last executing test programs: 3m12.667486831s ago: executing program 1 (id=2): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0x11e}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700202c00fe800000000000000000000000000000ff020000000000000000000502000600000000620000000000000081009078000000003ecd1f6327651b2c8529ec3ef8448262c4f15dceeb589d7841d010eee86f741be8f1d4baa2abd303d5b9da2f24c167515fc6d09c14e368292937150c37028abe6c79e12fc8c086e742264c8907086ac206739343078bc98d757f40e89588f50947d9e5b8b5cc33623ff7e3c584a86c3322a975792762e8387185d8008ad4056d4639604798cd00"/220], 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x400, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000001880)={r7}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r3, @ANYRES32=r6, @ANYBLOB="d4dbb5aeedd86289d07b47f937d5eecfba7043dd4e0ac320d8298a7f6b038abd9a4c8b6c624cf8cb4964bed8b3b5e31d60bb00"/66], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3m11.689135461s ago: executing program 1 (id=26): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 3m11.148971319s ago: executing program 1 (id=32): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000240)={0x2, 0x1, 0x4a, &(0x7f00000001c0)=""/74}) 3m10.950734985s ago: executing program 1 (id=36): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) syz_emit_ethernet(0x11b9, &(0x7f0000001b00)={@random="e33110495bfd", @local, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x0, 0x5, 0x11ab, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x36, 0x2, [{0x0, 0x11, "31d8d34e93bd3cefd4e11632c65407"}, {0x2, 0x8, "c227dae7bb75"}, {0x6, 0x8, "80834ec98735"}, {0x6, 0xf, "db7cf2641e63407874474a2b17"}]}, @ssrr={0x89, 0x17, 0x9a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0x8010101]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x4, [{@multicast1, 0x46a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@empty}]}, @rr={0x7, 0xb, 0x1e, [@empty, @multicast2]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x79, 0x7f, [0x7, 0x1], "e7f0a9d4d147237a35a090c6a34354cee4d446d7baacc07250212827d64c8ff27baa1e27dfd819f80dd0706e8568eab2bf4a4659bc3471da1bc7037d8da08fd48eb18d3abac4a98a31dc58663ec7dae66e8724d2c6029e22b07e4143fe06027df33e3f445094e6f83e74b73291d3f9808591551c4591d2b8e3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "6dcc911c258712b980c6646711dcdac295179e18541b9443980d01841c56e4fab780add03dff53dc91dc526adf834bca876fe5c9be9e133f5cc432c9fd8b80503aacdbd8f8f22e111ad475c350d08451e6546deb82f93c277d89a2308a8950b4666d1e081658fc2aa06d232bb992c03097e575dc20d9642d53a4e3b2f1ed7151e53507390eacf341d662f1072b374cfe273423b93925ab59529fd86b98b5700923555ce592ecc2edc94ac682cb66af563d2b16cda36e0b4e2bea1938d458974e59c1cd547733c074e9460103a4b4e224967009ff22eafd81f2cd15cbaa80ae9083480962a9e644b3dc4560d139738b3e73889fbb61fcd50591e55ce0385e119e70642bd5ba589180d8a30e0a69d83e65e1bc604e58145cf3cfb28db96fa3c4643f8cad92db7bf67bfe0dec9dd8ee4638203703fb99c4359d6635de2682a65ec8bceb8e490936125a8a87dbf4372b490b875e96cfed53b48a9ed3c4d8c2d3bc0d7c91e85b243c835c0301af1d7cc85b3a6da3cdae12599058d66bba6f3ee2fb11d10e9a6a2beb1b97aa1ec0ca23e8db868f3f0169c4e150fe6af9977cbd4a3e175a10e0e806b47ca2dc3cea653d6252abc81e174c9f0e2a9283dfa815277ea4d64c2572c1b8e69d81aa234124c9639a30a0153bb444200792bc0cc036a4347a8668ea3feed369c2b72db34065ecd2a884dc133a840dc80d248cf63e6ea1aae210a65e3a5f05a756923a02c077a73bdc9e3f0039ba8747934c44822e3fe7c13f7d2cbca2ced67de623f66ed43d37b0e6c36a4209a1d01bc04710e4062a118f20d80b1ab8888defe17a2e38eec1ff02baf99a1c23ff8246039112b06fdb01c43ab6d8187abb57000d3450033ad6b59c9651251baa3d77b9801b6a0485cc7460c212ba1a730aae6635223428d69af38aac8281b7d858093e2b785bdce7be56a33816326b17fa5bf2f26bd3dfbde74c429c256bc7fc62e242dcf92b7e6c74ee8e17b819e6272da49c39caffa60a62a8e8af3bbbc102929b1c13f1258ed533123ab57f65a84e49613862def4ae14ec6df133a2ba8ba478137fc21456061ed91b5cdccbda39f9cd71cfb5d76f52780ad55101203bbd2bddcd11f5817c543b95d03e8936600d54b0ee47bc7d924585d2f3cae6d5ed36bbc4b9d3fed9f00c397fbee6406a0b74a4b28715cf9d8c70b63f9e9dcd9460abd51a8562f473608b18262010a12a5ec6f2dd5813c6db3420bbd9b43f2a1b733867d3d0b3f3dce7ddbca97a7a01d5ded3ae86b86d347e2956a25ebbba99e34abe160ccfe3039c58124e59405253686e1001e18e1b99b5ff37d11fe99fafc074c93b054e0f7c913e98b77fbb095019b65423209f659fdffbdb9ce83d49c8855ce6953a8635f40f36b9164944a3fa814a552c2d7db6b3be10e559f91beec145be6711122ab236ccd78c2bd236ac088eb29b74aa2d90219e51416b5b3c6d08a4e9f18598db9c6139b61768a0887a274d45ae7ee3c46b92a0a5be7904f96a6e2a4b9cc299d1f5da7989527c2a076e504fc02d248f2e7b8b2c8c31722552666a1d7d46f9b27a95395b93cbdf58ea81ae74f29b0adbc1dbf52f762102c062fcafe12a97807925eb5f0b5d635fa29bf3bc57d816073d50b6d6ea4abc1bf45a603d6c17e7757ea179b444632f81b4eddc93a5fd0246a3fbb15e31d446d44d5bfb4bee859210832892adab666f13d2e4235687d8ee8492055b44cd94786e6d1c515b763461919bd91f8009e481a81049005c82a0cff144a0bc5828380c5409d4f1267c3822ad356ca82e0f9bf8a3af9c5404f3b0d6626c051d1d0aab94747714d3d17355affe56ec0a894d1dbdb65aea5326218b111f2a35156760dfc179108837b5e30f47401900d75db82f7bf18b3faeead4d399e524d234d4cf279e3eea1b3b100adb64a6380ef090e233ab0b8d822e31455676136a81306da8ae0cd5b4a9eba1e9311e78d8ecb75d7283b1b6d2ffec3310ee7f486ec1e168f151e336536d82c9aa8e93dbc0114f90c7f6843cd9da9bca49e0bc9afd94711641b51a6f1f52bb71f450d31ccb06f024bebced6df45efd25a9b4776f6897ee6de2cc2149c7120f3fcac03fc25446f9382cab5122e9e71e273949e2e74a080e9eaa6087df63cbe3e3a640b6dbc127a358b03b8666945b2759948c39043c51055e2e476c178d4f4c1578bdebdbb07c82ae5ba263142f8164ec88c779d09dbb8bea8529b9a6f3a4b2d88208214ba65f29259d1af50bbeb483b800383b75bed0b4966d9e88740d7a00f3a93ce4ac10d60800ab5b5370759624c9c3a54f0ed3c8308ee1239e0747fa8ad31b37dc0fef06e36923c017ac5d2ed139e697b0013d437f580230fcb5af3d6e177eacb11919649b5af244cd0d3dc1bdd189d7b223093c9d7b1df968a98e3f45b84890d96e1593cdccaa0c95725aa00030648f5aaedea7fc1f9ae0bfaed0f10ede504134f19554f6facb452cc4e4bace6718e0c77d120b1ce383e8c6457c49258a3e21bf6189c3bd5302dae13ccd3f5f88e0a98759d