last executing test programs: 3.222100424s ago: executing program 1 (id=5288): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', 0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080000080"], 0x26}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x144, r3, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xb0, 0xa9, @random="dd1f0dc4d15f437d41bdf88473242694534d4cfeed45f01314ace706db6b9dc13a2fb5f9a0b4406eda3faed0bfd102a14a846892c01b08a256528ad14868d23878b1ef312cdad0c007ea33f8ae00f922c81c9774ae215d5e1324580332eb1119819664c0f1da1fa958834a73b1b7b14115cb5f53553d80374a9af0c4fcb321e2904fce32b03f3f03aac3c6802effb2ca445f7db239c61e4169d45cf4e16222a8a7be30a6bb208496dee752a6"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fffffffffffffff}]}, 0x144}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 3.181030079s ago: executing program 4 (id=5289): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240)={0x1, 0xd}, 0x8) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x200, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)={[{0x2d, 'blkio'}, {0x2b, 'cpu'}, {0x2b, 'rlimit'}, {0x2b, 'cpu'}, {0x2b, 'blkio'}, {0x2d, 'io'}, {0x2d, 'devices'}]}, 0x2d) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.070960291s ago: executing program 1 (id=5291): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001e6f8b1830149b12e00000001d900000000000000000000000100000000200002000a00000000000000fe800000000000000004000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_devices(r4, &(0x7f0000000040)={'c', ' *:* ', 'r\x00'}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3.070320806s ago: executing program 0 (id=5292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000740)={0x0, 0x3, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@rand_addr, 0x0}, &(0x7f0000000280)=0x14) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x0, 0xf0, 0x3}}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r14, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r15}, 0x4) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r16, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @empty}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @broadcast}, &(0x7f00000003c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x5, 0x4a9, 0x32, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x10, 0x6, 0x2}}) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="80020000", @ANYRES16=r3, @ANYBLOB="040028bd7000ffdbdf25170000008c00018014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=r4, @ANYBLOB="1400020070696d36726567300000000000000000140002006e723000000000000000000000000000140002007866726d30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468315f746f5f687372000000001400020065727370616e3000000000000000000020000180140002006e657464657673696d3000000000000008000100", @ANYRES32=r6, @ANYBLOB="200001801400020076657468305f746f5f6873720000000008000300020000007000018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000300000000001400020067656e6576653000000000000000000008000100", @ANYRES32=r17, @ANYBLOB="140002007465616d5f736c6176655f30000000001400020064766d72703000000000000000000000080003000000000008000100", @ANYRES32=r18, @ANYBLOB="200001800800030000000000140002006e657464657673696d3000000000000080000180f6ff010076657468315f746f5f626f6e6400000014000200626f6e645f736c6176655f3100000000140002006d61637365633000000000000000000008000100154cd7538a416dd80ce9f096c4", @ANYRES32=r19, @ANYBLOB="140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d30000000000000000000000008000300030000000c0001800800030003000000180001801400020070696d726567310000000000000000004c00018008000100", @ANYRES32=r19, @ANYBLOB="08000300010000001400020076657468315f766972745f77696669000800030001000000140002006e69637666300000000000000000000008000100", @ANYRES32=r20, @ANYBLOB="2000018008000300010000001400020076657468315f746f5f62617461647600"], 0x280}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) 2.47924793s ago: executing program 0 (id=5297): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(r0, 0x0, 0xffffffffffffff2e, 0x60000020, &(0x7f0000000300)=@l2={0x1f, 0x7d61, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0x80) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x2}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x30}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048091}, 0x80081) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000001c0)={'pim6reg\x00', {0x2, 0x0, @multicast1}}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 2.477842988s ago: executing program 1 (id=5298): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x6d, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x2, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r6, r6, 0x0, 0x35, 0x0, 0x42, 0xd, 0x0, 0x5886, 0x63, 0x1, 0x8, 'syz1\x00'}) socket$phonet(0x23, 0x2, 0x1) 2.197124265s ago: executing program 4 (id=5300): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3fe, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="1a6f9f325e43651aba66512fb11276f4a52c2c8229451ca504361f51dcc556214359159912c3a0ad01a19888", 0x2c}], 0x1, 0x0, 0x4a}}], 0x2, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x0) 2.135008715s ago: executing program 3 (id=5301): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x600000000000000, 0x0, 0x20000000}, 0x0) 2.063333745s ago: executing program 3 (id=5302): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x12) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022be07000fcdbdf259f07291f19d494090000000800010070636900170063685a7b18cad5947c0200303830303a30303a31302e300000000008000300000000000800090007000000"], 0x40}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) 1.910640256s ago: executing program 3 (id=5304): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x80, 0x20, 0x8, 0x2, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x67, 0x0, 0x44, 0x4, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x17, 0xd2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0xfe, 0x1, 0xe, [{@broadcast, 0x3}, {@loopback, 0x5}]}, @timestamp_prespec={0x44, 0x34, 0x3a, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@empty, 0x4}, {@remote, 0x38}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'hsr0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000001040)={0x6f4, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x28, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x3c, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @user_linkup={{}, {0x0, 0x6, r14}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xb, 0x9, 0xca, 0x12}, {0x8001, 0x8, 0x5}, {0x6, 0x0, 0x95, 0x8}, {0x735, 0x4, 0x0, 0x3}, {0xc3, 0x0, 0xa, 0x1}, {0xffff, 0xfc, 0x4, 0xfffffffd}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x477ad78}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x48015}, 0x4000090) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r15, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r15, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_int(r15, 0x0, 0xe, 0x0, &(0x7f0000000040)) r16 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r16, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) 1.906079205s ago: executing program 2 (id=5305): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r2, 0x0, 0x9}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.558286041s ago: executing program 0 (id=5306): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) r2 = socket(0xf, 0x3, 0x73f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x81}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x804) socket$l2tp(0x2, 0x2, 0x73) 1.427087092s ago: executing program 3 (id=5307): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) getpeername(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x20000000000002b2, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x29, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x64, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) 1.383023421s ago: executing program 2 (id=5308): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xf12, 0x3, {{0x7, 0x4, 0x2, 0x2e, 0x1c, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x8, 0x2, [{0x5, 0x2}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4280001}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_getaddr={0x80, 0x16, 0x800, 0x70bd26, 0x25dfdbfb, {0x2, 0x1f, 0x80, 0xc8, r4}, [@IFA_LABEL={0x14, 0x3, 'bond_slave_1\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_LABEL={0x14, 0x3, 'veth0_to_team\x00'}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0xd}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x800) connect$inet6(r1, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) 1.316432126s ago: executing program 1 (id=5309): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x15, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) 1.243497806s ago: executing program 2 (id=5310): setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000640)=0x6, 0x4) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa}, {0xffff}, {0x7, 0xb}}}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r3, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)={0x9c, r4, 0x1, 0x70bd28, 0x25dfdc01, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffdc77}, @NL80211_ATTR_PMKID={0x14, 0x55, "68181e73ef00830ce02fcc1b3d35b3ca"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b395cffaef475a03ae91b91cbd4f5653"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "8837f8ca8d9537b791f40a65fb7cd112"}, @NL80211_ATTR_SSID={0x18, 0x34, @random="5630050c482d782a03daff53d39eeb906c1226d3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "0585c5ffd672156a998ce0a265202424"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x44) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x9}], &(0x7f0000000240)='GPL\x00', 0x1, 0x46, &(0x7f00000003c0)=""/70, 0x40f00, 0x2, '\x00', r1, 0x1b, r0, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x1, 0x3, 0xf, 0x4}], 0x10, 0x8001}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r7) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f00000005c0)={@empty, 0x0}, &(0x7f0000000600)=0x14) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r6, r7}, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.122802923s ago: executing program 4 (id=5311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000001cc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x4, @empty, 0x9f9}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}], 0x1, 0xe6aa0a9f27214269) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x19, 0x4) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x19, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 1.100964785s ago: executing program 0 (id=5312): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x700000000000000, 0x0, 0x20000000}, 0x0) 974.177998ms ago: executing program 4 (id=5313): sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80114000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x158, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xbdab}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xef6}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x40}}]}, 0x158}, 0x1, 0x0, 0x0, 0x84}, 0xc000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000808}, 0x800) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40804}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4ee, 0x8, {{0x1c, 0x4, 0x1, 0x5, 0x70, 0x64, 0x0, 0x10, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x55, 0x1, 0x0, [{@private=0xa010102, 0xd}]}, @timestamp_prespec={0x44, 0x1c, 0xc1, 0x3, 0x6, [{@multicast2, 0x4}, {@broadcast, 0x7}, {@empty, 0x5}]}, @end, @generic={0x89, 0xf, "8474e24c1d5e4a7841e7cb371a"}, @timestamp={0x44, 0x10, 0x7a, 0x0, 0x1, [0x3, 0x3, 0x574]}, @noop, @rr={0x7, 0x13, 0x89, [@dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x40}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@bridge_getlink={0x78, 0x12, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x0, 0x42c28}, [@IFLA_VF_PORTS={0x24, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ea45f1a674404ca302e58742b74d851"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x25}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_MAP={0x24, 0xe, {0x8000000000000000, 0x1a400, 0x4772, 0x80, 0x9, 0x2}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400d1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0xc080) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) sendto(r8, &(0x7f0000000a40)="1d1fb613eea51f211ee908c27eb60d1a27c02d006181c470fd50bcc20381b3e7b3e70d051d64788d3f54d467548fa4b6faec552491422f719f0ad9fb1c9208eed56b0246a0aa421004e8c0726a169eef839f709c19a3c6c290b213bfbbc5df87df899c787782e83fedcf9e3702ee834c1e7950e6756709d147ea6268fb68a719aefac1d54e66880a4afa127b5997c5cdf8991cf6f21a3f639eb9e512a0bd37afc9850de3b21951330c399c98c13b8090e208b83a", 0xb4, 0x0, &(0x7f0000000b00)=@ll={0x11, 0x64cf2db02d647ed4, r3, 0x1, 0x81, 0x6, @local}, 0x80) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000b80)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000c80)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@empty, @in=@multicast1, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0x100, 0x80, 0x29, 0x0, r10}, {0xc, 0x7, 0xffffffffffffffff, 0xe, 0xc1, 0xa09, 0x1, 0xffffffffffffffc2}, {0x8, 0x0, 0x0, 0x1}, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x2b}, 0xa, @in6=@empty, 0x3504, 0x2, 0x3, 0xfc, 0x4, 0x4, 0x3}}, 0xe8) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1080100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r11, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x8440) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000000f00)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r12, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000001000)={r13, 0x9, 0x200}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001200)={'syztnl0\x00', &(0x7f00000011c0)={'erspan0\x00', r3, 0x8, 0x700, 0xfffffff0, 0x6, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0xa, 0x2f, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x7, 0xda, [@multicast2]}]}}}}}) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0xc, &(0x7f0000001040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}], &(0x7f00000010c0)='GPL\x00', 0x40000, 0xb3, &(0x7f0000001100)=""/179, 0x41100, 0x2, '\x00', r15, 0x25, r16, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001280)=[r13], &(0x7f00000012c0)=[{0x0, 0x4, 0xb, 0x8}, {0x3, 0x5, 0x3, 0xb}, {0x1, 0x5, 0xf, 0xb}], 0x10, 0x3}, 0x94) getsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)=0x1000) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000027c0)={&(0x7f0000002400), 0xc, &(0x7f0000002780)={&(0x7f00000024c0)={0x28c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x99aa, 0x3, 0xa, 0x7}, {0x7ff, 0x1f, 0x5, 0x7}, {0x5, 0x7, 0x7, 0x4}, {0xa, 0x6, 0x7, 0x6}, {0x3, 0x4, 0x1, 0x9}, {0x8, 0xb, 0xff, 0xe7}, {0x1eb2, 0x4, 0xb, 0x80}, {0xd, 0xf8, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 902.717116ms ago: executing program 1 (id=5314): r0 = socket$kcm(0x10, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4044800) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4a9c632d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="7084c3d1b35891ae8b1ccb110ec1", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x48040) (async, rerun: 32) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x5, 0xc5, 0x4004, r2, 0x2, '\x00', r7, r8, 0x3, 0x0, 0x5, 0x5}, 0x50) (async) sendmmsg(r1, &(0x7f0000003800)=[{{&(0x7f0000000200)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ctr-des3_ede-asm)\x00'}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="e72feeb6dfaf99681c50785d61b7a1e5b423b8a60bc7e92fe438dd9b4c5a201e8c14fb684722018b2290033fb7680142e6364b795194112dce162f39b1c8bdb7bcbfeebfbff2013c5d1f5879d46c0c6b7b324495278dc060cfe9fceb26ca547d836b81d187032c8df93f491e4c1d8348f0653914bff8154278a406fcadaeeb937ac69a763a5aeca9cfe55c5903af71ef3f2ae0ea54805901abbd1ba2287313b1f6b9c0fa9fcc8331ee3b5831b679631a3ca261cac061e06abb20cbcf6ef5d04baed775396289b6d296034c0971e41a735b8a042d354ca69080972373e6d91882323b0768", 0xe4}, {&(0x7f0000000380)="33ab7b63690c13f47e07a98f7ab872a0e0ff66ee575a87b6705a193951dc5aa6b1c52e44f92b9db9694392cd985490dc322cbda670217e2359b5fa4f83db670b6fd49a3cc8f3aac67025576cb438df25afb03349602525ea6d7ac79b477687789c694ee3f76eeda4136a0d561dad7dfb6247dcf0a9e06211700ed44551b60cffea9f2d5719e4b848ea834f8c1cc0a6e6801ea6c2eda84aeefd396eadf077aa585b91b26f4994cc4c9b38db4cfb367cc1de6411af0ed516fdaa43bc57bba91534", 0xc0}, {&(0x7f0000000180)="92061fe7d9d69da757235275743dc955c762d118ba8bf2161ee408f66ea42d57601ddc03db", 0x25}, {&(0x7f0000000480)="a87429e90479d1e633c7b3e377b85b458cd4025772514b5473d4e767175d9e7a03539d05302eb984137ec1f57adc46b47cd122a92e2cd332bcedef3be454a3bc8c83e05d2bb80eb5d908560158720e524fa17031a6151f3137ea3b753ae1cdffb57511691332f24e4cc1370ab73938c44ea9aee15389b89bbefc271b53155cd0e65ce77f68b26bf7ae0c4008d18c4258c335cc47e518b2c03952608247c693c77a5119a03ce3", 0xa6}, {&(0x7f0000000540)="a47304d7d5ff7eb7d43fc132091122e57956aa8cd43484e8ff8588d82772c1ec21125284095b279a0ced37b91efdbc8b837ae28278dc87517e49697604dc7910b8d073645c421e78df277e036d7d1374137f5560aaf02c2bdddc1d39e74934540dcbc7965655931de3cf1593d35f2d40367625d2b6e33b2fe1555c591e0e66f79c47fa180d175f75a32020361f6912b6caf7250fb67ea77e3d320213ea4c9e022ae2bf86932c19f6ef0d9730c1bb5abf4bec7074b3fc138085ee16c126ad43a41dc354f86d1cd568", 0xc8}, {&(0x7f00000006c0)="9dbead55b758d42c88bfe3c03f071b4ec253efa6f21883dd8cae2e9621c3b78e312ee0b0f0daa9f971151e10f118c5a97912d559305bd083dbfdc0e24a56b8250f107e5f46bc4f3974fd2c6b33efb36571e23c5a830b9f4017079bd0cc5e86fd24417556b85b0eb765ee16b2444789e99a01faee656be58c52904c22d9088b485415313392f571195ee7acce3b39850dff21133f001c5d6e529a199e1ca3883479cb9ab97ee9da1862cf31a28e536090f3f7e50e3b164d73d015723af7d8f7894fd643a16c168321d1b5b46e83c718945e", 0xd1}], 0x6, &(0x7f0000000a40)}}, {{&(0x7f0000000840)=@caif=@dgm={0x25, 0x80000000, 0x4}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000008c0)="e57fac0ff11f2a9531f28dbfea2c3a8274104d97ec01cbf5099209190faab8b9ac6689609cfadeed725bc2a569e14d30df2105f4b02e1abfee03ce050505a9283d1ace6f302a94d0a9f95b1d6e812ee35fe4ef6f5f29b15a6111cee2db6ccd2521c14a112c02aa7f840fe8d9018e1804cb4b088c6dcc5d41fa37c4232e805d4c48fa3016876543a430e42b1f43ccdb5214b940613f75fbf6294e363059dcb037f37d242383378e8f5130db", 0xab}, {&(0x7f0000000980)="3c791aa66f8dc2", 0x7}], 0x2, &(0x7f0000000e80)=[{0x10, 0x119, 0x7}, {0x90, 0x107, 0x1, "791543716d078ad7529e6773d1e342cf1af26033fc49c2737d2e1e6196a7274ad3fc25e34bce650de49c744a04ee6c843e0bb77ba7ba83a7084775b863af960cf55fb873741fbed2918bf6d49afab9555aee503c3bdc0831b5e92fc0a26c4c8a54e19936cadcc8dfb4c1f9b27fbe0c2f6a9d31291a75cdc08b6f1cc06e69"}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f40)="042dd04dda07f8331a5afa65f1e91ad4db46eb8edccd63f8f049083a3a633e6e84bc", 0x22}], 0x1}}, {{&(0x7f0000000fc0)=@rc={0x1f, @any, 0x3}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001040)="3757a8d70d9010c4d6e6d029271911e12cfc745d2f2694964e82e969cdf12aa554bb432bb8d3c291e4aa07b901518fef11de468cc90eca300600463dc52af349b6d6dbe79dd1277033c2f86724a6112ecd5a2c0105316f1e8fd3d3725be48b1ab2d6bec531f9f54e3baf7c027e14d0a7744e6ebdea0100c56841cf773210c1da2e54790702343ba45aa2578eed91fc68b8ccf4714e151bf99e8d4dec38bdca1a0a9ccde2b53a8c8eb080f30c178f310ad67cf17e5c167e34433ac53e0197a4d00a1eccee689cca53c39af487d678b89df685", 0xd2}, {&(0x7f0000001140)="85797d89cb64ca9932f54dfae20cfa86f2058735e766f9686cc848b783e65f6c1100f3c1f3e7cac8cf20b61b6461570c8afe6a6544bc1be5b5a173edf746aba51296166efe24eaf8964a3c75fda56db94d9416c532e1cd583d515357af1d54f99a", 0x61}, {&(0x7f00000011c0)="0acbc903137d919a91625675a30f58490bcb91465198bfa7f8d013acc000a7cd800af2983b2e7672728a112c25743bfae2e78db3bc230116a8ff0cfb6253d1ff72a3f927a2970836049f9e9953a40701e15c75e7c0d3d6ee8ce155133b37", 0x5e}, {&(0x7f0000001240)="8cee7d231c5e80057f269e29d59972b3d0bf593f48a16da90440b3997c5ca8a3e126086051a487059a5215033dc9074060a889d0fcb1b5a69317f356094e92cf52702e90fb60a63efb0abb101b8572e883d83fb9f1c7de85d9e09580ac5ae22437a2354475f9fda1b3a701d95e8b48a28c1d95a497006bdd5e13d6cb972ed50376e5365b8361fe5d14061a0e54b595baec47ef256698167cf5d8881447fa07ae4db6a89f29df2f25121544", 0xab}, {&(0x7f0000001300)="69c2483a4dc050f58096da47ebfebb233543eb8d818c24d01750cfdda3bc85d68e9ea9320ca91c5a72e6d0ba37c1bbc3bde34bb57fdd6278bd59d4b8e0bef3377b072ba44bb692a9e67d9169ac6383aa07471f21a0da0989adca737f273aab6b227b13b0948e52eab8ad0784570d47646d46262ca3e55afa782c6e353aa8e8b70b24a65f3ad808c6f2f5c2845415c9a60bd6b892b94aab2b062eae954c2efb63f1e95d3f022bf8b32d9aaf4a1fd60aba13bfd5bc9509d4fb64ab688f1a210e5cdbd5304f31664e4c75ef1f0fbd800da1c50de08eb43975a21e37ccc6b0a01e5ac8ca8a4c5deff879", 0xe8}, {&(0x7f0000001400)="758b938bdd80fa848579e472617b23767bcb8e9b7de16da8b52270e7e06216847e26453664dc508d100a6e776c5ae2ede7d2e9682167f25ed04323ff11c75dfc75f039d3f4d5b289a1c857e6915718548907ccd780f69fb0a4f3d031b927daaece538eec524147d02fb7c8482c3a48d4060cbbbbcdb5d3d96673389ab1817edd1f4027e279eb2d6dabebc205c45c43be34a9cb49414654d4d9e8c7e671a378386a988d7ae729ae1ecd02d2e03fca92945bd8f81dca", 