0x170 [ 462.791001][T25182] do_syscall_64+0xfa/0x3b0 [ 462.796013][T25182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.802415][T25182] [ 462.802415][T25182] other info that might help us debug this: [ 462.802415][T25182] [ 462.812619][T25182] Chain exists of: [ 462.812619][T25182] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 462.812619][T25182] [ 462.826427][T25182] Possible unsafe locking scenario: [ 462.826427][T25182] [ 462.833860][T25182] CPU0 CPU1 [ 462.839202][T25182] ---- ---- [ 462.844544][T25182] lock(nr_neigh_list_lock); [ 462.849204][T25182] lock(&nr_node->node_lock); [ 462.856472][T25182] lock(nr_neigh_list_lock); [ 462.863649][T25182] lock(nr_node_list_lock); [ 462.868236][T25182] [ 462.868236][T25182] *** DEADLOCK *** [ 462.868236][T25182] [ 462.876364][T25182] 2 locks held by syz.3.5631/25182: [ 462.881537][T25182] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 462.890318][T25182] #1: ffffffff8f68f718 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 462.900396][T25182] [ 462.900396][T25182] stack backtrace: [ 462.906266][T25182] CPU: 0 UID: 0 PID: 25182 Comm: syz.3.5631 Not tainted syzkaller #0 PREEMPT(full) [ 462.906284][T25182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.906293][T25182] Call Trace: [ 462.906300][T25182] [ 462.906306][T25182] dump_stack_lvl+0x189/0x250 [ 462.906326][T25182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.906341][T25182] ? __pfx__printk+0x10/0x10 [ 462.906359][T25182] ? print_lock_name+0xde/0x100 [ 462.906378][T25182] print_circular_bug+0x2ee/0x310 [ 462.906394][T25182] check_noncircular+0x134/0x160 [ 462.906410][T25182] validate_chain+0xb9b/0x2140 [ 462.906426][T25182] ? rt6_disable_ip+0x6b3/0x720 [ 462.906442][T25182] ? __lock_acquire+0xab9/0xd20 [ 462.906460][T25182] __lock_acquire+0xab9/0xd20 [ 462.906483][T25182] ? nr_rt_device_down+0xa9/0x720 [ 462.906500][T25182] lock_acquire+0x120/0x360 [ 462.906516][T25182] ? nr_rt_device_down+0xa9/0x720 [ 462.906537][T25182] ? nr_rt_device_down+0xa9/0x720 [ 462.906554][T25182] _raw_spin_lock_bh+0x36/0x50 [ 462.906576][T25182] ? nr_rt_device_down+0xa9/0x720 [ 462.906592][T25182] nr_rt_device_down+0xa9/0x720 [ 462.906610][T25182] ? do_raw_spin_unlock+0x122/0x240 [ 462.906627][T25182] nr_device_event+0x137/0x150 [ 462.906643][T25182] notifier_call_chain+0x1b3/0x3e0 [ 462.906660][T25182] __dev_notify_flags+0x18d/0x2e0 [ 462.906677][T25182] ? __pfx___dev_notify_flags+0x10/0x10 [ 462.906691][T25182] ? __dev_change_flags+0x4cc/0x6d0 [ 462.906708][T25182] ? __pfx___dev_change_flags+0x10/0x10 [ 462.906722][T25182] ? full_name_hash+0x92/0xe0 [ 462.906738][T25182] netif_change_flags+0xe8/0x1a0 [ 462.906755][T25182] dev_change_flags+0x130/0x260 [ 462.906771][T25182] dev_ioctl+0x7b4/0x1150 [ 462.906786][T25182] sock_do_ioctl+0x22c/0x300 [ 462.906805][T25182] ? __pfx_sock_do_ioctl+0x10/0x10 [ 462.906822][T25182] ? __lock_acquire+0xab9/0xd20 [ 462.906844][T25182] sock_ioctl+0x576/0x790 [ 462.906862][T25182] ? __pfx_sock_ioctl+0x10/0x10 [ 462.906898][T25182] ? __fget_files+0x2a/0x420 [ 462.906910][T25182] ? __fget_files+0x3a0/0x420 [ 462.906921][T25182] ? __fget_files+0x2a/0x420 [ 462.906933][T25182] ? bpf_lsm_file_ioctl+0x9/0x20 [ 462.906949][T25182] ? __pfx_sock_ioctl+0x10/0x10 [ 462.906965][T25182] __se_sys_ioctl+0xfc/0x170 [ 462.906981][T25182] do_syscall_64+0xfa/0x3b0 [ 462.906996][T25182] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.907009][T25182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.907022][T25182] ? clear_bhb_loop+0x60/0xb0 [ 462.907037][T25182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.907050][T25182] RIP: 0033:0x7f0ee818eec9 [ 462.907063][T25182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.907075][T25182] RSP: 002b:00007f0ee9099038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.907090][T25182] RAX: ffffffffffffffda RBX: 00007f0ee83e5fa0 RCX: 00007f0ee818eec9 [ 462.907101][T25182] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 462.907110][T25182] RBP: 00007f0ee8211f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.907118][T25182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.907127][T25182] R13: 00007f0ee83e6038 R14: 00007f0ee83e5fa0 R15: 00007ffc36771578 [ 462.907143][T25182] [ 463.667519][ T5873] Bluetooth: hci2: command 0x0405 tx timeout