77286d52df60fd4c290a615df269dbd2ccffeb0c49e5a3ffcb1a6d4ed67417ee10cc15043d311d03181dcda20e95914aabd3c95cf06d1caf0f301357851f965ec62b7525daa6effe0afdafff123e670e167ffc33165423811627ef4a47f9e50b22ef313ac40d0cb854868971f72a3a5fbde527eab9fdaf9f19b20ac5f2c560644056d4449e53a273594e4b5482ed8ca0115a137877d2288f45e2843ea1892d5eb4d386a829182b72879d2c8acee7deb32f9cc7faec804f52cbd718a0ebea444f04600767bb6e1491c4541ea618208339b96046ea34b9692aebc241ecdd089a3b276bce84bae7b7f31668479f5acbb888e629ce4d90724a02017146e6afabcbcf5fadaff081c49018e88b053d8b4c65360c79744921b630433bfb650c9569605541b3ce07de6e822510cf171942d2a96c4da45edfb95f5fab84fa8162403d0a31db85ce6f657e53595d3d7a7762f2dba8c8fbb688de410035a07096e8c2b2823c1e6c52d0b9e7dcf885d77f7b1905b4fcd34dd4eb51054004ce934f05f9943416187c9d7a86545cd9ea474a2b48078fc666e2a0b5e3ff1f8dbb94ce5ee84a3969ab6ab0ed50ff13002f551d17fcec5a3abf44ee4c6d501f74d4d43966dfcfd51b36387ada34dcf4cf0b6918cc1eace934bd3af243792633f78ed7f2782118445771bee069f9f0146d01cd3a3cb7ee9a3074ed1af2c18bbb941ef380d51a8cfc4c42bdeb9dd41b1b3e066cf5cff4469d24fc3c7840c9e8fa3a18eb815e23363a4fa5ce7312552c933f6419e0691fe472b594b160725a9aaccdc207309515caa3ca2e1bdc8d6c2da7244ddd9e737e3645967db0b5fc1d893b275f55cb851fe89042d1265e85e9db9d293011de89529e854f3bf9789cc66de7a812f31655ff30e3c5b8e842022c6e1868128c455d9b9aeedff9d1d99dd792f36c19fd9edf4ade5645f1ec087b6cd3ed1a8b6b83d08d4f485fd9979dd741848029381e9f5511d1f77d19f07fb2496a08640b5e4620911a1f93006e2334c7d47c1e71062f0b918f11298b918f90971ba99d35da3c8565adb865a18537684c128f6a4f85fbebc5d54d4f13fb85340aed0e43214b7e5fccf9302bd91ab8c81e237de7152f0de1ba3885a184f39423beee8abe9e2781a97eb66fe3afecb8a7dbbe577f01a606cd61aa1faa2163361b5a128dc33609a69b50ce4389f3fc696d0fb63fb89584c44e2f3a0595441db147c0ad9223b2648356c1751e9ccc457f804c2a2ec924951e73f2b2f3c702fa0146fb488308673a0c692898ad316a17c7fb518c099d52a3ee858aa5ccca55b8414f0c2afc50a9947501c216872f41a864e6cc6d099d9b224456831f8b66cc2c7857bf2e7d0600a789b85ac6cedabaeedbc0b7996ed7075a644fc4c520280fadd8a99924be5655bb3177132145780c3c47638fb6a96522043914cf9f0763c0527298575f22aebf5c9df8c8200ffc83f247f2942a61e3175aa25e1fa214766453e4eda512e279402deb2c9e937d32ec87370d59f2d6099690afa2c1b30de1a29056a2a7e02b594c4be2cebc0bda94873c55f7a715a6acb6c6eeb1285d1a9647df8a4d882af436159b54b884bc5ef1c1bc6e8b20bae7bb1f43b2b68cfbc4c46b3f57c4acdf6982e3050e2e6875788878737c5bd1a816450fa7cf1223dc62db4d4695242908a0476af1176ccbc04c4a8b1bb45ec847524ba6651984ea52695855a03e5ec2599649af69ab96f5186eb76034c93eb5a6c69009270d88f94e9c87b30cf0f83edff181534ca7ffdaa3952a09e93bb04c8c90d843f49a8c557967375414a7b4477cc134c0b5e4c66417fee0fb6e39b41ce7885abd5eb1bfcacf9d29ed03b4816c9c9e7d416d8b43782f3514d48798bcc21131638f7f298cabafcd08c46c17de2903801be3c31605407a18bf66d9f892c5275a7aef4827b893f94afe901c7060e4a568c7f83516bbaa5878e3a0f097986106020955237d1ef11a5de3f565e02d69ab7985e290ed216cfcef74b113d73383045e7b38f9d27fd8881fa9ebbe8ed66e6f6b5c5eb6432fe0776656c7a6b3a4ea58c135dc3f3f36a6c16580683c