0xb5}], 0x6, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x490}}, {{&(0x7f0000001a00)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)="a7539795c6743bc947d2949da8f28b86a6dc404ac876aaf44c0aea5c958ae60df81da4103bebc739597d33f6b5576ac86ad11948d8db9b39689d4ec570157c6f95efbe9210ca21db49b7f23c89bd3f619ddc80afdf0645148d3ea022454fab9291d913d9bc2d6079f61619939377c800084e", 0x72}, {&(0x7f0000001b00)="ef50937432b0f76a90dc9b5c4f4361455b2804fdf8872542eecb5b959c0b0b67d101c7cdabf2a92d03809df724597d5c84a5bbe7ced6fa80689e8db393646e", 0x3f}], 0x2, &(0x7f0000001b80)}}, {{&(0x7f0000002f00)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000003440)=[{&(0x7f0000002f80)="de9751172a72868a7caf6c1c41d4fea0553a9a850d8260c1147c4ae5b06d13e101b8cde64e64c97abdb093f11199f0173cbfaf4e6b75fe7b534061a9ed223480aafc487f01c0e705f384", 0x4a}, {&(0x7f0000003000)="91a22f6b202e54da7229e36b8610f94de2b4303148777c4827818b8b8bd61ca653943f6062cc1e8f039ff3a9b90215d2a190c9442f2d3878abb0a2ee57bb758ea9858d6e3bf78afb4e822b16cbded37f5d68cf61be5c988deb98b6635fbe09af13195a1cc0b3bcd44b07543918413e05aa027939f59e0ba4aa425ff67a1466612b3984e9d0cefa277b458be73604dd0c3bd9bba7797e43af13797306826030ed335ca7816013fcad97ea6834690f071779a5f7eb7c22c17188c762cfd26463e620e5e105", 0xc4}, {&(0x7f0000003100)="d90ddcc6c79990044fc6eda0ee6423b7c149369ab7a81d7eaf39b35305ba2347970c0ca02b6e093761e8b3c8a88b977d1d3067d8f5dd469475d4aed0481af9a4242aafc5b5af4a26ba861232f7f0f25ec935dcd21cfdb04eb5a2fdee8f66878c75e03387326f8f6e1a4fd538b65c66cc37e544c5a2f423853ecec22c450a0c20fda8971a68702a6cba6fa5d608eaf270a4d715bd3643a281eb7ae5ec1ced049ab3546febf461f8922028546f89e954ab907a17f5b3b8d646e4d1dab559f155e8362e1737b01128bc7f6e9f9d56824cc73fe9afee4daea77a852cde52cda0f9", 0xdf}, {&(0x7f0000003200)="3c8c908aa0b6e0bc7a75af2cedc6e97d594d27cb2f0d1cef8d03743cc5464baa27c1b11dbbb80a8d173ec292bc39a3234f4b9ad453bc0586fb0f9809b6f8bb61051a4370ad771ca8cc2c7a0d4ed94083de94a829a102038b1162c660b848578f5822353b474da8301e8c6799312317aab42b7421cc8bfbb926676d927500e02af7f14f67e260bbc984fea75d4cd6f13f5af037c561a1070b6612f765aad14235619706049d10a7724e6d288d8a0de0e4ad8b9f9dc2effe5c9f10f6363e", 0xbd}, {&(0x7f00000032c0)="bb8043473cf0649fab1635946a4cc235e0fa77cb7e9ee6b568b4d25608e3af2f6ec1afb6cda8e7749b1ee4862ace93e6d0058e6c87b66604fc0dd94e0c4816c214c6b92c8227d7edfc3f102a38862a5974a0ec4e944fc9f916973662e9c212f0d19266690a34b71f69c6f913486af18e091e3cc5831de34411010f918de4b4e8ae36829fb15ff7de41a388174d660b35d40c9ca4a19bab784f4e8d8d0afc702bec12feb830b97ba882fcdee82229d01ff228f5999e2e6e8e1124cf94790b30f4707cc404251c52e85915cb904a", 0xcd}, {&(0x7f00000033c0)="c5ae996ce592996f1c89b8caa5e4e3fde0855e41fdc389", 0x17}, {&(0x7f0000003400)}], 0x7}}, {{&(0x7f00000034c0)=@can={0x1d, r7}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003540)="ae388faa623be9c37d76108f9701e8950803c0a0d77ef395f292618e3b7cbd20e02df6bc1269063a98edbbed1e10392340c9", 0x32}, {&(0x7f0000003580)="b5d23b0c76aaa0e129f1a627762b0139", 0x10}, {&(0x7f00000035c0)="42260bdb04f7ccbfb1202b7f4b095cad6da1bdda182d15c5ecdb99456801e4e1b4781d69a0818b0e793c2ae6854a3cafee0692d4c3b84ffb7e9808c5ba2f6482038b83e268835c58cccd64d6fbe52a1a378bd5310f4382570e2447c264963c5a815726eefe7a7b54f379ca7914de2ec54da908acf739a42f6ed3f8e1a345b052a9bb85cdd4b68cce1c2e80400b5018c02ba24df8f21f828906974e31091f47e4023a669c969607a4e667c19288af0044004e9b1d9a7056d73a575bcc4392bc9a414303e1aa30b9464a58ecbb1e840775be369d78fc2a76e876", 0xd9}, {&(0x7f00000036c0)}, {&(0x7f0000003700)="5351bb16603599c893112088e6f4d8caa841a454cde584bb0b65752b8bfb1552e3e27ec517c96fb3fe870c23b7a1d638a8d79fc61cd23b3699a27edbacc392464c110d4dd30fac98618721bc94bc347f83c769e0d23cf68a6ebda8aaeb953b18", 0x60}], 0x5}}], 0x7, 0x8c844) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) 697.563279ms ago: executing program 2 (id=5315): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x1, 0x0, 0x60, 0x0, [{@multicast1}, {}, {@private}, {@dev}, {@loopback}, {@empty}]}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'pim6reg\x00', 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x7, 0x2, 0x1c, @mcast2, @mcast1, 0x8, 0x40, 0x5, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2}, 0xa815) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001640)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000001740)=0xe8) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000018c0), 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002140)={r0, 0x3, 0xa, 0x2}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002180)=0x0) r13 = getgid() r14 = accept$inet6(0xffffffffffffffff, &(0x7f00000021c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000002200)=0x1c) sendmsg$netlink(r1, &(0x7f0000002300)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)=[{&(0x7f0000000480)={0x158, 0x14, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xda, 0x88, 0x0, 0x1, [@typed={0xc, 0xf7, 0x0, 0x0, @str='}-#](\x92(\x00'}, @typed={0xc, 0x103, 0x0, 0x0, @u64=0x1cf}, @nested={0x4, 0x13c}, @nested={0x4, 0x68}, @generic="5c96d55d4ab5398696cd2539ee44e2ce1168ed4f0f0b7a4a5727470bd1ef2fde5232744d04e4d22d615f7f115d3e166d104c61db800d97636eb24ba760bd63cbf7993198f74e1a8d342663fef90a0e2a3b82472d805802c47ca44aeb0d957e767ed3b435627f64da4573e727798214eb676a3fa72d139014ea2e29f0509445f16a299cae562e28a38ff38a28ea6ff7a6f0d3319d04cfd2ff2e1dcdd854b7a81f1c34579bd3eb61c41ce78ef3d108f5e86f23d4d62987"]}, @generic="e6a648c9a3275b7c63f94be209187a5e1ba54f33890110a29c76b4764f19ae2c78c8c8c89d3829b2705c0a638a3037185265445f83df127ede792d6039ce6e9d1b8a5287f48ddab5fe931b979cae8cd542c4849a95ca60c38eb3131133de0f3c4add2979022a4d51f50fa52a"]}, 0x158}, {&(0x7f0000000600)={0x1030, 0x2e, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x5, 0x2d, 0x0, 0x0, @str='\x00'}, @nested={0x1010, 0xbd, 0x0, 0x1, [@nested={0x4, 0xa0}, @generic="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", @nested={0x4, 0xbd}, @nested={0x4, 0xad}]}, @typed={0x8, 0xd0, 0x0, 0x0, @pid=r6}]}, 0x1030}, {&(0x7f0000001780)={0x104, 0x32, 0x8, 0x10, 0x25dfdbfe, "", [@typed={0x13, 0x77, 0x0, 0x0, @str='batadv_slave_1\x00'}, @typed={0x4, 0x27}, @generic, @nested={0xd7, 0xdf, 0x0, 0x1, [@generic="b19fe10c33a2c974daa0fd469a530f4b9fae11f711412e1968bf14f131cc4922454b8c4d6d15b6c5e0737bf01259403ea4dcf609bee132f3056b9021db0faf4f05a3536f1e5071823fbbeb7e4fa7c40cb7959900352a44dbd9f95adcf6556e2e82be453a06964e17d04c11ea65dc104a2fee9341da21fccf29282aee6397076055d9a5ac", @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @nested={0x4, 0x78}, @typed={0x8, 0x60, 0x0, 0x0, @uid=r7}, @typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x13f}, @generic="894cc9667fef0566cdcbf2", @typed={0x8, 0x149, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xc6}]}, @nested={0x4, 0xde}]}, 0x104}, {&(0x7f0000001900)={0x384, 0x1b, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic="709b158422ef60af3cd9a728293af5eee61edb7cee7781749e981e700a3b8a7cf825d560654a822b7bee60494f6ae19e1788cc00dce99b5145989a6b2bb49d735a860d4a87103ffb6a08077e80ea4dac70cd1603e2a7fdc8eeb9f7cf57e68d23029ef2897adad8504c3cc3f8406b77dfea55aa5907b0d05482dbc21c411eedeb9d372627ca52aa3ac30fbcfae9a3b7c5", @nested={0x18, 0x76, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0xcc, 0x0, 0x0, @u64=0x9}]}, @generic="cbc4b9fa858e61550e5393c1368785bb1aa50c5fe275d860f86683404d44ea74351eadb8f335178552bf5ae803bc19f856d184a08f54a92076c1036ce375cc9194028db83b8890d35b702c2cb3e9f32a4c233e300ffb9b6da0fed8730ca1c22bdac91b022289e750578f75c70ef2a76a10b84c818d3a54eec9255f745c4737838e9af62e0b2c3e92e050658b649fd8d81007aba7313bb80050f3a060d679b85684233ebdcac03e99429e937b18957d0386ed", @generic="2ce2ce637435b447a2abf27affb1b2e581a3c12954c2bab95eeb0d4b30b12fc6be33f651f37c989e5a171d50c24864527392af1761e3106844b2066c3c54473ad031f3a287d45a922c9ebf2c4046ab83d16ad474ec86108377", @typed={0x5, 0x8, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x125, 0x0, 0x0, @fd=r8}, @nested={0x76, 0x40, 0x0, 0x1, [@generic="f5d49926dd8fcf5f3b7626c40ef761f601cd221e748d755358871398eb8f7a1321c314fd9d0e97aec2c2fa13fe5c83acd506b8c65c0219504d439e2e0e88b344a02b1e9dc537f1ac3c8030ad22c4cccd143827a90a8cae3e838c88cf5b981b4247c0daf0b0a2dd3a7da2", @typed={0x8, 0xc4, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="116a77b32e8d4819e59fb0a2a7ebfa5c5c9dc83ab28180abc5a5075253ca17c1e8a30cb5d309bb0691eee7a0a6d997089d6eb832697675571429d1ca5f13", @generic="6057e52d5aaccd7ad820965524df2ba32031002e2a7185444008eb4693232efccea67eba9c9dc312ba4a9a5d1dfc18732ec52a7ddf4a11eff06a46175dcf2a07ef2c8eb18711a093ab8b2ca306b4770660871587f65cf827a08cc0b8ed41eb7d097df05756dc75b236c3fdd813a1b9a54a71efec81bc7a80dd5cdb9937f719c1b750b8c45a5877214505d569459a70b2af1707eec1a2e0a1321a6779ce15333adbff545de79497d537409831aed8ac0e8ca716ddb561d9c823ae7efda87dabac7c35aec3f694bc868b2024bba116418b92f8b2071d566e785afcf8da2a7a94528ba9f4784461d011500aa72b2cdb1f6c8fd5486ed459aea7f2"]}, 0x384}, {&(0x7f0000001cc0)={0x33c, 0x1a, 0x200, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0x1e, 0x0, 0x0, @u64=0x5}, @generic="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", @generic="ae3da3fb7ca590b834249b196b4f524d32ee14c8f7ece1686e6db77f80264bfe7e49840b2d190aebae31830cd4c6cab8c10209c36cd73458566c72a471958493dbaa8ed615efb21283f2e1b08987236998c6f7faf39b43598e608bd01548d735040d66433aa510d4269dd56269351360cf239de3f35e73a85471a9e42c678596e989d78e5c5298a003387f0f20fc314a441f8a112ea88b2957fef6b93fe84863acc1ffec0ead788b4a976d33dd443b6ba938117e3358e8ed650cf3de36c47546b302ca81d4e146", @nested={0x13e, 0x11a, 0x0, 0x1, [@nested={0x4, 0xe2}, @typed={0x4, 0x6c}, @generic="228c2eff032aeb81e53b530219f9d54c5a99084641601983112d3e59964206687e8efdbdacabf228d2f687259a09fd95f5ac6976f67e790d0e8158cc35503cc81b5f714587a4fbdb04ca6666937aed66456e9c152d121b5bf9754b265bfc54148d75d39157c6db7b896b", @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x4, 0x149}, @nested={0x4, 0xff}, @nested={0x4, 0x144}, @typed={0x8, 0x6c, 0x0, 0x0, @str='nr0\x00'}, @generic="18fc6e81fe474401d41241457fd5cc9b4ef2165af3f717cf59b27bccdfd265f4cb4fbd0f380026b68ede843c44622a2448f6b68dcf372aa74aa63bfd9504edee224d420176cce017ae209bb369ad4b599537accb5d0e2d35770683d09c91622879a2846a0aec01704422a8feed6b7d0dcd75913d1939e4b5aabae8a8db6c15f27469c18424f805f626b6cac52b15e0e3c7a9eb01536cf8042a327543c5092ae83e9900d36be49e878cdf8ab2"]}, @generic="01e36b8b408d9ae3bd075b5a860f6d0c6bb74d29a4580603"]}, 0x33c}, {&(0x7f0000002000)={0x90, 0x37, 0x8, 0x70bd27, 0x25dfdbfc, "", [@generic="f9e125a78bfe84291d912d7aa60f875c9cf36676b19fbf227cb356fefafb88f29484f2532f0ade1e0b866bae999b093b381a192529af7ee7703cce4cd46618bf0684e23a1a692420796e148685b17c6730a3d6d379b9a09bba36bdc191d37dca5ae89c8ef15bcc522173fe2a5bceabace1123974b0942e660b465791e1"]}, 0x90}], 0x6, &(0x7f0000002240)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r9, r0]}}, @rights={{0x28, 0x1, 0x1, [r10, r1, r0, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r14, r0]}}], 0xa0, 0x1}, 0x2400c090) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000002340)={0x0, 0xcb, "9a6674d23d9d132b82adad8867c6ee225d2215b0435d06e542433dd53c312048b76e04b54b9eba79895c6a9d61296739a79e84f8d1a4aa1a6e6aaad52890f6e6eab2fd78a69a685e8a89dc1dcf35553ebdd1253cbfc4062f10694e227c3e13c57902dc2ceb1a0cb23083e21d0cacd58bd4d067775b8fc6d0575ba86433d75ab0f2ba01fc0715f4008ade0f726ebd6dc4b7539e9ab2c072bd5bc2c738f12d0be9040a3f064af3f9a93681a6bfb896d6af7e06c15824530964572ed3bd70367d7a5e9a66112059ec8a03da85"}, &(0x7f0000002440)=0xd3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000002480)={r15, 0x1000, "f9e781cf6197503d52c7a66ab18a70f1a1143b294c952b33c32cc1ff69edaebf61d080b2b5f82f8a7a7e8b00c6b0a9df1a4072c4234f09439fe696fdeec4c0697fe95205140e6e46d94c459bd2d738e5ae5f5e2c6fea175c1c0d69247e583e61519ab6cbf58967c705eb1c5f30e45702c52170645f15cc4e6e04020bf99c30f5e2175ae8dd594752464a70c4fe8db2fd9b618414630775c433e4791a56c1328cf65b13a16ff5aa20413ef885ee55f7761c496882fbcf24e0f9438d0937f559a3f42c95bc4000b2fbf23383127599fc4f6b11b57b0cdfd1463f79e2049d82e1acbb0c54ecd3b2130fb8007e8518c1562b31c1614ca76876193f4e1947f8e993fb30328534ebb140f6ceeab6ae9f5769373f5481f14facc6478feba69fc3ddc2ee120eccb595b5dd0233a78d35a0fee0f2b227043ef24bfb38872242db639276d514104e7ee1fdc48d36bd97bd4744cc83704d78c76c7f2024283b0e60a9027dda2f103e88846d30493df7d0cbd4b990f151d5d509ecf8a749609e3a1b6850db1bc13346c5721ac21e6078a097c184fc0ec17d7dcebb1af65b7dc8f71e4c6654a01ff9849ac5a7657caa7528b7f093f253d4adca1757bb946599ca9b6322507f5fb0c4e7ed7bcc73cefb67ad38df5f864f8adedf9335e69a1a5a7cbd603044ce518e29e3dbb7cba3d87550e2302619c0f472350f3019bfcc20c2e98360a3256d2bb60692c8c403f73ce996a9c1ab2bc0edab23ec8731f2c735f759c8c6210e15d6fcf6a7208b026d3904ebae6dd7b40bcdd717190bbbe0a8d7ab692933f55994b6a2312ec597169f049dde501598d4c8f35072abb4900156b0183a971cbb0d38c56af11dd95fbcbc72ebcea6bfea1af31eee6a3a8a1eafa1f476fef73ab98379f2c1d1888a021c8321c7ec9f01cb112ff65c34f76a147b5d6205f7758e5b81ed7bf7138392dc2961d0a8c363caf5844b02007d25f384dc038289139aa60f2ef544ed8a79bfa1be839950b529cb477953448120294703481be2d3fe73a6d410556867e4c7bdec7c39e165ca40bcede2416ab2123d46e22d90d7bcef6b39f259a6b65085d67f26c4df0e5ebb6e72b59a9b8a751f898d98e8e4f07f76a0e0b704cfb51a41df2d87e3eeb9697b6b3e5f1d5d80e7b172b4ff5d48acb2e7ef4befb861c6da2c04ecbdcff060d729ef41f54b84c678037ed62d0d2fde52b62649ff2bcff925d5a79666d0f8259acfe8377424457819ece36c8625044c5d916e699dac08052dba20d040fbb1d49c0334973899762c1ac5107ad6fd550b4309c7029341e74406aab2d868d809931f9cb4bdd327055ec970dbef11fc4d8a0bb6230dcc725f7a123e06aa61b526407959df6f60a01f461ac39466b84808e3388bd1921b23941577c7e59b62c6667b5a7395342bd11e17e6e5b382d8e3d7b6a95ce88d224183606437ad02ee48a93a4ce5a65bcde4ac7a641b9d2d3bba2979d8f91e90c334fa4c4f5d0d045a0cb6df582daf80403d545a94fad5141322fe483527db9c822e6febaacb8c2a7fa335befd95181565b0add3fbe95c1dac8aefb3495b8a926662773bcc0acc42da24491975fc78d175c0197b1c125cd8892d06ef7e63960a4589fa416fc10c6f6ff35e09380bff451da879df1c46c6dcb0e8d25d3dc53729f0cd4f185e498ba7917501f2ea941f5fd65c3438b7b15f42dabf8922ceb7b96fca0cec6f50e64a3babce6f3958b2750e27c0914de54dc9245902a99c3f709398f2d993e118a24d96823b6acfd0d78c9ca34b19f04a6f32fa17bf286c72d002f0b6184d162b69778fac3ab380790d27de126d4384de892a31dff1ca324ee78cb68ac3299a05deda3eecbe54792e02c4660a16797b6c78a4104c76ee89ddcbd4839096a6bb3f5bb7c1914d03631376e3c87fc49922fee7126f570f7af2ae69cf0a6f0b67fe59d16983e28b984e6eb8cd402d02eded5a5598652abe15c99016dd2fd6447533bdfc3fe4bc77e7706aeaa1f528a30ae2f3e1750cccb8a011f02857eefe7f6f530b203283aca149aa872d072c747494c71cdc20b8b5c15354a910de1e8ba6555a0d5e48c513d2e424f1b7ee2d940f84065c3353d060af1bcccbc61b12ba2fc5be08051d09200bd746a07307cc326906aea6281d2493d847aed997d91fde8b8f209bfd479bd220534708278dd517bb7616870658898bfac4bf369d1af35071e856c2e5338ce70532438c2d56ec57a90a435d99449287f4a28c050094e08a9f2cf143521306d6b3f149fd72ffff55afad8ca0f2de90a56903adbffc03050a0325fd59abea00b7014ac6d754c49def1b85cb19f6ffa43e0b0471488d499174274e3c4a685af372e09d6df63f961d6c2a9f092e92115307bac01c9745872424978fb4ad800cf5af01769da7093ebc9eac526a3d683ede0e9c54930511c06d8fecaf61d2e81efaddffdbc95021e253dea422726d6a37d1f31ac2638787c134b78e51f3c768a2c2c3bfb853d8ca0c39bb340ee204cee1cef2f369150bd79cf89a828164f732d0ae9995cb3143f8f7b07c13c346d2fa40225a5c4221ffc29757e2042bc7fcd1410457fa331c72acab41b3e2bfcda38c098d8f90a172b420c649c6eb8b22e5ab2fc6cef2c47263919c382ba3907660754c2ac6ff1f6419ff63b617a2c5d8f518818bca59e97dbae7da16734d87048784ddc9f2823498ad640b4e6118b68aa9f435ec63928533730df353a7eea3bbb4ef78a769606a7b38cac326b413e6de65e654a2a00a1dd3937a0e06e8bdba8d9cbff0630429f324067713adc806abab3ca7ec206aa6eac24bd351ee707dd90ab76a4e48b8f2c86bdf2d51b89853d8e06fac4ff449da8a2c4e297de9d7c17144d53c746e7a64d0a97b30b90bb82a881a0337528d6f3b9df0421204116d2e499e4017ea8570ede9744221168257d16dd1a51ac053f53f8034d8eeef2b67670a87fa4fa2a2b472c7ffe38dbf657179a0c7d3c1962a9966d641e5bcecf8b2cc99314a02cfc39f15a09d0a3db17bc3bbc42b73a8101f4b1a46288ba7d57b718eb84cdf4ea10d858e191f1ad4da2b875ca44ae9bb11c4ce25c6c0c5045163f86b5c1423ee87bde1061e8a3307ed7ef2d3dfe60dc8f64f5b5aaa67ee38c918d5629f87d04376f90ba4b7ddcf978019090dbb143986bfa8654ff0cb79cb1503c84dd1c5a23c4c2a2c6f17324f9464c616bfb92473115dc0295660beab754bbee3375d0673800056af09f72172d54da18166761ec5e1312370f10178b2b9ec57b80b95c68342166029c3cfa201038094fe1c8f1c865e12c8844bb63a962474f5277a44db3cddecb36eb7a308bc9a22a7bab85bd2f09d1265616dc6a0c9f0c77a9a805ba596b48f891d037ce21982b4877a343091631ab169596a47e39501ee2d8e87029625b3ca6b7b8e3c46ea23ffb7809c55b51e2153f908b8ab8bcbc5168e0d462948d6f348a15570977ae18c4d174e838d41c053b555afa579821cd0401822824a405b5af3bc4e7bbfc46751eee1ba9b3a959f52ce4053f42172c5aaadf467901142991650b12a99e79e30851a761b7fd87bb9d828b0bdb2a28b3f43e80cb4b97a6e13ebb9c62193d198896e9cffd1ca16c2ecc822a161ccdd8a9c81dc355f3cf412deb545364d641608efc666b55d64b7d26d6f63800714861a7552f1f111d8274686d5a6cabb4cb79667e8dd0d49ff5bb3888bd2358ef8e4f1313a83fa682bfd300f640c8dc9321741d082fc80a5229a5fdce942ffc5baf3bff41e9421b5c4d271a84ea0225643df8904ac8445fffc58a7b1e607c0aafbc31434da4e661f8a244f04c0c3076bcfb78f188a2b8808ae0efd096d1de2082bb17d36ce8400e4e7b5d8449017546b4f4283bfce4c04d4e6aebde86c793fd695a34a6b3ccd606f73e81ae3405f54ce6c143c479fd634500bdbfbfdaadb1ed6f05aada281e813e17794fc69409509b6dc3cd6932dc2dae0949f8837093b1421cbfbbfd1538672617051e70663c12d4519aaad211d9ae5431a502d999e5daa853d3090d404c92f022f295a0eba9a8ff01e47d6afd91807b0cbfc9a58e395d0201b0b620cb3a6c145a606ce3388e2813f851a57c67edb0561df4ac21141887c7ecbaac9fabddab58b3be81ea1f2496cc2945cf4c275b2923e45e059cfba17246d0d7d75ae79a1abc044d794859d9975784d037faf5781081f7a5d14ed162625753270817fe005c6086453a5b299f63ae5840ecbffea55ff34157919f3f6f970beb233d885aefbda8bd67cd470b3d7f4ce12dc8e6e6bf44dfdc428063c373a670c7af7e0025d2ee37b7a53b1ee464b308e6e6a3b39ef9837976fb954501e9644af305e59a7d346e45d2ad4fae22bc68a8fe08f6211c034410d9c06f039d5a31522678b7057cf120176555ce944e95088446ddb6015ef7ae5afdbabe332376a574192a9861a97e5cdc02b3a108611a9b764f2b495d0a8b2778b5b69f2965629444e1c10b6d8a2b43b4155f228785778d5e195d4999061723819430d568d0473508149aed247b366c36b668b662e7685d37124a4e55e8b87ebab1bf75f2057d3286d5c3f35b93352ea341caa6c79f9a3f0578c7341047c60abe8a3c32f8ef498bbf4d94303ea930c0ac307862268931850b39e3c378409f3fbd7e37e2dba777482f091271169bcd113d821142cc7003ea637c409106b2ee5369189775d1f0b28535c40eba109bef07c1f4d48fee467730193f2b31e27f3d71aca0ce7bd675b6a9d20332afb9fdf20a4b4f5b7e9319929728136a3d20f2d03630d51505a941f0826799e1a7de1fe025c5d43d71524c74121347e693cb4dc71c5615fb47119c226ca835fb286e8571a14e8dc42705558846f5df9c932d47388f75592828bc6d501fe131125a99e59907568439d1c112894636fc81f5eac60ba178f6801e44ac446a5ee7c87b098044ccc92b1ea2be802d812ae88b305b39538b3c97edebcad017622bc01556efede31ebe6d1c16422d7615b4f51ce05789c264a50a46155dd80b7865d3113eab126b4b43faf7803cb54edeccff411d768eac5f18d35360143ed25b3d8a74689f070f4ee9ae42e29f615450ed86a0cea8c5ebd249198673bf4ded832b4c6ca39cc23ce62f047e058703e5038affcc29966932d1d69dcfcf3216b0036ec7916a6303e117fdd60033ea0e04f9795e3da546d7a369acc16972734ba0bf05293d71110fac0cff0355a979ddf4cb5ab12c2c4461d9828b1eecc7c45f96da6d6e9692101e675ff4cb27cc775165e466bee713b98193f3f501326cf537b80d5f6194f39f5912d7a43c97887f5f47bab98a31258594b7cd828fca480821246272fbf3f8ca867d07a08bca6561325d757b7919be6cf71174a2ff3284f699528e2a4fe2415b8df6092b1db0b8fcb625328ab01167176381260cf370f985b9e7c5b480e29cb0abbd5f90d37a2affbe7dd7d3f4be84a05511bdd915e14bc1e8ed13ae71b6df67e9869812c17bacfcf0d2e8cd0f0fe4f42c01fa6466e759ad0e4c040cad70d2b5538a6053f7d09c3f35f1138faf68a81d41675a30955bd2249c933acd88085e3125df655e715157c8fa7bc9fe306b2fe04e8148adbd7f2c1f2077d6ce9d60e62a366c14d1e68d8fe156e6cefdd7abb784e054982509d0c10e67d3dd7e4866c53399a769c8228284a97959db4546055031567578fd9f73b924a1bbfff0a4a29faaf745f64b46b6cfad90681a420f8f11300315e260c8b476c2c1523eb69dd3a39405fe67f8dcc0f3977fdf997abc35cd07672f6effab2c055"}, &(0x7f00000034c0)=0x1008) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000003500)=0x7ff, 0x4) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003580), r8) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000003a40)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003a00)={&(0x7f00000035c0)={0x428, r16, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_PEER_MEASUREMENTS={0x400, 0x111, 0x0, 0x1, {0x3fc, 0x5, 0x0, 0x1, [{0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x881b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}]}]}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x3c, r17, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffbb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x1) r18 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt(r18, 0x0, 0xc, &(0x7f0000003bc0)=""/187, &(0x7f0000003c80)=0xbb) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d00), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x30, r19, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 679.427487ms ago: executing program 1 (id=5316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 614.939985ms ago: executing program 0 (id=5317): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r1, 0x0, 0x9}, 0x18) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x22, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@can={0xc, {{0x2}, 0x6, 0x3, 0x0, 0x0, "d2b02d713e280bd4"}}}}, &(0x7f0000000180)={0x1, 0x1, [0x638, 0xcaf, 0xa2b, 0x9a0]}) 450.304218ms ago: executing program 2 (id=5318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x13) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) sendmmsg$sock(r0, &(0x7f0000001ac0), 0x0, 0x4881) shutdown(r1, 0x1c8ea40c757f175d) 407.803493ms ago: executing program 3 (id=5319): r0 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x21, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@generic={0x2, "200cc399431910e0879a76f3cb53c3b1b0f990"}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000e00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe000000008500000028000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5071bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000540)={0x8, 'team_slave_1\x00', {'team_slave_0\x00'}, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r4}, 0x8) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = socket$packet(0x11, 0x3, 0x300) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/119, 0x77}, {&(0x7f00000006c0)=""/236, 0xec}], 0x2}, 0x0) (async) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/119, 0x77}, {&(0x7f00000006c0)=""/236, 0xec}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000003180)) (async) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000003180)) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x0) 194.53645ms ago: executing program 2 (id=5320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a00000009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef790bb41931f9a3d4dd127c1b4e49f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e0648aa223a1f97a9832f442e8cbeab77cdf1ebd8465593c000000000000000000000000000000ef429b14459ffd88bee4b9d894ddad0980af53202ab155f101b2fcbfb5b81b73035fd5a76985d4710fb6fbfb2a933a09dd6317e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa4615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d77a65fe74f8aa67391e8cb3c"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x1) (async) openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 193.826935ms ago: executing program 0 (id=5321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0xb, 0x3, 0xffffffa0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) (rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 192.544203ms ago: executing program 4 (id=5322): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x1f, 0x2, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x66, 0x0, 0x7, 0x29, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x7, 0xbe, [@local]}, @end, @timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x5, [{@multicast2, 0x7}, {@local, 0x5}, {@multicast2, 0x220c}, {@private=0xa010101, 0x1000}, {@local, 0x4}]}, @generic={0x83, 0x2}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x81, 0x2, 0x62e, 0x1028, r2, 0x2, '\x00', r3, r2, 0x1, 0x0, 0x0, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x6}, &(0x7f0000000200)=0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) socket$xdp(0x2c, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x1f, 0x2, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x66, 0x0, 0x7, 0x29, 0x0, @remote, @multicast2, {[@lsrr={0x83, 0x7, 0xbe, [@local]}, @end, @timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x5, [{@multicast2, 0x7}, {@local, 0x5}, {@multicast2, 0x220c}, {@private=0xa010101, 0x1000}, {@local, 0x4}]}, @generic={0x83, 0x2}]}}}}}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x81, 0x2, 0x62e, 0x1028, r2, 0x2, '\x00', r3, r2, 0x1, 0x0, 0x0, 0x7}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x6}, &(0x7f0000000200)=0x8) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/82, 0x32c000, 0x1000}, 0x20) (async) 55.456547ms ago: executing program 3 (id=5323): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x1e, 0x4, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xfffffffb}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x4}, 0x8) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 0s ago: executing program 4 (id=5324): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000040), 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async, rerun: 64) shutdown(r0, 0x1) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@var={0xe, 0x0, 0x0, 0xe, 0x1, 0x1}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x30, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/21, 0x40, 0x15, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r2}, 0x94) kernel console output (not intermixed with test programs): : Enslaving as an active interface with an up link [ 432.339472][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.411503][T16771] team0: Port device team_slave_0 added [ 432.436548][T16771] team0: Port device team_slave_1 added [ 432.608305][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.634877][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.758694][ T5183] Bluetooth: hci4: command tx timeout [ 432.766138][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.795408][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.802518][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.840143][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.867256][T16859] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 433.085281][T16868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.278096][T16771] hsr_slave_0: entered promiscuous mode [ 433.295681][T16771] hsr_slave_1: entered promiscuous mode [ 433.302247][T16771] debugfs: 'hsr0' already exists in 'hsr' [ 433.336152][T16771] Cannot create hsr debugfs directory [ 434.056578][T16914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.109250][T16771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.251604][T16917] netlink: 'syz.1.3244': attribute type 16 has an invalid length. [ 434.260858][T16917] netlink: 'syz.1.3244': attribute type 17 has an invalid length. [ 434.398071][T16917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.473047][T16771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.680296][T16929] syz_tun: entered promiscuous mode [ 434.691303][T16929] syz_tun: entered allmulticast mode [ 434.746947][T16771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.834292][ T5183] Bluetooth: hci4: command tx timeout [ 434.877561][T16771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.042415][T16940] __nla_validate_parse: 2 callbacks suppressed [ 435.042436][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 435.134539][T16940] openvswitch: netlink: nsh attr 5891 is out of range max 3 [ 435.141925][T16940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.186684][T16941] netlink: 'syz.1.3249': attribute type 4 has an invalid length. [ 435.238138][T16934] syzkaller1: entered promiscuous mode [ 435.299797][T16934] syzkaller1: entered allmulticast mode [ 435.497247][T16771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 435.532950][T16771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 435.566754][T16771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.613125][T16771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.743111][T16962] netlink: 'syz.0.3255': attribute type 9 has an invalid length. [ 435.996579][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 436.019408][T16771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.095391][T16979] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.115794][T16771] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.215639][T12465] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.222919][T12465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.283306][T12465] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.290580][T12465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.330242][T16990] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20004 [ 436.351924][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'. [ 436.374549][T16992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.495315][T16992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.715662][T16771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.742901][T17002] syzkaller1: entered promiscuous mode [ 436.750384][T17002] syzkaller1: entered allmulticast mode [ 436.882266][T17009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3270'. [ 436.914701][ T5183] Bluetooth: hci4: command tx timeout [ 436.960958][T17006] bond4: entered promiscuous mode [ 436.967271][T17006] bond4: entered allmulticast mode [ 436.973164][T17006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.013571][T17016] tipc: Started in network mode [ 437.023694][T17016] tipc: Node identity 4, cluster identity 4711 [ 437.033771][T17016] tipc: Node number set to 4 [ 437.036290][T17023] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 437.223509][T17032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.289492][T17034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3274'. [ 437.293251][T17030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 437.312219][T17034] netlink: 'syz.0.3274': attribute type 12 has an invalid length. [ 437.351263][T17034] netlink: 'syz.0.3274': attribute type 29 has an invalid length. [ 437.369374][T17034] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3274'. [ 437.378730][T17034] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 437.438767][ T30] audit: type=1107 audit(1755642711.870:5): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­áyJÍö¦ú.ú`ËWÍ\Žì _´[(¦3ìO·˜œp(¶Ü' [ 437.450934][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.578684][T16771] veth0_vlan: entered promiscuous mode [ 437.596107][T16771] veth1_vlan: entered promiscuous mode [ 437.603494][T17041] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 437.616702][T17041] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 437.691679][T16771] veth0_macvtap: entered promiscuous mode [ 437.719297][T16771] veth1_macvtap: entered promiscuous mode [ 437.763500][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.819237][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.873303][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.930668][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.945194][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3280'. [ 437.977256][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.986517][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3282'. [ 438.022646][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.157122][T17064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.242754][T17069] netlink: 'syz.1.3286': attribute type 39 has an invalid length. [ 438.455510][T17071] bond1: entered promiscuous mode [ 438.525136][T17071] bond1: entered allmulticast mode [ 438.571237][T17071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.722157][T12464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.740664][T12464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.760070][T12610] IPVS: starting estimator thread 0... [ 438.840082][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.855414][T17086] IPVS: using max 26 ests per chain, 62400 per kthread [ 438.873934][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.994979][ T5183] Bluetooth: hci4: command tx timeout [ 439.066264][T17093] delete_channel: no stack [ 439.353595][T17106] netlink: 'syz.2.3293': attribute type 4 has an invalid length. [ 439.404255][T17106] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3293'. [ 439.493420][T17111] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3295'. [ 439.666711][T17111] gretap0: entered promiscuous mode [ 439.696982][T17113] 0ªî{X¹¦: renamed from gretap0 [ 439.726862][T17113] 0ªî{X¹¦: left promiscuous mode [ 439.731956][T17113] 0ªî{X¹¦: entered allmulticast mode [ 439.762655][T17113] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 439.790712][T17116] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 439.792104][T17117] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 440.245659][T17135] __nla_validate_parse: 2 callbacks suppressed [ 440.245683][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3303'. [ 440.284836][T17136] dvmrp0: entered allmulticast mode [ 440.322912][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3305'. [ 440.345745][T17140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3305'. [ 440.392177][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 440.414262][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.422025][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.440814][T17147] bridge0: entered promiscuous mode [ 440.504258][T17152] sctp: [Deprecated]: syz.2.3306 (pid 17152) Use of int in maxseg socket option. [ 440.504258][T17152] Use struct sctp_assoc_value instead [ 442.047571][ T12] bond14 (unregistering): (slave gretap1): Releasing backup interface [ 443.007745][T17185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3316'. [ 443.024745][T17185] netlink: zone id is out of range [ 443.030068][T17185] netlink: zone id is out of range [ 443.035620][T17185] netlink: zone id is out of range [ 443.040885][T17185] netlink: zone id is out of range [ 443.046907][T17185] netlink: zone id is out of range [ 443.054774][T17185] netlink: zone id is out of range [ 443.060058][T17185] netlink: zone id is out of range [ 443.066338][T17185] netlink: zone id is out of range [ 443.071651][T17185] netlink: zone id is out of range [ 443.235153][T17189] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 443.243021][T17189] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3318'. [ 443.264484][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3318'. [ 443.318207][ T12] bond1 (unregistering): Released all slaves [ 443.432156][ T12] bond2 (unregistering): Released all slaves [ 443.549895][ T12] bond3 (unregistering): Released all slaves [ 443.661068][ T12] bond4 (unregistering): Released all slaves [ 443.770908][ T12] bond5 (unregistering): Released all slaves [ 443.886425][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 443.895775][ T12] bond0 (unregistering): Released all slaves [ 444.006724][ T12] bond6 (unregistering): (slave wireguard0): Releasing backup interface [ 444.015718][ T12] wireguard0: left promiscuous mode [ 444.021688][ T12] bond6 (unregistering): Released all slaves [ 444.040261][ T12] bond7 (unregistering): Released all slaves [ 444.059481][ T12] bond8 (unregistering): (slave veth7): Releasing active interface [ 444.068812][ T12] bond8 (unregistering): Released all slaves [ 444.173895][ T12] bond9 (unregistering): Released all slaves [ 444.271553][ T12] bond10 (unregistering): Released all slaves [ 444.381144][ T12] bond11 (unregistering): Released all slaves [ 444.401170][ T12] bond12 (unregistering): Released all slaves [ 444.501472][ T12] bond13 (unregistering): Released all slaves [ 444.608963][ T12] bond14 (unregistering): (slave bond15): Releasing backup interface [ 444.618009][ T12] bond14 (unregistering): Released all slaves [ 444.720558][ T12] bond15 (unregistering): Released all slaves [ 444.822929][ T12] bond16 (unregistering): Released all slaves [ 445.093789][ T12] : left promiscuous mode [ 445.157345][T17209] netlink: 'syz.1.3323': attribute type 1 has an invalid length. [ 445.289325][T17219] netlink: 'syz.3.3326': attribute type 10 has an invalid length. [ 445.325855][T17209] 8021q: adding VLAN 0 to HW filter on device bond8 [ 445.429832][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 445.475729][ T12] tipc: Disabling bearer [ 445.486183][ T12] tipc: Disabling bearer [ 445.543410][ T12] tipc: Left network mode [ 445.558861][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.608797][T17224] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3324'. [ 445.691600][ T12] IPVS: stopping master sync thread 13884 ... [ 445.779784][T17243] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 445.796225][T17243] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3330'. [ 445.937004][T17245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.978109][T17257] raw_sendmsg: syz.2.3334 forgot to set AF_INET. Fix it! [ 446.035080][T17257] netlink: 'syz.2.3334': attribute type 12 has an invalid length. [ 446.082449][T17255] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 446.093853][T17255] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 446.142761][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3337'. [ 446.213554][T17264] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3336'. [ 446.417227][T17276] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3339'. [ 446.450263][T17277] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3340'. [ 446.461483][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 446.951756][T17294] tipc: Started in network mode [ 446.961638][T17294] tipc: Node identity ac14142f, cluster identity 4711 [ 446.974885][T17294] tipc: New replicast peer: 0.0.0.0 [ 446.982342][T17294] tipc: Enabled bearer , priority 10 [ 447.018013][T17300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 447.187021][T17299] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 447.458588][T17316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3350'. [ 447.479001][T17317] netlink: 'syz.0.3351': attribute type 4 has an invalid length. [ 447.565454][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 447.689135][T17325] netlink: 'syz.0.3353': attribute type 10 has an invalid length. [ 447.738971][ T12] hsr_slave_0: left promiscuous mode [ 447.755964][ T12] hsr_slave_1: left promiscuous mode [ 447.777933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.786081][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.869358][T17328] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 447.889419][T17328] net_ratelimit: 19 callbacks suppressed [ 447.889441][T17328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.974988][T12608] tipc: Node number set to 2886997039 [ 448.459669][T17337] netlink: 'syz.3.3356': attribute type 10 has an invalid length. [ 448.671486][ T12] team0 (unregistering): Port device team_slave_1 removed [ 448.726578][ T12] team0 (unregistering): Port device team_slave_0 removed [ 449.178322][T17325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.203699][T17325] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 449.536821][T17354] netlink: 'syz.3.3360': attribute type 4 has an invalid length. [ 449.659303][T17354] `: renamed from bond0 (while UP) [ 449.750184][T17359] netlink: 'syz.2.3363': attribute type 14 has an invalid length. [ 449.859919][T17359] netlink: 'syz.2.3363': attribute type 14 has an invalid length. [ 449.868025][T12464] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.868090][T12464] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.868131][T12464] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.868170][T12464] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.945662][ T12] IPVS: stop unused estimator thread 0... [ 450.125247][T17374] tipc: Started in network mode [ 450.133867][T17374] tipc: Node identity 765345bbcbab, cluster identity 4711 [ 450.141801][T17374] tipc: Enabled bearer , priority 0 [ 450.216252][T17370] bond0: entered promiscuous mode [ 450.223120][T17370] bond0: entered allmulticast mode [ 450.230258][T17370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.245801][T17380] tipc: Resetting bearer [ 450.254363][T17372] tipc: Disabling bearer [ 450.505802][T17387] netlink: 'syz.0.3371': attribute type 10 has an invalid length. [ 450.616852][T17391] __nla_validate_parse: 7 callbacks suppressed [ 450.616874][T17391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3372'. [ 450.744841][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 450.754258][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 450.763352][T17395] netlink: 'syz.1.3373': attribute type 18 has an invalid length. [ 450.773324][T17395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 450.782792][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 450.792252][T17395] netlink: 'syz.1.3373': attribute type 18 has an invalid length. [ 450.892420][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3375'. [ 451.309820][T17415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.370278][T17428] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3383'. [ 452.486836][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 452.672422][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 452.991362][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3391'. [ 453.435319][T17437] Set syz1 is full, maxelem 65536 reached [ 454.570680][T17469] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 454.763164][T17481] netlink: 'syz.0.3398': attribute type 10 has an invalid length. [ 454.921501][T17494] Set syz1 is full, maxelem 65536 reached [ 454.971179][T17497] team0: No ports can be present during mode change [ 455.011535][T17499] team0: No ports can be present during mode change [ 455.219809][T17503] netlink: 'syz.3.3406': attribute type 6 has an invalid length. [ 455.271654][T17508] netlink: 'syz.3.3406': attribute type 6 has an invalid length. [ 455.455401][T17510] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.515760][T12464] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.536739][T12464] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.571876][T12464] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.582811][T12464] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.621224][T17515] netlink: zone id is out of range [ 455.655251][T17515] netlink: zone id is out of range [ 455.660452][T17515] netlink: zone id is out of range [ 455.692969][T17515] netlink: zone id is out of range [ 455.700764][T17515] netlink: zone id is out of range [ 455.712315][T17515] netlink: get zone limit has 8 unknown bytes [ 455.793890][T17521] netlink: 'syz.1.3410': attribute type 11 has an invalid length. [ 455.805950][T17521] __nla_validate_parse: 2 callbacks suppressed [ 455.805970][T17521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3410'. [ 455.993850][T17530] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 456.079953][T17526] can: request_module (can-proto-0) failed. [ 456.128728][T17526] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3412'. [ 456.164216][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 456.173159][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'. [ 456.226571][T17540] netlink: 'syz.2.3414': attribute type 1 has an invalid length. [ 456.286448][T17542] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3415'. [ 456.322481][T17549] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3417'. [ 456.359011][T17547] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 456.401129][T17547] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 456.412414][T17547] gretap1: entered promiscuous mode [ 456.424896][T17547] gretap1: entered allmulticast mode [ 456.655538][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3422'. [ 456.676412][T17565] erspan0: entered allmulticast mode [ 457.039434][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 457.810825][T17495] Set syz1 is full, maxelem 65536 reached [ 458.323679][T17637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 458.485918][T17644] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 458.757973][T17655] tipc: Enabled bearer , priority 0 [ 458.770009][T17655] syzkaller0: entered promiscuous mode [ 458.779138][T17655] syzkaller0: entered allmulticast mode [ 458.802395][T17655] tipc: Resetting bearer [ 458.820370][T17654] tipc: Resetting bearer [ 458.863365][T17654] tipc: Disabling bearer [ 459.002783][T17667] delete_channel: no stack [ 459.701179][T17707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3473'. [ 460.226208][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3486'. [ 460.252542][T17732] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 460.617344][T17756] netlink: 'syz.1.3494': attribute type 29 has an invalid length. [ 460.626399][T17756] netlink: 'syz.1.3494': attribute type 29 has an invalid length. [ 460.809690][T17769] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 460.829153][T17769] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 461.068594][T17777] syzkaller1: entered promiscuous mode [ 461.103518][T17777] syzkaller1: entered allmulticast mode [ 461.418158][T17783] bond3: entered promiscuous mode [ 461.460887][T17783] bond3: entered allmulticast mode [ 461.514869][T17783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.651500][T17809] __nla_validate_parse: 4 callbacks suppressed [ 461.651521][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 461.851263][T17796] netlink: 'syz.3.3505': attribute type 6 has an invalid length. [ 461.875499][T17796] netlink: 'syz.3.3505': attribute type 1 has an invalid length. [ 461.883281][T17796] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3505'. [ 461.965693][T17815] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 461.985708][ T5183] Bluetooth: hci4: command tx timeout [ 462.088669][ T30] audit: type=1107 audit(1755642736.520:6): pid=17814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='bvï6–g@”ú€@ñ¼2°/¬ÒÜo3¦êãáuõ`Ãÿ·À= [ 462.088669][ T30] KQƒ­mÚÑcÇn6dǮڅ9š:ˆÍ¼ñG½«€¢fa×¾Mì-è9Èßìu¾Æ€\n§mžHö*Aéi)"žØ>=æÐ^f'wZNðÚ”è.LÇ&t' [ 462.551501][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'. [ 462.606622][T17839] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3517'. [ 462.884182][T17843] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 462.961052][T17843] netem: incorrect ge model size [ 462.966812][T17843] netem: change failed [ 462.992665][T17844] netem: incorrect ge model size [ 462.998199][T17844] netem: change failed [ 463.065053][T17846] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.140166][T17853] netlink: del zone limit has 4 unknown bytes [ 463.288500][T17857] openvswitch: netlink: IP tunnel dst address not specified [ 463.340048][T17860] openvswitch: netlink: IP tunnel dst address not specified [ 463.491311][T17872] xt_socket: unknown flags 0x50 [ 463.639658][T17878] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 463.646587][T17878] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 463.748342][T17885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3535'. [ 463.781727][T17887] openvswitch: netlink: IPv4 tunnel dst address is zero [ 464.129831][T17904] bond7: entered promiscuous mode [ 464.135816][T17904] bond7: entered allmulticast mode [ 464.141441][T17904] 8021q: adding VLAN 0 to HW filter on device bond7 [ 464.165281][T17909] IPVS: set_ctl: invalid protocol: 2 172.30.1.5:20002 [ 464.526228][T17926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3543'. [ 464.846877][T17936] bond0: Error: Cannot enslave bond to itself. [ 464.988848][T17941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 465.140217][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3554'. [ 465.190806][T17957] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3553'. [ 465.210231][T17957] openvswitch: netlink: Flow key attr not present in new flow. [ 465.218732][T17953] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3555'. [ 465.235359][T17959] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 465.253408][T17953] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 465.431210][T17967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.029911][T18004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.103561][T18013] netlink: 'syz.0.3574': attribute type 1 has an invalid length. [ 466.117068][T18013] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 466.952167][T18051] 8021q: adding VLAN 0 to HW filter on device bond5 [ 466.975655][T18056] __nla_validate_parse: 7 callbacks suppressed [ 466.975677][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 467.026307][T18060] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3588'. [ 467.177091][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3590'. [ 467.219844][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3590'. [ 467.366128][T18074] sctp: [Deprecated]: syz.0.3594 (pid 18074) Use of int in max_burst socket option. [ 467.366128][T18074] Use struct sctp_assoc_value instead [ 467.455354][T18080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3597'. [ 467.621335][T18085] bond7: entered allmulticast mode [ 467.630399][T18085] 8021q: adding VLAN 0 to HW filter on device bond7 [ 467.638838][T18085] bridge0: port 3(bond7) entered blocking state [ 467.653732][T18085] bridge0: port 3(bond7) entered disabled state [ 467.678356][T18085] bond7: entered promiscuous mode [ 467.690362][T18085] bridge0: port 3(bond7) entered blocking state [ 467.696877][T18085] bridge0: port 3(bond7) entered forwarding state [ 467.732441][T18096] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 467.743553][T18096] CPU: 0 UID: 0 PID: 18096 Comm: syz.3.3598 Not tainted syzkaller #0 PREEMPT(full) [ 467.743585][T18096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.743600][T18096] Call Trace: [ 467.743610][T18096] [ 467.743620][T18096] dump_stack_lvl+0x189/0x250 [ 467.743658][T18096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.743686][T18096] ? __pfx__printk+0x10/0x10 [ 467.743725][T18096] ? kernfs_path_from_node+0x2f/0x290 [ 467.743750][T18096] ? kernfs_path_from_node+0x250/0x290 [ 467.743772][T18096] ? kernfs_path_from_node+0x2f/0x290 [ 467.743801][T18096] sysfs_warn_dup+0x8e/0xa0 [ 467.743824][T18096] sysfs_do_create_link_sd+0xc0/0x110 [ 467.743851][T18096] device_add_class_symlinks+0x1cf/0x240 [ 467.743879][T18096] device_add+0x475/0xb50 [ 467.743907][T18096] wiphy_register+0x1ba6/0x28d0 [ 467.743964][T18096] ? __pfx_wiphy_register+0x10/0x10 [ 467.743995][T18096] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 467.744027][T18096] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 467.744067][T18096] ieee80211_register_hw+0x3425/0x4080 [ 467.744109][T18096] ? ieee80211_register_hw+0x1441/0x4080 [ 467.744143][T18096] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 467.744170][T18096] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.744216][T18096] ? __hrtimer_setup+0x187/0x210 [ 467.744236][T18096] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 467.744270][T18096] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 467.744332][T18096] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 467.744358][T18096] ? trace_kmalloc+0x1f/0xd0 [ 467.744383][T18096] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 467.744412][T18096] ? kstrndup+0xbf/0x160 [ 467.744444][T18096] hwsim_new_radio_nl+0xea4/0x1b10 [ 467.744475][T18096] ? __pfx___nla_validate_parse+0x10/0x10 [ 467.744527][T18096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.744571][T18096] ? __nla_parse+0x40/0x60 [ 467.744608][T18096] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 467.744644][T18096] genl_family_rcv_msg_doit+0x215/0x300 [ 467.744679][T18096] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.744722][T18096] ? bpf_lsm_capable+0x9/0x20 [ 467.744751][T18096] ? security_capable+0x7e/0x2e0 [ 467.744791][T18096] genl_rcv_msg+0x60e/0x790 [ 467.744823][T18096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.744846][T18096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 467.744890][T18096] netlink_rcv_skb+0x205/0x470 [ 467.744918][T18096] ? __lock_acquire+0xab9/0xd20 [ 467.744952][T18096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.744978][T18096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.745031][T18096] ? down_read+0x1ad/0x2e0 [ 467.745067][T18096] genl_rcv+0x28/0x40 [ 467.745087][T18096] netlink_unicast+0x82c/0x9e0 [ 467.745126][T18096] ? __pfx_netlink_unicast+0x10/0x10 [ 467.745157][T18096] ? netlink_sendmsg+0x642/0xb30 [ 467.745196][T18096] ? skb_put+0x11b/0x210 [ 467.745236][T18096] netlink_sendmsg+0x805/0xb30 [ 467.745280][T18096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.745317][T18096] ? aa_sock_msg_perm+0xf1/0x1d0 [ 467.745353][T18096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.745377][T18096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.745410][T18096] __sock_sendmsg+0x219/0x270 [ 467.745441][T18096] ____sys_sendmsg+0x505/0x830 [ 467.745471][T18096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.745506][T18096] ? import_iovec+0x74/0xa0 [ 467.745536][T18096] ___sys_sendmsg+0x21f/0x2a0 [ 467.745561][T18096] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.745629][T18096] ? __fget_files+0x2a/0x420 [ 467.745675][T18096] ? __fget_files+0x3a0/0x420 [ 467.745719][T18096] __x64_sys_sendmsg+0x19b/0x260 [ 467.745763][T18096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.745800][T18096] ? rcu_is_watching+0x15/0xb0 [ 467.745829][T18096] ? do_syscall_64+0xbe/0x3b0 [ 467.745867][T18096] do_syscall_64+0xfa/0x3b0 [ 467.745897][T18096] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.745927][T18096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.745949][T18096] ? clear_bhb_loop+0x60/0xb0 [ 467.745976][T18096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.745998][T18096] RIP: 0033:0x7f6bdc38ebe9 [ 467.746018][T18096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.746038][T18096] RSP: 002b:00007f6bdd160038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.746061][T18096] RAX: ffffffffffffffda RBX: 00007f6bdc5b6090 RCX: 00007f6bdc38ebe9 [ 467.746077][T18096] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 467.746091][T18096] RBP: 00007f6bdc411e19 R08: 0000000000000000 R09: 0000000000000000 [ 467.746104][T18096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.746117][T18096] R13: 00007f6bdc5b6128 R14: 00007f6bdc5b6090 R15: 00007ffe78b28d48 [ 467.746155][T18096] [ 468.376681][ T78] bridge0: port 3(bond7) entered disabled state [ 468.442779][T18108] 8021q: adding VLAN 0 to HW filter on device bond9 [ 468.450135][T18112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3605'. [ 468.478568][T18108] bond0: (slave bond9): Enslaving as an active interface with an up link [ 468.501052][T18120] IPVS: set_ctl: invalid protocol: 153 172.20.20.170:20002 [ 468.506273][T18119] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3604'. [ 468.526473][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 468.701742][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3609'. [ 468.711245][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3609'. [ 468.720749][T18127] netlink: 'syz.1.3609': attribute type 18 has an invalid length. [ 468.731192][T18127] netlink: 'syz.1.3609': attribute type 18 has an invalid length. [ 469.327662][T18166] sctp: [Deprecated]: syz.1.3619 (pid 18166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.327662][T18166] Use struct sctp_sack_info instead [ 470.493471][T18216] bond8: entered promiscuous mode [ 470.515197][T18216] bond8: entered allmulticast mode [ 470.522784][T18216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 471.856173][T18275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.996589][T18275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.377327][T18303] __nla_validate_parse: 3 callbacks suppressed [ 472.377347][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3656'. [ 472.666731][T18306] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3657'. [ 473.020932][T18328] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3664'. [ 473.183044][T18333] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 473.381224][T18341] netlink: 'syz.3.3669': attribute type 8 has an invalid length. [ 473.443257][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3668'. [ 473.493166][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 473.580850][T18346] bridge_slave_0: invalid flags given to default FDB implementation [ 474.115019][T18364] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3676'. [ 474.502161][T18376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3682'. [ 474.859083][T18377] syzkaller0: entered promiscuous mode [ 474.890180][T18377] syzkaller0: entered allmulticast mode [ 474.917350][T18399] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3686'. [ 475.003402][T18401] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3686'. [ 475.140048][T18409] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3687'. [ 475.195723][T18409] gretap0: entered promiscuous mode [ 475.282451][T18401] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.786299][T18427] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 475.802232][T18427] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 476.491015][T18278] Set syz1 is full, maxelem 65536 reached [ 477.683806][T18437] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 477.723291][T18446] __nla_validate_parse: 1 callbacks suppressed [ 477.723315][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3697'. [ 477.785270][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'. [ 477.811493][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.926718][T18446] bridge_slave_1 (unregistering): left allmulticast mode [ 477.942495][T18446] bridge_slave_1 (unregistering): left promiscuous mode [ 477.962381][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.168547][T18466] netlink: 'syz.4.3705': attribute type 4 has an invalid length. [ 478.215793][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 478.523344][T18483] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3714'. [ 478.550753][T18483] 8021q: VLANs not supported on gre0 [ 478.720791][T18489] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 478.753453][T18489] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3716'. [ 478.926836][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'. [ 478.958825][T18501] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.080093][T18501] bridge_slave_1 (unregistering): left allmulticast mode [ 479.100298][T18501] bridge_slave_1 (unregistering): left promiscuous mode [ 479.122134][T18501] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.502442][T18529] pim6reg1: entered promiscuous mode [ 479.534252][T18529] pim6reg1: entered allmulticast mode [ 479.568679][T18533] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3726'. [ 479.588712][T18533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3726'. [ 479.640915][T18535] 8021q: adding VLAN 0 to HW filter on device bond6 [ 479.652931][T18539] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3728'. [ 479.988496][T18544] bond10: entered promiscuous mode [ 479.995349][T18544] bond10: entered allmulticast mode [ 480.001200][T18544] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.033804][T18559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3733'. [ 480.374226][T18575] bond0: entered allmulticast mode [ 480.389838][T18575] bond9: entered allmulticast mode [ 480.420262][T18576] openvswitch: netlink: Unknown nsh attribute 0 [ 480.435426][T18575] openvswitch: netlink: Unknown nsh attribute 0 [ 480.441748][T18575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.442403][T18576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.483178][T18585] 8021q: VLANs not supported on wg1 [ 480.502696][T18583] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 480.869780][T18608] netlink: 'syz.2.3750': attribute type 10 has an invalid length. [ 480.929729][T18605] bond8: entered promiscuous mode [ 480.935385][T18605] bond8: entered allmulticast mode [ 480.942832][T18605] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.952682][T18608] bridge0: port 3(team0) entered blocking state [ 480.959715][T18608] bridge0: port 3(team0) entered disabled state [ 480.967536][T18608] team0: entered allmulticast mode [ 480.972691][T18608] team_slave_0: entered allmulticast mode [ 480.979437][T18608] team_slave_1: entered allmulticast mode [ 480.988126][T18608] team0: entered promiscuous mode [ 480.993321][T18608] team_slave_0: entered promiscuous mode [ 480.999618][T18608] team_slave_1: entered promiscuous mode [ 481.007252][T18608] bridge0: port 3(team0) entered blocking state [ 481.013649][T18608] bridge0: port 3(team0) entered forwarding state [ 481.101490][T18617] syzkaller0: entered promiscuous mode [ 481.121335][T18617] syzkaller0: entered allmulticast mode [ 481.375827][T18643] sctp: [Deprecated]: syz.3.3760 (pid 18643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.375827][T18643] Use struct sctp_sack_info instead [ 481.910873][T18662] gretap0: entered promiscuous mode [ 481.943149][T18660] tipc: New replicast peer: 255.255.255.255 [ 481.952757][T18660] tipc: Enabled bearer , priority 10 [ 482.379431][T18676] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.611559][T18687] tipc: Enabled bearer , priority 0 [ 482.619800][T18687] syzkaller0: entered promiscuous mode [ 482.625531][T18687] syzkaller0: entered allmulticast mode [ 482.653834][T18687] tipc: Resetting bearer [ 482.682804][T18686] tipc: Resetting bearer [ 482.726299][T18686] tipc: Disabling bearer [ 482.748661][T18691] netlink: 'syz.0.3780': attribute type 1 has an invalid length. [ 482.843483][T18694] netlink: 'syz.3.3781': attribute type 10 has an invalid length. [ 482.865749][T18696] bond9: (slave bridge3): making interface the new active one [ 482.876464][T18696] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 483.064086][T12593] tipc: Node number set to 3187164603 [ 483.106120][T18710] netlink: 'syz.3.3786': attribute type 12 has an invalid length. [ 483.171495][T18711] veth3: entered promiscuous mode [ 483.184738][T18703] __nla_validate_parse: 17 callbacks suppressed [ 483.184760][T18703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3785'. [ 483.330638][T18717] tipc: Started in network mode [ 483.364852][T18717] tipc: Node identity d2619b767593, cluster identity 4711 [ 483.384340][T18717] tipc: Enabled bearer , priority 0 [ 483.415697][T18720] syzkaller0: entered promiscuous mode [ 483.423071][T18720] syzkaller0: entered allmulticast mode [ 483.458497][T18717] tipc: Resetting bearer [ 483.473491][T18715] tipc: Resetting bearer [ 483.522611][T18715] tipc: Disabling bearer [ 483.715592][T18731] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 483.729268][T18730] netlink: 'syz.0.3794': attribute type 1 has an invalid length. [ 483.755981][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3796'. [ 483.782524][T18736] Unsupported ieee802154 address type: 0 [ 483.942545][T18742] netlink: 'syz.4.3798': attribute type 10 has an invalid length. [ 484.096264][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3803'. [ 484.287795][T18765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3806'. [ 484.487320][T18773] veth1_macvtap: left promiscuous mode [ 484.500382][T18773] macsec0: entered promiscuous mode [ 484.507070][T18773] macsec0: entered allmulticast mode [ 484.534775][T18773] veth1_macvtap: entered promiscuous mode [ 484.540565][T18773] veth1_macvtap: entered allmulticast mode [ 484.562833][T18773] macsec0: left promiscuous mode [ 484.575161][T18773] macsec0: left allmulticast mode [ 484.582539][T18773] veth1_macvtap: left allmulticast mode [ 484.732639][T18780] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3811'. [ 485.001548][T18787] netlink: 'syz.4.3813': attribute type 10 has an invalid length. [ 485.041175][T18789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3814'. [ 485.831012][T18825] netlink: 'syz.4.3827': attribute type 10 has an invalid length. [ 486.285231][T18792] lec:lec_atm_close: lec0: Shut down! [ 486.381821][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.392825][T18848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.562643][T18858] netlink: 'syz.2.3836': attribute type 10 has an invalid length. [ 486.842413][T18868] netlink: 'syz.4.3840': attribute type 10 has an invalid length. [ 487.011733][T18871] 8021q: adding VLAN 0 to HW filter on device bond7 [ 487.025551][T18879] netlink: 'syz.4.3843': attribute type 12 has an invalid length. [ 487.187725][T18884] netlink: 'syz.4.3843': attribute type 11 has an invalid length. [ 487.290878][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3843'. [ 487.297563][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3844'. [ 487.621145][T18911] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3851'. [ 487.645170][T18911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3851'. [ 487.666097][T18911] gre0: entered promiscuous mode [ 487.692232][T18915] netlink: 'syz.2.3852': attribute type 4 has an invalid length. [ 487.753629][T18918] netlink: 'syz.2.3852': attribute type 4 has an invalid length. [ 488.607842][T18935] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3855'. [ 489.210072][T18966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3867'. [ 489.257212][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 489.374115][T18930] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 489.381247][T18930] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 489.546598][T18930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 489.556995][T18930] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 489.607255][T18930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 489.622210][T18930] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 489.711238][T18930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 489.728967][T18930] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 489.740992][T18982] netlink: 'syz.1.3874': attribute type 10 has an invalid length. [ 489.757046][ T5183] block nbd0: Receive control failed (result -32) [ 490.076661][T19005] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3880'. [ 490.115318][T19005] xt_limit: Overflow, try lower: 604147548/4200216962 [ 490.231962][T19008] tipc: Started in network mode [ 490.240326][T19008] tipc: Node identity e2f0b12ba84a, cluster identity 4711 [ 490.262487][T19008] tipc: Enabled bearer , priority 0 [ 490.291138][T19011] syzkaller0: entered promiscuous mode [ 490.311353][T19011] syzkaller0: entered allmulticast mode [ 490.338410][T19008] syzkaller0: mtu less than device minimum [ 490.351772][T19007] tipc: Resetting bearer [ 490.421343][T19007] tipc: Disabling bearer [ 490.665261][T19018] bridge2: entered promiscuous mode [ 490.677088][T19018] bridge2: entered allmulticast mode [ 490.684166][T19020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3887'. [ 491.070050][T19028] bond9: entered promiscuous mode [ 491.108224][T19028] bond9: entered allmulticast mode [ 491.134584][T19028] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.516936][T19055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3896'. [ 491.700022][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 491.969467][T19069] tipc: Enabling of bearer rejected, failed to enable media [ 492.545821][T19085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.703218][T19090] FAULT_INJECTION: forcing a failure. [ 492.703218][T19090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.734323][T19093] netlink: 191164 bytes leftover after parsing attributes in process `syz.4.3914'. [ 492.751624][T19093] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.784114][T19090] CPU: 1 UID: 0 PID: 19090 Comm: syz.2.3913 Not tainted syzkaller #0 PREEMPT(full) [ 492.784146][T19090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.784160][T19090] Call Trace: [ 492.784170][T19090] [ 492.784180][T19090] dump_stack_lvl+0x189/0x250 [ 492.784213][T19090] ? __pfx____ratelimit+0x10/0x10 [ 492.784244][T19090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.784271][T19090] ? __pfx__printk+0x10/0x10 [ 492.784303][T19090] ? __might_fault+0xb0/0x130 [ 492.784346][T19090] should_fail_ex+0x414/0x560 [ 492.784382][T19090] _copy_from_user+0x2d/0xb0 [ 492.784409][T19090] ___sys_sendmsg+0x158/0x2a0 [ 492.784435][T19090] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.784498][T19090] ? __fget_files+0x2a/0x420 [ 492.784531][T19090] ? __fget_files+0x3a0/0x420 [ 492.784576][T19090] __x64_sys_sendmsg+0x19b/0x260 [ 492.784601][T19090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.784635][T19090] ? __pfx_ksys_write+0x10/0x10 [ 492.784662][T19090] ? rcu_is_watching+0x15/0xb0 [ 492.784690][T19090] ? do_syscall_64+0xbe/0x3b0 [ 492.784725][T19090] do_syscall_64+0xfa/0x3b0 [ 492.784754][T19090] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.784783][T19090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.784804][T19090] ? clear_bhb_loop+0x60/0xb0 [ 492.784831][T19090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.784852][T19090] RIP: 0033:0x7fd553d8ebe9 [ 492.784871][T19090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.784889][T19090] RSP: 002b:00007fd554c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.784912][T19090] RAX: ffffffffffffffda RBX: 00007fd553fb5fa0 RCX: 00007fd553d8ebe9 [ 492.784928][T19090] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 492.784942][T19090] RBP: 00007fd554c29090 R08: 0000000000000000 R09: 0000000000000000 [ 492.784955][T19090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.784967][T19090] R13: 00007fd553fb6038 R14: 00007fd553fb5fa0 R15: 00007ffcbd510858 [ 492.785002][T19090] [ 493.022111][T19096] netlink: 'syz.0.3915': attribute type 4 has an invalid length. [ 493.675701][T18994] Set syz1 is full, maxelem 65536 reached [ 493.689014][T19117] pim6reg1: entered promiscuous mode [ 493.720433][T19117] pim6reg1: entered allmulticast mode [ 493.877657][T19129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3931'. [ 493.902795][T19131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3930'. [ 494.099206][T19137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3934'. [ 494.360185][T19151] netlink: 'syz.2.3940': attribute type 10 has an invalid length. [ 494.379698][T19151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.409950][T19151] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 494.422710][T19155] FAULT_INJECTION: forcing a failure. [ 494.422710][T19155] name failslab, interval 1, probability 0, space 0, times 0 [ 494.443503][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.0.3942 Not tainted syzkaller #0 PREEMPT(full) [ 494.443535][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.443549][T19155] Call Trace: [ 494.443558][T19155] [ 494.443568][T19155] dump_stack_lvl+0x189/0x250 [ 494.443599][T19155] ? __pfx____ratelimit+0x10/0x10 [ 494.443630][T19155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.443656][T19155] ? __pfx__printk+0x10/0x10 [ 494.443683][T19155] ? trace_contention_end+0x39/0x120 [ 494.443725][T19155] should_fail_ex+0x414/0x560 [ 494.443767][T19155] should_failslab+0xa8/0x100 [ 494.443802][T19155] kmem_cache_alloc_noprof+0x73/0x3c0 [ 494.443831][T19155] ? skb_clone+0x212/0x3a0 [ 494.443860][T19155] skb_clone+0x212/0x3a0 [ 494.443888][T19155] __netlink_deliver_tap+0x404/0x850 [ 494.443939][T19155] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.443972][T19155] netlink_deliver_tap+0x19c/0x1b0 [ 494.444005][T19155] netlink_dump+0x92b/0xe90 [ 494.444050][T19155] ? __pfx_netlink_dump+0x10/0x10 [ 494.444102][T19155] ? kmem_cache_free+0x18f/0x400 [ 494.444137][T19155] netlink_recvmsg+0x676/0xa30 [ 494.444180][T19155] ? __pfx_netlink_recvmsg+0x10/0x10 [ 494.444217][T19155] ? __lock_acquire+0xab9/0xd20 [ 494.444247][T19155] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.444283][T19155] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 494.444309][T19155] ? __pfx_netlink_recvmsg+0x10/0x10 [ 494.444343][T19155] sock_recvmsg_nosec+0x186/0x1c0 [ 494.444376][T19155] ____sys_recvmsg+0x3aa/0x460 [ 494.444411][T19155] ? __pfx_____sys_recvmsg+0x10/0x10 [ 494.444453][T19155] ? import_iovec+0x74/0xa0 [ 494.444481][T19155] ___sys_recvmsg+0x1b5/0x510 [ 494.444511][T19155] ? __pfx____sys_recvmsg+0x10/0x10 [ 494.444573][T19155] ? __might_fault+0xb0/0x130 [ 494.444608][T19155] do_recvmmsg+0x307/0x770 [ 494.444642][T19155] ? __pfx_do_recvmmsg+0x10/0x10 [ 494.444680][T19155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.444733][T19155] __x64_sys_recvmmsg+0x190/0x240 [ 494.444766][T19155] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 494.444788][T19155] ? rcu_is_watching+0x15/0xb0 [ 494.444815][T19155] ? do_syscall_64+0xbe/0x3b0 [ 494.444851][T19155] do_syscall_64+0xfa/0x3b0 [ 494.444879][T19155] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.444909][T19155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.444930][T19155] ? clear_bhb_loop+0x60/0xb0 [ 494.444956][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.444977][T19155] RIP: 0033:0x7faab9b8ebe9 [ 494.444996][T19155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.445014][T19155] RSP: 002b:00007faaba9f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 494.445037][T19155] RAX: ffffffffffffffda RBX: 00007faab9db5fa0 RCX: 00007faab9b8ebe9 [ 494.445052][T19155] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 494.445065][T19155] RBP: 00007faaba9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 494.445078][T19155] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 494.445089][T19155] R13: 00007faab9db6038 R14: 00007faab9db5fa0 R15: 00007ffeaab16558 [ 494.445123][T19155] [ 494.888528][T19161] lo speed is unknown, defaulting to 1000 [ 494.981465][T19165] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 495.123535][T19167] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3948'. [ 495.147745][T19161] syzkaller0 speed is unknown, defaulting to 1000 [ 495.159613][T19167] netlink: 'syz.4.3948': attribute type 2 has an invalid length. [ 495.185129][T19167] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3948'. [ 495.185986][T19161] lo speed is unknown, defaulting to 1000 [ 495.203890][T19167] nbd: must specify at least one socket [ 495.590163][T19192] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3958'. [ 495.745580][T19199] sctp: [Deprecated]: syz.2.3963 (pid 19199) Use of int in max_burst socket option. [ 495.745580][T19199] Use struct sctp_assoc_value instead [ 495.801094][T19196] bond10: entered promiscuous mode [ 495.807314][T19196] bond10: entered allmulticast mode [ 495.813079][T19196] 8021q: adding VLAN 0 to HW filter on device bond10 [ 495.840631][T19206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3963'. [ 496.404713][T19227] netlink: 'syz.1.3966': attribute type 1 has an invalid length. [ 496.425606][T19227] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3966'. [ 496.607136][T19238] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3970'. [ 496.705380][T19243] tipc: Enabling of bearer rejected, failed to enable media [ 496.940622][T19262] FAULT_INJECTION: forcing a failure. [ 496.940622][T19262] name failslab, interval 1, probability 0, space 0, times 0 [ 496.963868][T19262] CPU: 1 UID: 0 PID: 19262 Comm: syz.2.3979 Not tainted syzkaller #0 PREEMPT(full) [ 496.963900][T19262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.963918][T19262] Call Trace: [ 496.963926][T19262] [ 496.963935][T19262] dump_stack_lvl+0x189/0x250 [ 496.963966][T19262] ? __pfx____ratelimit+0x10/0x10 [ 496.963997][T19262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.964022][T19262] ? __pfx__printk+0x10/0x10 [ 496.964048][T19262] ? trace_contention_end+0x39/0x120 [ 496.964089][T19262] should_fail_ex+0x414/0x560 [ 496.964124][T19262] should_failslab+0xa8/0x100 [ 496.964158][T19262] kmem_cache_alloc_noprof+0x73/0x3c0 [ 496.964187][T19262] ? skb_clone+0x212/0x3a0 [ 496.964216][T19262] skb_clone+0x212/0x3a0 [ 496.964244][T19262] __netlink_deliver_tap+0x404/0x850 [ 496.964291][T19262] ? netlink_deliver_tap+0x2e/0x1b0 [ 496.964324][T19262] netlink_deliver_tap+0x19c/0x1b0 [ 496.964357][T19262] netlink_dump+0x92b/0xe90 [ 496.964409][T19262] ? __pfx_netlink_dump+0x10/0x10 [ 496.964461][T19262] ? kmem_cache_free+0x18f/0x400 [ 496.964506][T19262] netlink_recvmsg+0x676/0xa30 [ 496.964548][T19262] ? __pfx_netlink_recvmsg+0x10/0x10 [ 496.964584][T19262] ? mntput_no_expire+0xb9/0x9d0 [ 496.964611][T19262] ? aa_sock_msg_perm+0xf1/0x1d0 [ 496.964647][T19262] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 496.964681][T19262] ? __pfx_netlink_recvmsg+0x10/0x10 [ 496.964714][T19262] sock_recvmsg_nosec+0x186/0x1c0 [ 496.964748][T19262] ____sys_recvmsg+0x3aa/0x460 [ 496.964783][T19262] ? __pfx_____sys_recvmsg+0x10/0x10 [ 496.964821][T19262] ? import_iovec+0x74/0xa0 [ 496.964850][T19262] ___sys_recvmsg+0x1b5/0x510 [ 496.964878][T19262] ? __pfx____sys_recvmsg+0x10/0x10 [ 496.964929][T19262] ? __might_fault+0xb0/0x130 [ 496.964962][T19262] do_recvmmsg+0x307/0x770 [ 496.964996][T19262] ? __pfx_do_recvmmsg+0x10/0x10 [ 496.965035][T19262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.965090][T19262] __x64_sys_recvmmsg+0x190/0x240 [ 496.965118][T19262] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 496.965140][T19262] ? rcu_is_watching+0x15/0xb0 [ 496.965168][T19262] ? do_syscall_64+0xbe/0x3b0 [ 496.965204][T19262] do_syscall_64+0xfa/0x3b0 [ 496.965240][T19262] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.965270][T19262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.965292][T19262] ? clear_bhb_loop+0x60/0xb0 [ 496.965319][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.965340][T19262] RIP: 0033:0x7fd553d8ebe9 [ 496.965360][T19262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.965379][T19262] RSP: 002b:00007fd554c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 496.965409][T19262] RAX: ffffffffffffffda RBX: 00007fd553fb5fa0 RCX: 00007fd553d8ebe9 [ 496.965425][T19262] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 496.965439][T19262] RBP: 00007fd554c29090 R08: 0000000000000000 R09: 0000000000000000 [ 496.965452][T19262] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 496.965466][T19262] R13: 00007fd553fb6038 R14: 00007fd553fb5fa0 R15: 00007ffcbd510858 [ 496.965626][T19262] [ 497.024754][T19265] tipc: Enabling of bearer rejected, failed to enable media [ 497.330487][T19265] netlink: 'syz.3.3981': attribute type 9 has an invalid length. [ 497.492184][T19279] netlink: 'syz.2.3984': attribute type 5 has an invalid length. [ 497.693618][T19291] netlink: 'syz.0.3989': attribute type 21 has an invalid length. [ 497.762158][T19291] netlink: 'syz.0.3989': attribute type 21 has an invalid length. [ 497.930479][T19305] bond10: entered promiscuous mode [ 497.954963][T19305] bond10: entered allmulticast mode [ 497.960697][T19305] 8021q: adding VLAN 0 to HW filter on device bond10 [ 498.095271][T19315] FAULT_INJECTION: forcing a failure. [ 498.095271][T19315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.129968][T19315] CPU: 0 UID: 0 PID: 19315 Comm: syz.2.3993 Not tainted syzkaller #0 PREEMPT(full) [ 498.129999][T19315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 498.130012][T19315] Call Trace: [ 498.130021][T19315] [ 498.130030][T19315] dump_stack_lvl+0x189/0x250 [ 498.130061][T19315] ? __pfx____ratelimit+0x10/0x10 [ 498.130091][T19315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.130118][T19315] ? __pfx__printk+0x10/0x10 [ 498.130148][T19315] ? __might_fault+0xb0/0x130 [ 498.130191][T19315] should_fail_ex+0x414/0x560 [ 498.130226][T19315] _copy_from_user+0x2d/0xb0 [ 498.130252][T19315] ___sys_recvmsg+0x12e/0x510 [ 498.130282][T19315] ? __pfx____sys_recvmsg+0x10/0x10 [ 498.130341][T19315] ? __might_fault+0xb0/0x130 [ 498.130373][T19315] do_recvmmsg+0x307/0x770 [ 498.130407][T19315] ? __pfx_do_recvmmsg+0x10/0x10 [ 498.130444][T19315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.130496][T19315] __x64_sys_recvmmsg+0x190/0x240 [ 498.130527][T19315] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 498.130557][T19315] ? do_syscall_64+0xbe/0x3b0 [ 498.130592][T19315] do_syscall_64+0xfa/0x3b0 [ 498.130627][T19315] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.130656][T19315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.130676][T19315] ? clear_bhb_loop+0x60/0xb0 [ 498.130703][T19315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.130724][T19315] RIP: 0033:0x7fd553d8ebe9 [ 498.130742][T19315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.130761][T19315] RSP: 002b:00007fd554c08038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 498.130783][T19315] RAX: ffffffffffffffda RBX: 00007fd553fb6090 RCX: 00007fd553d8ebe9 [ 498.130799][T19315] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 498.130812][T19315] RBP: 00007fd554c08090 R08: 0000000000000000 R09: 0000000000000000 [ 498.130824][T19315] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 498.130837][T19315] R13: 00007fd553fb6128 R14: 00007fd553fb6090 R15: 00007ffcbd510858 [ 498.130872][T19315] [ 498.638655][T19348] netlink: 'syz.3.4004': attribute type 10 has an invalid length. [ 498.762177][T19354] vxcan1: entered promiscuous mode [ 498.771131][T19354] vxcan1: entered allmulticast mode [ 498.814504][T19356] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4009'. [ 498.823521][T19356] openvswitch: netlink: Actions may not be safe on all matching packets [ 499.011623][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 499.038992][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 499.782565][T19409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4027'. [ 499.882622][T19414] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4030'. [ 499.963696][T19418] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 500.003853][T19421] netlink: 'syz.4.4031': attribute type 1 has an invalid length. [ 500.016617][T19421] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4031'. [ 500.026164][T19421] block nbd1: not configured, cannot reconfigure [ 500.076297][T19425] netlink: 'syz.3.4033': attribute type 1 has an invalid length. [ 500.192769][T19434] netlink: 'syz.2.4034': attribute type 10 has an invalid length. [ 500.208855][T19425] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.265532][T19426] vlan3: entered promiscuous mode [ 500.280902][T19439] netlink: 'syz.4.4035': attribute type 10 has an invalid length. [ 500.298611][T19426] bond11: entered promiscuous mode [ 500.305351][T19426] vlan3: entered allmulticast mode [ 500.310634][T19426] bond11: entered allmulticast mode [ 500.351881][T19434] bond0: (slave batadv0): Releasing backup interface [ 500.376764][T19439] bridge_slave_1: left allmulticast mode [ 500.382806][T19439] bridge_slave_1: left promiscuous mode [ 500.416816][T19439] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.461195][T19439] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 500.579787][T19453] sctp: [Deprecated]: syz.3.4042 (pid 19453) Use of int in maxseg socket option. [ 500.579787][T19453] Use struct sctp_assoc_value instead [ 500.631892][T19456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.821038][T19468] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 500.830120][T12608] IPVS: starting estimator thread 0... [ 500.925891][T19473] IPVS: using max 26 ests per chain, 62400 per kthread [ 500.935372][T19477] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4050'. [ 500.986861][T19477] batadv_slave_1: entered promiscuous mode [ 500.993422][T19479] netlink: 'syz.0.4051': attribute type 10 has an invalid length. [ 501.029137][T19479] bond0: (slave batadv0): Releasing backup interface [ 501.042524][T19482] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4052'. [ 501.045164][T19476] batadv_slave_1: left promiscuous mode [ 501.055673][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4052'. [ 501.255622][T19498] tls_set_device_offload_rx: netdev not found [ 501.456386][T19508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 501.585386][T19517] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4066'. [ 501.647467][T19519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.786716][T19528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4069'. [ 502.008169][T19541] netem: incorrect ge model size [ 502.381016][T19552] team0: Device vti0 is of different type [ 502.499949][T19553] team0: Device vti0 is of different type [ 503.793173][T19609] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 503.806241][T19609] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 504.008826][T19615] bond9: entered promiscuous mode [ 504.016466][T19615] bond9: entered allmulticast mode [ 504.022913][T19615] 8021q: adding VLAN 0 to HW filter on device bond9 [ 504.313375][T19641] __nla_validate_parse: 3 callbacks suppressed [ 504.313397][T19641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4104'. [ 504.354371][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 504.386967][T19641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4104'. [ 504.414175][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4104'. [ 504.621371][T19658] sctp: [Deprecated]: syz.4.4111 (pid 19658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.621371][T19658] Use struct sctp_sack_info instead [ 504.806182][T19668] Set syz1 is full, maxelem 65536 reached [ 504.948939][T19669] bond7: entered promiscuous mode [ 504.959006][T19669] bond7: entered allmulticast mode [ 504.970682][T19669] 8021q: adding VLAN 0 to HW filter on device bond7 [ 504.980892][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4115'. [ 505.121999][T19684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4115'. [ 505.290138][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 505.305126][T19691] openvswitch: netlink: Flow actions attr not present in new flow. [ 506.338214][T19737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4129'. [ 506.673249][T19760] netlink: 'syz.0.4136': attribute type 10 has an invalid length. [ 506.699522][T19759] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4135'. [ 506.963307][T19775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4141'. [ 507.002415][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.013332][T19775] nbd: must specify a size in bytes for the device [ 507.855815][T19812] netlink: 'syz.4.4150': attribute type 10 has an invalid length. [ 508.617529][T19850] netlink: 'syz.4.4160': attribute type 5 has an invalid length. [ 508.644435][T19850] geneve2: entered promiscuous mode [ 508.654172][T19850] geneve2: entered allmulticast mode [ 508.667191][ T37] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 508.684242][ T37] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 508.708474][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 508.728053][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 508.931674][T19859] bond8: entered promiscuous mode [ 508.988846][T19859] bond8: entered allmulticast mode [ 508.995443][T19859] 8021q: adding VLAN 0 to HW filter on device bond8 [ 509.066223][T19857] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.817158][T19945] __nla_validate_parse: 5 callbacks suppressed [ 510.817182][T19945] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4187'. [ 511.220443][T19952] netlink: 'syz.0.4190': attribute type 19 has an invalid length. [ 511.228475][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 511.251974][T19952] netlink: 'syz.0.4190': attribute type 19 has an invalid length. [ 511.252046][ T78] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.270286][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 511.305296][ T78] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.351647][ T78] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.375392][ T78] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.456859][T19965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4193'. [ 511.466789][T19967] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 511.474552][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 511.623155][T19967] tipc: Enabled bearer , priority 0 [ 511.645683][T19967] syzkaller0: entered promiscuous mode [ 511.651208][T19967] syzkaller0: entered allmulticast mode [ 511.705416][T19967] tipc: Resetting bearer [ 511.716031][T19966] tipc: Resetting bearer [ 511.773110][T19966] tipc: Disabling bearer [ 511.798845][T19978] syz_tun: entered allmulticast mode [ 511.806508][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'. [ 511.831619][T19975] syz_tun (unregistering): left allmulticast mode [ 512.781380][T20010] netlink: 'syz.0.4207': attribute type 10 has an invalid length. [ 512.995980][T20014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4209'. [ 513.407494][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4212'. [ 513.451389][T20022] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.545273][T20029] netlink: 'syz.2.4212': attribute type 1 has an invalid length. [ 513.626320][T20022] bridge_slave_1 (unregistering): left allmulticast mode [ 513.640955][T20036] IPv6: Can't replace route, no match found [ 513.654071][T20022] bridge_slave_1 (unregistering): left promiscuous mode [ 513.661382][T20035] IPv6: Can't replace route, no match found [ 513.669520][T20022] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.522357][T20066] netlink: 'syz.0.4224': attribute type 1 has an invalid length. [ 514.531551][T20066] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4224'. [ 514.664138][T20066] netlink: 'syz.0.4224': attribute type 2 has an invalid length. [ 514.687331][T20066] netlink: 'syz.0.4224': attribute type 1 has an invalid length. [ 514.919534][T20067] netlink: 'syz.0.4224': attribute type 1 has an invalid length. [ 514.928223][T20067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4224'. [ 514.938425][T20067] netlink: 'syz.0.4224': attribute type 2 has an invalid length. [ 514.946448][T20067] netlink: 'syz.0.4224': attribute type 1 has an invalid length. [ 515.414493][T19919] Set syz1 is full, maxelem 65536 reached [ 515.549003][T20095] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 515.560661][T20095] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 515.947630][T20115] __nla_validate_parse: 2 callbacks suppressed [ 515.947653][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 515.974794][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 516.327994][T20128] netlink: 'syz.4.4246': attribute type 1 has an invalid length. [ 516.382182][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4251'. [ 516.558056][T20136] bond9: (slave bridge2): making interface the new active one [ 516.593726][T20136] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 516.656880][T20151] netlink: 'syz.2.4257': attribute type 6 has an invalid length. [ 516.833412][T20164] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 516.989821][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 517.000454][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 517.019875][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 517.047402][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 517.240522][T20187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4267'. [ 517.258491][T20187] nbd: illegal input index 1048576 [ 517.670078][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4274'. [ 518.093019][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4280'. [ 518.444992][T20250] validate_nla: 2 callbacks suppressed [ 518.445013][T20250] netlink: 'syz.1.4285': attribute type 12 has an invalid length. [ 518.694933][T20261] 8021q: adding VLAN 0 to HW filter on device bond10 [ 519.358466][T20307] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.424942][T20300] bridge0: port 3(team0) entered disabled state [ 519.733001][T20300] team0 (unregistering): left allmulticast mode [ 519.740052][T20300] team_slave_0: left allmulticast mode [ 519.751588][T20300] team_slave_1: left allmulticast mode [ 519.758327][T20300] team0 (unregistering): left promiscuous mode [ 519.769719][T20300] team_slave_0: left promiscuous mode [ 519.776062][T20300] team_slave_1: left promiscuous mode [ 519.781667][T20300] bridge0: port 3(team0) entered disabled state [ 519.812577][T20300] team0 (unregistering): Port device team_slave_0 removed [ 519.826431][T20300] team0 (unregistering): Port device team_slave_1 removed [ 520.297931][T20359] netlink: 'syz.0.4315': attribute type 6 has an invalid length. [ 520.446878][T20363] 8021q: adding VLAN 0 to HW filter on device bond11 [ 521.033163][T20406] tipc: Enabled bearer , priority 10 [ 521.139166][T20414] __nla_validate_parse: 5 callbacks suppressed [ 521.139188][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4331'. [ 521.178557][T20414] netlink: 'syz.2.4331': attribute type 10 has an invalid length. [ 521.236544][T20417] 8021q: adding VLAN 0 to HW filter on device bond12 [ 521.473019][T20427] netlink: 'syz.4.4336': attribute type 16 has an invalid length. [ 521.483066][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4336'. [ 521.549222][T20438] IPVS: Error connecting to the multicast addr [ 521.663681][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4340'. [ 521.760009][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4340'. [ 521.774982][T20454] vxcan1: entered promiscuous mode [ 521.780337][T20454] vxcan1: entered allmulticast mode [ 522.233517][T20469] 8021q: adding VLAN 0 to HW filter on device bond12 [ 522.258319][T20474] netlink: 'syz.3.4350': attribute type 25 has an invalid length. [ 522.308086][T20475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4350'. [ 522.321092][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4350'. [ 522.460839][T20483] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 522.484418][T20483] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4352'. [ 522.511698][T20483] block nbd1: not configured, cannot reconfigure [ 523.027513][T20509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4360'. [ 523.091764][T20502] netlink: 'syz.1.4358': attribute type 16 has an invalid length. [ 523.123270][T20502] netlink: 'syz.1.4358': attribute type 17 has an invalid length. [ 523.160709][T20514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4362'. [ 523.176213][T20510] 8021q: adding VLAN 0 to HW filter on device bond13 [ 523.203616][T20502] gretap0: left promiscuous mode [ 523.250990][T20502] erspan0: left allmulticast mode [ 523.268582][T20502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.365960][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4365'. [ 523.390943][T20520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.567854][T20529] netlink: 'syz.0.4366': attribute type 21 has an invalid length. [ 523.686791][T20536] netlink: 'syz.2.4369': attribute type 39 has an invalid length. [ 523.755495][T20544] netlink: 'syz.4.4371': attribute type 33 has an invalid length. [ 523.897304][T20553] netlink: 'syz.3.4373': attribute type 10 has an invalid length. [ 523.908148][T20548] tipc: Enabled bearer , priority 0 [ 523.925441][T20548] syzkaller0: entered promiscuous mode [ 523.939561][T20548] syzkaller0: entered allmulticast mode [ 524.075944][T20553] team0: Port device geneve0 added [ 524.379377][T20560] 8021q: adding VLAN 0 to HW filter on device bond11 [ 524.404902][T20548] tipc: Resetting bearer [ 524.478134][T20534] tipc: Resetting bearer [ 524.545173][T20534] tipc: Disabling bearer [ 524.564680][T20580] tipc: Can't bind to reserved service type 0 [ 524.895918][T20594] netlink: 'syz.3.4384': attribute type 1 has an invalid length. [ 524.903780][T20594] netlink: 'syz.3.4384': attribute type 2 has an invalid length. [ 524.953518][T20593] scsi_nl_rcv_msg: discarding partial skb [ 525.583504][T20611] lo: entered promiscuous mode [ 525.619937][T20611] netlink: 'syz.4.4389': attribute type 2 has an invalid length. [ 525.658108][T20611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.931659][T20623] netlink: 'syz.3.4394': attribute type 16 has an invalid length. [ 526.222973][T20654] netlink: 'syz.3.4403': attribute type 4 has an invalid length. [ 526.232883][T20654] __nla_validate_parse: 11 callbacks suppressed [ 526.232903][T20654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4403'. [ 526.301332][T20654] xfrm1: entered promiscuous mode [ 526.307454][T20654] xfrm1: entered allmulticast mode [ 526.455639][T20654] bond12: entered allmulticast mode [ 526.475007][T20654] 8021q: adding VLAN 0 to HW filter on device bond12 [ 526.496634][T20654] bridge0: port 2(bond12) entered blocking state [ 526.510907][T20654] bridge0: port 2(bond12) entered disabled state [ 526.524201][T20654] bond12: entered promiscuous mode [ 526.530450][T20654] bridge0: port 2(bond12) entered blocking state [ 526.537000][T20654] bridge0: port 2(bond12) entered forwarding state [ 526.577363][ T12] bridge0: port 2(bond12) entered disabled state [ 526.588562][T20678] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 526.749949][T20687] netlink: 'syz.4.4411': attribute type 21 has an invalid length. [ 527.102519][T20700] macvlan2: entered promiscuous mode [ 527.112904][T20700] macvlan2: entered allmulticast mode [ 527.119931][T20700] veth1_to_bond: entered promiscuous mode [ 527.129332][T20700] veth1_to_bond: entered allmulticast mode [ 527.140455][T20700] team0: Port device macvlan2 added [ 527.969575][T20754] IPVS: Error connecting to the multicast addr [ 528.066634][T20757] tipc: Enabling of bearer rejected, failed to enable media [ 528.110492][T20761] IPVS: Unknown mcast interface: nicvf0 [ 528.120180][T20764] openvswitch: netlink: Missing key (keys=40, expected=100) [ 528.149988][T20765] sock: sock_set_timeout: `syz.2.4436' (pid 20765) tries to set negative timeout [ 528.172226][T20767] openvswitch: netlink: Missing key (keys=40, expected=100) [ 528.320338][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4440'. [ 528.352771][T20775] erspan0: entered allmulticast mode [ 528.382552][T20770] tipc: Cannot configure node identity twice [ 528.681009][T20796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4447'. [ 528.711191][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4447'. [ 528.901786][T20808] validate_nla: 2 callbacks suppressed [ 528.901808][T20808] netlink: 'syz.3.4451': attribute type 21 has an invalid length. [ 528.932196][T20807] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 528.946682][T20808] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4451'. [ 528.965240][T20807] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 529.323697][T20827] tipc: Enabled bearer , priority 0 [ 529.353074][T20827] syzkaller0: entered promiscuous mode [ 529.383649][T20827] syzkaller0: entered allmulticast mode [ 529.451420][T20827] tipc: Resetting bearer [ 529.467114][T20836] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 529.486144][T20827] nbd: nbd0 already in use [ 529.509019][T20836] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 529.538854][T20819] tipc: Resetting bearer [ 529.574125][T20840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4461'. [ 529.591289][T20819] tipc: Disabling bearer [ 529.798454][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4466'. [ 529.863268][T20853] bond11: entered promiscuous mode [ 529.869266][T20853] bond11: entered allmulticast mode [ 529.881872][T20853] 8021q: adding VLAN 0 to HW filter on device bond11 [ 530.687607][T20903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4480'. [ 530.975384][T20910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4482'. [ 531.064429][T20917] netlink: 'syz.0.4486': attribute type 1 has an invalid length. [ 531.095327][T20917] netlink: 'syz.0.4486': attribute type 3 has an invalid length. [ 531.112386][T20917] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4486'. [ 531.142070][T20917] NCSI netlink: No device for ifindex 131080 [ 531.144374][T20910] bond13: entered promiscuous mode [ 531.153468][T20910] bond13: entered allmulticast mode [ 531.174914][T20910] 8021q: adding VLAN 0 to HW filter on device bond13 [ 531.413062][T20937] netlink: 'syz.1.4489': attribute type 6 has an invalid length. [ 531.530942][T20944] netlink: 'syz.3.4493': attribute type 21 has an invalid length. [ 531.571322][T20950] veth0: entered promiscuous mode [ 531.648860][T20932] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 531.789314][T20935] veth0: left promiscuous mode [ 531.913500][T20959] 8021q: adding VLAN 0 to HW filter on device bond13 [ 532.129486][T20967] smc: net device erspan0 applied user defined pnetid SYZ0 [ 532.358579][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4500'. [ 532.371916][T20973] IPVS: set_ctl: invalid protocol: 255 172.30.1.1:20000 [ 532.387596][T20970] openvswitch: netlink: Flow key attribute not present in set flow. [ 532.405101][T20970] openvswitch: netlink: Message has 4 unknown bytes. [ 532.419609][T20970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.462845][T20972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4500'. [ 532.703050][T20986] bond12: entered promiscuous mode [ 532.727008][T20986] bond12: entered allmulticast mode [ 532.743508][T20986] 8021q: adding VLAN 0 to HW filter on device bond12 [ 532.797008][T20989] 8021q: adding VLAN 0 to HW filter on device bond12 [ 533.086518][T21012] netlink: 'syz.2.4514': attribute type 1 has an invalid length. [ 533.254881][T21019] netlink: 'syz.4.4518': attribute type 39 has an invalid length. [ 533.379037][T21029] 8021q: adding VLAN 0 to HW filter on device bond13 [ 533.479841][T21037] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 533.619700][T21036] bond14: entered promiscuous mode [ 533.625596][T21036] bond14: entered allmulticast mode [ 533.635548][T21036] 8021q: adding VLAN 0 to HW filter on device bond14 [ 533.808638][T21059] syzkaller1: entered promiscuous mode [ 533.814981][T21059] syzkaller1: entered allmulticast mode [ 534.280177][T21080] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.403696][T21087] tipc: New replicast peer: 255.255.255.255 [ 534.414450][T21087] tipc: Enabled bearer , priority 10 [ 534.476285][T21089] netlink: ct family unspecified [ 534.491714][T21089] openvswitch: netlink: Actions may not be safe on all matching packets [ 534.608753][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.620221][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.632742][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.641014][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.652105][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.672376][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.721005][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.733019][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.742091][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.753548][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.761369][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.792905][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.801320][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.814050][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.814619][T21107] netlink: 412 bytes leftover after parsing attributes in process `syz.4.4548'. [ 534.820618][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.845370][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.850341][T21107] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 534.852167][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.872851][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.879585][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.895362][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.901917][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.924631][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.931472][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.945293][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.951859][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.966554][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.981889][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.990207][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.006466][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.013025][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.023845][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.033498][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.043311][T21101] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.059753][T21116] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.251746][T21124] tipc: Enabling of bearer rejected, already enabled [ 535.454494][T21139] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4561'. [ 535.467089][T21138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.536087][ T5864] tipc: Node number set to 2817694582 [ 535.662594][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4564'. [ 535.693286][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4564'. [ 535.722802][T21145] bond13: entered promiscuous mode [ 535.734171][T21145] bond13: entered allmulticast mode [ 535.749374][T21145] 8021q: adding VLAN 0 to HW filter on device bond13 [ 536.539313][T21190] openvswitch: netlink: EtherType 257 is less than min 600 [ 536.649899][T21195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4577'. [ 536.727169][T21198] 8021q: adding VLAN 0 to HW filter on device bond15 [ 537.159872][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'. [ 537.159872][T21228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'. [ 537.460197][T21245] 8021q: adding VLAN 0 to HW filter on device bond16 [ 538.123409][T21280] 8021q: adding VLAN 0 to HW filter on device bond14 [ 538.619672][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.633096][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.675041][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.698663][T21322] bond14: entered promiscuous mode [ 538.707183][T21322] bond14: entered allmulticast mode [ 538.712903][T21322] 8021q: adding VLAN 0 to HW filter on device bond14 [ 538.713221][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.772952][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4621'. [ 538.783699][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.815120][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.853189][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.931734][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 538.957085][T21320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4620'. [ 539.312981][T21352] sctp: [Deprecated]: syz.3.4629 (pid 21352) Use of int in max_burst socket option deprecated. [ 539.312981][T21352] Use struct sctp_assoc_value instead [ 539.454998][T21365] tipc: Enabled bearer , priority 0 [ 539.465007][T21365] syzkaller0: entered promiscuous mode [ 539.477523][T21365] syzkaller0: entered allmulticast mode [ 539.521859][T21366] 8021q: adding VLAN 0 to HW filter on device bond14 [ 539.547912][T21365] tipc: Resetting bearer [ 539.587217][T21363] tipc: Resetting bearer [ 539.623424][T21363] tipc: Disabling bearer [ 540.149764][T21394] lo speed is unknown, defaulting to 1000 [ 540.467739][T21411] netlink: 'syz.2.4647': attribute type 1 has an invalid length. [ 540.621840][T21416] openvswitch: netlink: Key type 29 is not supported [ 540.644990][T21416] openvswitch: netlink: Actions may not be safe on all matching packets [ 540.664799][T21420] netlink: 'syz.1.4651': attribute type 21 has an invalid length. [ 540.672760][T21420] netlink: 'syz.1.4651': attribute type 4 has an invalid length. [ 540.700213][T21420] netlink: 'syz.1.4651': attribute type 5 has an invalid length. [ 540.783073][T21422] netlink: 'syz.0.4652': attribute type 10 has an invalid length. [ 540.803536][T21422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.855293][T21422] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 541.353174][T21435] bond17: entered promiscuous mode [ 541.358880][T21435] bond17: entered allmulticast mode [ 541.365907][T21435] 8021q: adding VLAN 0 to HW filter on device bond17 [ 541.387659][T21437] netlink: 'syz.3.4657': attribute type 2 has an invalid length. [ 541.454795][T21394] syzkaller0 speed is unknown, defaulting to 1000 [ 541.512217][T21394] lo speed is unknown, defaulting to 1000 [ 541.654880][T21455] netlink: 'syz.2.4659': attribute type 11 has an invalid length. [ 542.371226][T21475] netlink: 'syz.3.4666': attribute type 29 has an invalid length. [ 542.456489][T21483] 8021q: adding VLAN 0 to HW filter on device bond14 [ 542.465047][T21475] netlink: 'syz.3.4666': attribute type 29 has an invalid length. [ 542.583474][ T30] audit: type=1800 audit(1755642817.010:7): pid=21488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4672" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1753 res=0 errno=0 [ 542.671769][T21497] netlink: 'syz.3.4674': attribute type 1 has an invalid length. [ 543.213796][T21530] 8021q: adding VLAN 0 to HW filter on device bond18 [ 543.261799][T21534] tipc: Enabled bearer , priority 0 [ 543.288965][T21534] syzkaller0: entered promiscuous mode [ 543.298927][T21534] syzkaller0: entered allmulticast mode [ 543.347880][T21534] tipc: Resetting bearer [ 543.369746][T21533] tipc: Resetting bearer [ 543.401595][T21533] tipc: Disabling bearer [ 543.620763][T21553] Unsupported ieee802154 address type: 0 [ 543.837375][T21568] __nla_validate_parse: 46 callbacks suppressed [ 543.837397][T21568] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4694'. [ 544.248737][T21592] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4701'. [ 544.264508][T21592] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4701'. [ 544.347030][T21595] dvmrp1: entered allmulticast mode [ 544.412301][T21581] infiniband syz!: set active [ 544.417195][T21581] infiniband syz!: added team_slave_0 [ 544.479074][T21581] RDS/IB: syz!: added [ 544.483196][T21581] smc: adding ib device syz! with port count 1 [ 544.490161][T21581] smc: ib device syz! port 1 has pnetid [ 544.701279][T21609] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 545.060937][T21614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4707'. [ 545.340734][T21623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4711'. [ 545.353361][T21623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4711'. [ 545.371542][T21623] erspan0: entered promiscuous mode [ 545.379172][T21623] erspan0: left promiscuous mode [ 545.551905][T21626] 8021q: adding VLAN 0 to HW filter on device bond15 [ 546.082867][T21632] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4714'. [ 546.501979][T21635] openvswitch: netlink: Duplicate or invalid key (type 0). [ 546.516885][T21635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.693653][T21645] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4718'. [ 546.703144][T21645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.811232][T21650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4720'. [ 546.822433][T21653] validate_nla: 4 callbacks suppressed [ 546.822452][T21653] netlink: 'syz.0.4721': attribute type 1 has an invalid length. [ 546.907097][T21653] netlink: 'syz.0.4721': attribute type 4 has an invalid length. [ 546.916880][T21653] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4721'. [ 547.085909][T21658] 8021q: adding VLAN 0 to HW filter on device bond15 [ 547.207559][T21677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.467204][T21689] tipc: Enabled bearer , priority 0 [ 547.518886][T21687] bond15: entered promiscuous mode [ 547.524162][T21687] bond15: entered allmulticast mode [ 547.529966][T21687] 8021q: adding VLAN 0 to HW filter on device bond15 [ 547.545379][T21700] tipc: Resetting bearer [ 547.552000][T21702] netlink: 'syz.3.4736': attribute type 10 has an invalid length. [ 547.581399][T21689] syzkaller0: entered promiscuous mode [ 547.593617][T21689] syzkaller0: entered allmulticast mode [ 547.691788][T21688] tipc: Resetting bearer [ 547.855518][T21688] tipc: Disabling bearer [ 548.045719][T21728] tipc: Enabled bearer , priority 0 [ 548.075657][T21734] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.151110][T21728] tipc: Disabling bearer [ 548.407787][T21747] bond16: entered promiscuous mode [ 548.413114][T21747] bond16: entered allmulticast mode [ 548.419094][T21747] 8021q: adding VLAN 0 to HW filter on device bond16 [ 548.441180][T21753] tipc: Enabled bearer , priority 0 [ 548.453157][T21752] tipc: Enabling of bearer rejected, already enabled [ 548.483858][T21752] syzkaller0: entered promiscuous mode [ 548.489576][T21752] syzkaller0: entered allmulticast mode [ 548.509087][T21753] tipc: Resetting bearer [ 548.530087][T21750] tipc: Resetting bearer [ 548.585500][T21750] tipc: Disabling bearer [ 548.780435][T21773] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.849377][T21775] __nla_validate_parse: 18 callbacks suppressed [ 548.849398][T21775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4756'. [ 549.225566][T21800] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4761'. [ 549.482292][T21799] bond16: entered promiscuous mode [ 549.500015][T21799] bond16: entered allmulticast mode [ 549.540083][T21799] 8021q: adding VLAN 0 to HW filter on device bond16 [ 549.566821][T21807] netlink: 'syz.0.4767': attribute type 10 has an invalid length. [ 549.576720][T21809] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 549.625566][T21809] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 549.627238][T21823] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4767'. [ 549.723484][T21814] bond0: (slave batadv0): Releasing backup interface [ 549.744657][T21814] bridge_slave_0: left allmulticast mode [ 549.750469][T21814] bridge_slave_0: left promiscuous mode [ 549.759012][T21814] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.766499][T21825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4768'. [ 549.781105][T21814] bridge_slave_1: left allmulticast mode [ 549.790057][T21814] bridge_slave_1: left promiscuous mode [ 549.799132][T21814] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.834877][T21814] bond0: (slave bond_slave_0): Releasing backup interface [ 549.867019][T21814] bond0: (slave bond_slave_1): Releasing backup interface [ 549.900098][T21814] team0: Port device team_slave_0 removed [ 549.910641][T21829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.913403][T21814] team0: Port device team_slave_1 removed [ 549.917943][T21829] IPv6: NLM_F_CREATE should be set when creating new route [ 549.925389][T21814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.944197][T21814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.980011][T21814] team0: Port device bond1 removed [ 549.999236][T21814] bond9: (slave bridge3): Releasing active interface [ 550.400865][T21850] netlink: zone id is out of range [ 550.441944][T21827] team0 (unregistering): Port device team_slave_0 removed [ 550.457922][T21827] team0 (unregistering): Port device team_slave_1 removed [ 550.500316][T21833] lo: left promiscuous mode [ 550.505878][T21833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.646536][T21853] 8021q: adding VLAN 0 to HW filter on device bond16 [ 550.657693][T21862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4778'. [ 550.952838][T21880] FAULT_INJECTION: forcing a failure. [ 550.952838][T21880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.004868][T21880] CPU: 1 UID: 0 PID: 21880 Comm: syz.1.4781 Not tainted syzkaller #0 PREEMPT(full) [ 551.004900][T21880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.004915][T21880] Call Trace: [ 551.004923][T21880] [ 551.004933][T21880] dump_stack_lvl+0x189/0x250 [ 551.004965][T21880] ? __pfx____ratelimit+0x10/0x10 [ 551.004995][T21880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.005020][T21880] ? __pfx__printk+0x10/0x10 [ 551.005051][T21880] ? __might_fault+0xb0/0x130 [ 551.005094][T21880] should_fail_ex+0x414/0x560 [ 551.005128][T21880] _copy_from_user+0x2d/0xb0 [ 551.005154][T21880] ___sys_recvmsg+0x12e/0x510 [ 551.005185][T21880] ? __pfx____sys_recvmsg+0x10/0x10 [ 551.005235][T21880] ? __fget_files+0x3a0/0x420 [ 551.005280][T21880] do_recvmmsg+0x307/0x770 [ 551.005313][T21880] ? __pfx_do_recvmmsg+0x10/0x10 [ 551.005351][T21880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 551.005412][T21880] __x64_sys_recvmmsg+0x190/0x240 [ 551.005440][T21880] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 551.005461][T21880] ? rcu_is_watching+0x15/0xb0 [ 551.005489][T21880] ? do_syscall_64+0xbe/0x3b0 [ 551.005525][T21880] do_syscall_64+0xfa/0x3b0 [ 551.005554][T21880] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.005583][T21880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.005604][T21880] ? clear_bhb_loop+0x60/0xb0 [ 551.005631][T21880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.005651][T21880] RIP: 0033:0x7f61b278ebe9 [ 551.005671][T21880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.005691][T21880] RSP: 002b:00007f61b35fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 551.005716][T21880] RAX: ffffffffffffffda RBX: 00007f61b29b5fa0 RCX: 00007f61b278ebe9 [ 551.005731][T21880] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 551.005745][T21880] RBP: 00007f61b35fc090 R08: 0000000000000000 R09: 0000000000000000 [ 551.005758][T21880] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000001 [ 551.005771][T21880] R13: 00007f61b29b6038 R14: 00007f61b29b5fa0 R15: 00007fff13c4f1f8 [ 551.005806][T21880] [ 551.233090][T21882] netlink: 'syz.4.4783': attribute type 10 has an invalid length. [ 551.244187][T21882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.263813][T21882] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 551.499356][T21890] geneve1: mtu less than device minimum [ 551.535110][T21890] geneve1: mtu less than device minimum [ 551.566575][T21890] geneve1: mtu less than device minimum [ 551.572305][T21890] geneve1: mtu less than device minimum [ 551.594831][T21890] geneve1: mtu less than device minimum [ 551.615847][T21890] geneve1: mtu less than device minimum [ 551.632094][T21890] geneve1: mtu less than device minimum [ 551.654028][T21890] geneve1: mtu less than device minimum [ 551.659737][T21890] geneve1: mtu less than device minimum [ 551.685718][T21890] geneve1: mtu less than device minimum [ 551.691516][T21890] geneve1: mtu less than device minimum [ 551.871256][T21920] netlink: 'syz.0.4794': attribute type 1 has an invalid length. [ 551.892991][T21920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4794'. [ 551.912342][T21922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.522176][T21955] veth0: entered promiscuous mode [ 552.545732][T21955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4807'. [ 553.042353][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4810'. [ 553.230454][T21978] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.4812'. [ 553.545088][T21996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4816'. [ 554.013739][T22024] Bluetooth: MGMT ver 1.23 [ 554.169045][T22033] netlink: 'syz.3.4829': attribute type 4 has an invalid length. [ 554.196235][T22028] bond17 (unregistering): Released all slaves [ 554.346372][T22039] netlink: 'syz.0.4831': attribute type 21 has an invalid length. [ 554.414896][T22039] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 554.663864][T22059] netlink: 'syz.2.4836': attribute type 10 has an invalid length. [ 554.694993][T22059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.724655][T22059] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 554.848706][T22068] syzkaller1: entered promiscuous mode [ 554.877125][T22068] syzkaller1: entered allmulticast mode [ 554.954740][T22074] netlink: 'syz.2.4841': attribute type 1 has an invalid length. [ 554.965963][T22073] 8021q: adding VLAN 0 to HW filter on device bond17 [ 554.973862][T22074] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4841'. [ 554.983883][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4841'. [ 555.058714][T22080] netlink: 'syz.2.4841': attribute type 4 has an invalid length. [ 555.360234][T22092] bond20: entered promiscuous mode [ 555.367219][T22092] bond20: entered allmulticast mode [ 555.373157][T22092] 8021q: adding VLAN 0 to HW filter on device bond20 [ 555.441701][T22104] netlink: 'syz.4.4851': attribute type 10 has an invalid length. [ 555.492909][T22106] tipc: Enabled bearer , priority 10 [ 555.801813][T22112] 8021q: adding VLAN 0 to HW filter on device bond17 [ 555.935643][T22119] netlink: 'syz.0.4858': attribute type 1 has an invalid length. [ 556.005465][T22123] can: request_module (can-proto-0) failed. [ 556.029558][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'. [ 556.061675][T22133] netlink: 'syz.1.4862': attribute type 5 has an invalid length. [ 556.063527][T22128] lo: entered allmulticast mode [ 556.078036][T22131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4858'. [ 556.087712][T22128] lo: left allmulticast mode [ 556.105902][T22136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4862'. [ 556.123711][T22135] netlink: 'syz.3.4863': attribute type 10 has an invalid length. [ 556.350759][T22143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4864'. [ 556.418374][T22142] bond18: entered promiscuous mode [ 556.432752][T22142] bond18: entered allmulticast mode [ 556.439410][T22142] 8021q: adding VLAN 0 to HW filter on device bond18 [ 556.912629][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4877'. [ 556.912699][T22178] net_ratelimit: 24 callbacks suppressed [ 556.912717][T22178] netlink: zone id is out of range [ 556.976186][T22185] syzkaller0: entered promiscuous mode [ 556.995599][T22185] syzkaller0: entered allmulticast mode [ 557.000237][T22170] IPVS: persistence engine module ip_vs_pe_À not found [ 557.009278][T22178] netlink: zone id is out of range [ 557.030535][T22178] netlink: zone id is out of range [ 557.061028][T22178] netlink: zone id is out of range [ 557.068817][T22178] netlink: zone id is out of range [ 557.079631][T22178] netlink: zone id is out of range [ 557.091081][T22178] netlink: zone id is out of range [ 557.124816][T22178] netlink: zone id is out of range [ 557.131071][T22178] netlink: zone id is out of range [ 557.136468][T22178] netlink: zone id is out of range [ 557.439490][T22203] IPVS: length: 157 != 24 [ 558.077371][T22250] netlink: 'syz.2.4893': attribute type 1 has an invalid length. [ 558.114160][T22250] netlink: 'syz.2.4893': attribute type 10 has an invalid length. [ 558.122183][T22250] netlink: 'syz.2.4893': attribute type 4 has an invalid length. [ 558.137393][T22251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4893'. [ 558.144160][T22250] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4893'. [ 558.270208][T22256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4893'. [ 558.863772][T22284] netlink: 'syz.4.4905': attribute type 4 has an invalid length. [ 558.905157][T22289] smc: net device erspan0 erased user defined pnetid SYZ0 [ 559.151431][T22299] netlink: 'syz.4.4909': attribute type 33 has an invalid length. [ 559.388100][T22308] tipc: Enabled bearer , priority 0 [ 559.399459][T22308] syzkaller0: entered promiscuous mode [ 559.405066][T22308] syzkaller0: entered allmulticast mode [ 559.421079][T22301] tipc: Resetting bearer [ 559.443056][T22310] netlink: 'syz.1.4914': attribute type 5 has an invalid length. [ 559.480281][T22301] tipc: Disabling bearer [ 559.882456][T22342] netlink: 'syz.2.4922': attribute type 13 has an invalid length. [ 560.050679][T22345] __nla_validate_parse: 4 callbacks suppressed [ 560.050702][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4923'. [ 560.123066][T22347] netlink: 'syz.4.4924': attribute type 10 has an invalid length. [ 560.282806][T22355] syzkaller1: entered promiscuous mode [ 560.291349][T22358] IPVS: length: 157 != 24 [ 560.299367][T22355] syzkaller1: entered allmulticast mode [ 560.383136][T22364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4931'. [ 560.521988][T22380] netlink: 'syz.2.4933': attribute type 1 has an invalid length. [ 560.533815][T22380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4933'. [ 560.622884][T22383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4934'. [ 560.792105][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4937'. [ 560.802952][T22395] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 560.838928][T22395] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 561.453154][T22432] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4947'. [ 561.533616][T22440] netlink: 'syz.4.4951': attribute type 10 has an invalid length. [ 562.274987][T22481] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4965'. [ 562.771987][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4968'. [ 562.800269][T22516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4968'. [ 563.290488][T22533] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4976'. [ 563.453491][T22542] IPVS: set_ctl: invalid protocol: 47 172.20.20.17:20004 [ 563.860080][T22569] validate_nla: 3 callbacks suppressed [ 563.860101][T22569] netlink: 'syz.0.4988': attribute type 10 has an invalid length. [ 563.892736][T22569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.931781][T22569] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 564.087952][T22583] net_ratelimit: 2 callbacks suppressed [ 564.087975][T22583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.460884][T22606] netlink: 'syz.1.4999': attribute type 1 has an invalid length. [ 564.513512][T22606] bond19: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 564.549354][T22606] veth5: entered promiscuous mode [ 564.566356][T22606] bond19: (slave veth5): Enslaving as a backup interface with a down link [ 564.586860][T12464] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 564.590195][T22606] 8021q: adding VLAN 0 to HW filter on device bond19 [ 564.785085][T12464] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 564.789757][T22622] netlink: 'syz.1.5003': attribute type 10 has an invalid length. [ 564.948429][T22625] netlink: 'syz.1.5005': attribute type 1 has an invalid length. [ 564.959030][T22625] netlink: 'syz.1.5005': attribute type 2 has an invalid length. [ 565.019270][T22628] xt_limit: Overflow, try lower: 604147548/4200216962 [ 565.204845][T22638] __nla_validate_parse: 8 callbacks suppressed [ 565.204866][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 565.275314][T22640] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5009'. [ 565.544706][T22651] dvmrp0: entered allmulticast mode [ 565.552569][T22651] dvmrp0: left allmulticast mode [ 565.746850][T22659] netlink: 'syz.4.5015': attribute type 10 has an invalid length. [ 565.780198][T22661] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5016'. [ 565.977206][T22670] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5017'. [ 566.027685][T22673] netlink: 'syz.3.5020': attribute type 11 has an invalid length. [ 566.186004][T22681] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5022'. [ 566.219615][T22681] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5022'. [ 566.248637][T22681] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5022'. [ 566.363305][T22685] 8021q: adding VLAN 0 to HW filter on device bond20 [ 566.392768][T22688] netlink: 'syz.4.5025': attribute type 4 has an invalid length. [ 566.402721][T22691] netlink: 'syz.0.5026': attribute type 8 has an invalid length. [ 566.467237][T22688] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5025'. [ 566.477237][T22688] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5025'. [ 566.626613][T22701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5029'. [ 566.754964][T22696] bond18: entered promiscuous mode [ 566.760250][T22696] bond18: entered allmulticast mode [ 566.766262][T22696] 8021q: adding VLAN 0 to HW filter on device bond18 [ 567.101370][T22728] netlink: 'syz.3.5038': attribute type 6 has an invalid length. [ 567.189762][T22730] 8021q: adding VLAN 0 to HW filter on device bond21 [ 567.470387][T22743] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 567.618063][T22749] bond22: entered promiscuous mode [ 567.623453][T22749] bond22: entered allmulticast mode [ 567.629550][T22749] 8021q: adding VLAN 0 to HW filter on device bond22 [ 568.048370][T22780] 8021q: adding VLAN 0 to HW filter on device bond21 [ 568.500008][T22808] `: renamed from bond0 (while UP) [ 568.621648][T22816] lo: entered promiscuous mode [ 568.629156][T22816] lo: entered allmulticast mode [ 568.645916][T22816] tunl0: entered promiscuous mode [ 568.664454][T22816] tunl0: entered allmulticast mode [ 568.673563][T22816] gre0: entered promiscuous mode [ 568.707778][T22816] gre0: entered allmulticast mode [ 568.722201][T22816] gretap0: entered allmulticast mode [ 568.739288][T22816] gretap0: refused to change device tx_queue_len [ 568.751913][T22816] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 568.788047][T22831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.856140][T22824] 8021q: adding VLAN 0 to HW filter on device bond23 [ 569.448951][T22852] bond22: (slave geneve2): Enslaving as an active interface with an up link [ 569.476815][T22861] validate_nla: 8 callbacks suppressed [ 569.476833][T22861] netlink: 'syz.4.5073': attribute type 10 has an invalid length. [ 569.495027][T22850] sch_fq: defrate 0 ignored. [ 569.525704][T22853] syzkaller1: entered promiscuous mode [ 569.550971][T22853] syzkaller1: entered allmulticast mode [ 569.566176][ T1330] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.614318][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.718581][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.745968][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.946563][T22884] netlink: 'syz.1.5081': attribute type 1 has an invalid length. [ 570.248686][T22884] 8021q: adding VLAN 0 to HW filter on device bond24 [ 570.257224][T22898] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 570.349327][T22904] syzkaller1: entered allmulticast mode [ 570.487164][T22911] __nla_validate_parse: 10 callbacks suppressed [ 570.487184][T22911] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5087'. [ 570.512261][T22909] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5086'. [ 570.647263][T22911] bond0: entered promiscuous mode [ 570.664679][T22911] bond0: entered allmulticast mode [ 570.671936][T22911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.977535][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5095'. [ 571.108832][T22941] tipc: Enabled bearer , priority 0 [ 571.121235][T22941] syzkaller0: entered promiscuous mode [ 571.126885][T22941] syzkaller0: entered allmulticast mode [ 571.163657][T22941] tipc: Resetting bearer [ 571.192796][T22940] tipc: Resetting bearer [ 571.220842][T22940] tipc: Disabling bearer [ 571.361008][T22956] tc_dump_action: action bad kind [ 571.508696][T22964] netlink: 'syz.1.5105': attribute type 1 has an invalid length. [ 571.575806][T22963] 8021q: adding VLAN 0 to HW filter on device bond23 [ 571.670224][T22973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5108'. [ 571.756230][T22975] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5109'. [ 571.814954][T22980] netlink: 'syz.1.5110': attribute type 24 has an invalid length. [ 571.970297][T22985] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 572.713407][T23033] net veth1_virt_wifi .: renamed from virt_wifi0 [ 573.222910][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 573.241870][T23056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5134'. [ 573.668370][T23082] syzkaller1: entered promiscuous mode [ 573.685646][T23086] netlink: 'syz.3.5141': attribute type 1 has an invalid length. [ 573.693524][T23082] syzkaller1: entered allmulticast mode [ 573.715306][T23084] netlink: 'syz.2.5143': attribute type 10 has an invalid length. [ 573.745660][T23090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5141'. [ 573.917205][T23092] 8021q: adding VLAN 0 to HW filter on device bond15 [ 574.325186][T23119] netlink: 'syz.1.5155': attribute type 29 has an invalid length. [ 574.343438][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 574.365194][T23119] netlink: 'syz.1.5155': attribute type 29 has an invalid length. [ 574.373160][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5155'. [ 574.454530][T23114] syz.4.5153 (23114) used greatest stack depth: 17864 bytes left [ 574.647788][T23125] 8021q: adding VLAN 0 to HW filter on device bond25 [ 574.675474][T23129] netlink: 'syz.4.5158': attribute type 10 has an invalid length. [ 574.738435][T23131] netlink: 'syz.0.5159': attribute type 10 has an invalid length. [ 574.748186][T23131] veth0_vlan: entered allmulticast mode [ 574.768423][T23131] veth0_vlan: left promiscuous mode [ 574.775231][T23131] veth0_vlan: entered promiscuous mode [ 574.783516][T23131] team0: Device veth0_vlan failed to register rx_handler [ 575.022935][T23146] netlink: 'syz.1.5161': attribute type 2 has an invalid length. [ 575.040775][T23147] Bluetooth: MGMT ver 1.23 [ 575.475947][T23168] netlink: 'syz.1.5173': attribute type 10 has an invalid length. [ 575.798044][T23176] syzkaller1: entered promiscuous mode [ 575.803766][T23176] syzkaller1: entered allmulticast mode [ 575.982198][T23181] __nla_validate_parse: 1 callbacks suppressed [ 575.982219][T23181] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5175'. [ 576.199602][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'. [ 576.210114][T23204] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 576.217539][T23204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.252810][T23208] tipc: Enabled bearer , priority 0 [ 576.329546][T23208] tipc: Disabling bearer [ 576.378709][T23215] netlink: 'syz.2.5185': attribute type 10 has an invalid length. [ 576.508972][T23218] 8021q: adding VLAN 0 to HW filter on device bond20 [ 576.542671][T23219] syzkaller0: entered promiscuous mode [ 576.556707][T23219] syzkaller0: entered allmulticast mode [ 577.130479][T23254] netlink: 'syz.3.5198': attribute type 10 has an invalid length. [ 577.196147][T23258] 8021q: adding VLAN 0 to HW filter on device bond18 [ 577.303607][T23263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.433125][T23271] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 577.707996][T23291] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5208'. [ 577.734801][T23291] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5208'. [ 577.933621][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 577.971596][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 578.010836][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5210'. [ 578.101247][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 578.145012][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 578.261774][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5215'. [ 578.840354][T23341] 8021q: adding VLAN 0 to HW filter on device bond24 [ 578.948923][T23355] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 579.009318][T23355] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 579.034154][T23355] gretap2: entered promiscuous mode [ 579.044750][T23355] gretap2: entered allmulticast mode [ 579.394911][ T30] audit: type=1107 audit(1755642853.800:8): pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='³i&àÒi;ú£„…¼' [ 579.524788][T23382] syzkaller0: entered promiscuous mode [ 579.530323][T23382] syzkaller0: entered allmulticast mode [ 579.537488][T23387] netlink: 'syz.0.5237': attribute type 5 has an invalid length. [ 579.560112][T23382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 580.811090][T23460] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 580.874298][T23460] tipc: Enabling of bearer rejected, failed to enable media [ 581.018103][T23475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.025692][T23475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.059540][T23475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.084483][T23475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.185316][T23475] `: (slave batadv0): Releasing backup interface [ 581.320740][T23483] 8021q: adding VLAN 0 to HW filter on device bond21 [ 581.453252][T23497] __nla_validate_parse: 7 callbacks suppressed [ 581.453273][T23497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5273'. [ 581.696142][T23510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5277'. [ 581.761613][T23514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5277'. [ 582.017680][T23512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5278'. [ 582.133679][T23516] netlink: 'syz.4.5279': attribute type 4 has an invalid length. [ 582.510118][T23536] tipc: Enabling of bearer rejected, failed to enable media [ 582.718984][T23557] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5289'. [ 582.871804][T23550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'. [ 582.881242][T23550] netlink: 'syz.1.5291': attribute type 5 has an invalid length. [ 582.889660][T23550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5291'. [ 582.909435][T23557] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.931776][T23557] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.948022][T23557] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 582.957617][T23557] ` (unregistering): Released all slaves [ 582.985609][T23555] vlan2: entered allmulticast mode [ 582.990803][T23555] veth1: entered allmulticast mode [ 583.003573][T23561] tipc: Invalid UDP bearer configuration [ 583.003612][T23561] tipc: Enabling of bearer rejected, failed to enable media [ 583.044064][T23550] geneve2: entered promiscuous mode [ 583.049500][T23550] geneve2: entered allmulticast mode [ 583.064019][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 583.095081][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 583.104853][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 583.113549][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 583.145471][T23568] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5294'. [ 583.251069][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5295'. [ 583.261939][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5295'. [ 583.652331][T23594] 8021q: adding VLAN 0 to HW filter on device bond22 [ 583.750543][T23597] tap0: tun_chr_ioctl cmd 1074025672 [ 583.760894][T23597] tap0: ignored: set checksum disabled [ 584.043122][T23605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.067639][T23605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.094590][T23605] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 584.117534][T23605] bond0 (unregistering): Released all slaves [ 584.187126][T23609] netlink: 'syz.3.5304': attribute type 12 has an invalid length. [ 584.201645][T23609] netlink: 'syz.3.5304': attribute type 29 has an invalid length. [ 584.386459][T23615] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 584.406953][T23615] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 584.427439][T23612] syzkaller1: entered promiscuous mode [ 584.443064][T23612] syzkaller1: entered allmulticast mode [ 584.916863][T23640] 8021q: adding VLAN 0 to HW filter on device bond19 [ 584.931647][T23647] netlink: 'syz.1.5314': attribute type 10 has an invalid length. [ 585.156034][T23659] IPVS: Unknown mcast interface: pim6reg [ 585.210110][T23663] netlink: 'syz.1.5316': attribute type 1 has an invalid length. [ 585.286251][T23663] 8021q: adding VLAN 0 to HW filter on device bond26 [ 585.469399][T23667] 8021q: adding VLAN 0 to HW filter on device bond26 [ 585.477036][T23667] bond26: (slave vxcan5): The slave device specified does not support setting the MAC address [ 585.502167][T23667] bond26: (slave vxcan5): Error -95 calling set_mac_address [ 585.593862][T23663] veth9: entered promiscuous mode [ 585.603418][T23663] bond26: (slave veth9): Enslaving as an active interface with a down link [ 585.629414][T23677] vlan2: entered allmulticast mode [ 585.864333][T23698] [ 585.866720][T23698] ====================================================== [ 585.873749][T23698] WARNING: possible circular locking dependency detected [ 585.880797][T23698] syzkaller #0 Not tainted [ 585.885223][T23698] ------------------------------------------------------ [ 585.892251][T23698] syz.3.5323/23698 is trying to acquire lock: [ 585.898332][T23698] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 585.907521][T23698] [ 585.907521][T23698] but task is already holding lock: [ 585.914899][T23698] ffff88814d94d070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 585.924173][T23698] [ 585.924173][T23698] which lock already depends on the new lock. [ 585.924173][T23698] [ 585.934613][T23698] [ 585.934613][T23698] the existing dependency chain (in reverse order) is: [ 585.943657][T23698] [ 585.943657][T23698] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 585.951696][T23698] lock_acquire+0x120/0x360 [ 585.956758][T23698] _raw_spin_lock_bh+0x36/0x50 [ 585.962076][T23698] nr_rt_device_down+0x12a/0x720 [ 585.967565][T23698] nr_device_event+0x137/0x150 [ 585.972881][T23698] notifier_call_chain+0x1b3/0x3e0 [ 585.978545][T23698] __dev_notify_flags+0x18d/0x2e0 [ 585.984313][T23698] netif_change_flags+0xe8/0x1a0 [ 585.989793][T23698] dev_change_flags+0x130/0x260 [ 585.995201][T23698] dev_ioctl+0x7b4/0x1150 [ 586.000084][T23698] sock_do_ioctl+0x22c/0x300 [ 586.005234][T23698] sock_ioctl+0x576/0x790 [ 586.010113][T23698] __se_sys_ioctl+0xfc/0x170 [ 586.015245][T23698] do_syscall_64+0xfa/0x3b0 [ 586.020298][T23698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.026736][T23698] [ 586.026736][T23698] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 586.034586][T23698] lock_acquire+0x120/0x360 [ 586.039642][T23698] _raw_spin_lock_bh+0x36/0x50 [ 586.044947][T23698] nr_rt_device_down+0xa9/0x720 [ 586.050344][T23698] nr_device_event+0x137/0x150 [ 586.055649][T23698] notifier_call_chain+0x1b3/0x3e0 [ 586.061303][T23698] __dev_notify_flags+0x18d/0x2e0 [ 586.066880][T23698] netif_change_flags+0xe8/0x1a0 [ 586.072353][T23698] dev_change_flags+0x130/0x260 [ 586.077759][T23698] dev_ioctl+0x7b4/0x1150 [ 586.082639][T23698] sock_do_ioctl+0x22c/0x300 [ 586.087858][T23698] sock_ioctl+0x576/0x790 [ 586.092728][T23698] __se_sys_ioctl+0xfc/0x170 [ 586.097863][T23698] do_syscall_64+0xfa/0x3b0 [ 586.102916][T23698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.109352][T23698] [ 586.109352][T23698] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 586.117313][T23698] validate_chain+0xb9b/0x2140 [ 586.122672][T23698] __lock_acquire+0xab9/0xd20 [ 586.127907][T23698] lock_acquire+0x120/0x360 [ 586.132982][T23698] _raw_spin_lock_bh+0x36/0x50 [ 586.138298][T23698] nr_rt_ioctl+0x390/0xd50 [ 586.143271][T23698] sock_do_ioctl+0xd9/0x300 [ 586.148329][T23698] sock_ioctl+0x576/0x790 [ 586.153212][T23698] __se_sys_ioctl+0xfc/0x170 [ 586.158437][T23698] do_syscall_64+0xfa/0x3b0 [ 586.163496][T23698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.169932][T23698] [ 586.169932][T23698] other info that might help us debug this: [ 586.169932][T23698] [ 586.180175][T23698] Chain exists of: [ 586.180175][T23698] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 586.180175][T23698] [ 586.194090][T23698] Possible unsafe locking scenario: [ 586.194090][T23698] [ 586.201559][T23698] CPU0 CPU1 [ 586.206943][T23698] ---- ---- [ 586.212322][T23698] lock(&nr_node->node_lock); [ 586.217122][T23698] lock(nr_node_list_lock); [ 586.224261][T23698] lock(&nr_node->node_lock); [ 586.231571][T23698] lock(nr_neigh_list_lock); [ 586.236289][T23698] [ 586.236289][T23698] *** DEADLOCK *** [ 586.236289][T23698] [ 586.244443][T23698] 2 locks held by syz.3.5323/23698: [ 586.249655][T23698] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 586.259187][T23698] #1: ffff88814d94d070 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 586.268899][T23698] [ 586.268899][T23698] stack backtrace: [ 586.274806][T23698] CPU: 1 UID: 0 PID: 23698 Comm: syz.3.5323 Not tainted syzkaller #0 PREEMPT(full) [ 586.274833][T23698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.274848][T23698] Call Trace: [ 586.274859][T23698] [ 586.274869][T23698] dump_stack_lvl+0x189/0x250 [ 586.274901][T23698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.274927][T23698] ? __pfx__printk+0x10/0x10 [ 586.274954][T23698] ? stack_trace_save+0x9c/0xe0 [ 586.274986][T23698] print_circular_bug+0x2ee/0x310 [ 586.275012][T23698] check_noncircular+0x134/0x160 [ 586.275039][T23698] validate_chain+0xb9b/0x2140 [ 586.275075][T23698] __lock_acquire+0xab9/0xd20 [ 586.275111][T23698] ? nr_rt_ioctl+0x390/0xd50 [ 586.275135][T23698] lock_acquire+0x120/0x360 [ 586.275165][T23698] ? nr_rt_ioctl+0x390/0xd50 [ 586.275199][T23698] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.275228][T23698] ? nr_rt_ioctl+0x390/0xd50 [ 586.275252][T23698] _raw_spin_lock_bh+0x36/0x50 [ 586.275278][T23698] ? nr_rt_ioctl+0x390/0xd50 [ 586.275302][T23698] nr_rt_ioctl+0x390/0xd50 [ 586.275335][T23698] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 586.275366][T23698] ? apparmor_capable+0x137/0x1b0 [ 586.275396][T23698] ? capable+0x89/0xe0 [ 586.275415][T23698] ? nr_ioctl+0x1b1/0x3b0 [ 586.275436][T23698] sock_do_ioctl+0xd9/0x300 [ 586.275464][T23698] ? __pfx_sock_do_ioctl+0x10/0x10 [ 586.275488][T23698] ? __lock_acquire+0xab9/0xd20 [ 586.275527][T23698] sock_ioctl+0x576/0x790 [ 586.275553][T23698] ? __pfx_sock_ioctl+0x10/0x10 [ 586.275577][T23698] ? __fget_files+0x2a/0x420 [ 586.275608][T23698] ? __fget_files+0x3a0/0x420 [ 586.275639][T23698] ? __fget_files+0x2a/0x420 [ 586.275673][T23698] ? bpf_lsm_file_ioctl+0x9/0x20 [ 586.275699][T23698] ? __pfx_sock_ioctl+0x10/0x10 [ 586.275723][T23698] __se_sys_ioctl+0xfc/0x170 [ 586.275749][T23698] do_syscall_64+0xfa/0x3b0 [ 586.275779][T23698] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.275806][T23698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.275828][T23698] ? clear_bhb_loop+0x60/0xb0 [ 586.275851][T23698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.275873][T23698] RIP: 0033:0x7f6bdc38ebe9 [ 586.275893][T23698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.275913][T23698] RSP: 002b:00007f6bdd181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.275935][T23698] RAX: ffffffffffffffda RBX: 00007f6bdc5b5fa0 RCX: 00007f6bdc38ebe9 [ 586.275951][T23698] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 586.275965][T23698] RBP: 00007f6bdc411e19 R08: 0000000000000000 R09: 0000000000000000 [ 586.275979][T23698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.275991][T23698] R13: 00007f6bdc5b6038 R14: 00007f6bdc5b5fa0 R15: 00007ffe78b28d48 [ 586.276017][T23698]