63750c6a7b04a039bbeaf9f8ff359dd5207a78e122baeebded9e59e8df61b1618bc48738af2dca058036119670069f8b085274387d542541d222a5a76dfae24b2847eb38ed3a6cc8f65ca2dc98b8efc90b6411511a5c57151c67d5ef7ebb1d73b5f8d299fd990247070c76999a5818c8c47c1adb6395c7a5bd4008985744b2ad2121e18077872eb0e63cadf127d9351bdfa784c268b2101cd7d5a457edd901d9625ff1e7d609d78d30ffd8a3f5dee0d80f048b569870229a83265dbeceed4795de4cbb537f522740400bb26e4d3a6b3c734a204fb500169243aed47ade820507b68f23be5d9ab72bb88e7bb31c96d641b635ec051c22134d676b8cfb0dae2641f44bcfde8ed6c130e7c3f2f5c3374cd6b7843ff4258a4852f048d6becd5a74f5a9dd49e26415cfecec4613d27157d53dcd6d6c9d8dbed59927a4028461cd4d34bf216b248fe8554cbe9df2e1f1e90696a9f08f3d7493af864dd0bf0c34fe591e17cdcdb79ab9b5f2bc018034a6eeffe6b26b9fa929f6b00fdff05b13215d6509c1034c1c5cc6e26fa597f39dc2512dfe6d7dbe7258cb8bb94d3bb615288beddcc0172455f73977f4e33bfd9348e9374b9d7f378a329368893cfbcf75dde2d2a5597ba129c3d9edbdddfb5582d3a364d052a06decb6fec150dcfbbb7f6711a6831a9c4db05ba8d33ca79428fd2a455bfd9a7ba67e294cd2eed45c77c6a1acb356a29adb54dd04572a0911b405eebe9ecdea5541d1d7e3fa4e4fe8de50e9c89d2d04213fa97a082b25745d45c6337e6e5c293cd1a85dad0fa26cc4ce237c6d1664043bdcd7e9ec6518b9081b78db397400e9997a2c5a6c179483555f58725a256a1ba65b0a3224dd5b6147d9ae41d2d3899890bee0727977939105fa6fa668507bab39a43ec6e3fc4035f196cb19b0d86d6c454bb9708218b4924b3f5188a4ac563648a6abacc5848205e0184ede0844f940e1683ea25e4e846cb92b7c5e565cfd347009251334ea7f95a39559dde6aba711744714bf8b8f9b0de693bcd7964096023420d573d5bfb78d8aecd3489c3d762aaf6eb6626bc5ab124bfc06c63c2ece5d9c637c87f0ca13debd007da59284c25b3df173c50faeea5056d082e336447d0aa5b8c123ff344a59f2472b9b44f500772460f4b9909a6ed458d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0], "0f8f9fd3"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x1, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x3, 0x3, 0x1, 0x0, 0x6, 0x7}, 0x2, {0x7fff, 0xffff, 0x2, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "2f184660df584ae03b0b689a10f8efce33390155f36790d8d5ef555efda50a8e70fef34e00d77bc4d8516a60fe079f71fae32ee508837ee3e0c57b54da2cd8ce5a5e9a4264816a72d78826fcfe5400146057"}}}}}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'perf_event'}]}, 0xc) (async) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'perf_event'}]}, 0xc) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1d7}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) 2m55.855694748s ago: executing program 32 (id=36): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) syz_emit_ethernet(0x11b9, &(0x7f0000001b00)={@random="e33110495bfd", @local, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x0, 0x5, 0x11ab, 0x66, 0x0, 0x4, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@cipso={0x86, 0x36, 0x2, [{0x0, 0x11, "31d8d34e93bd3cefd4e11632c65407"}, {0x2, 0x8, "c227dae7bb75"}, {0x6, 0x8, "80834ec98735"}, {0x6, 0xf, "db7cf2641e63407874474a2b17"}]}, @ssrr={0x89, 0x17, 0x9a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0x8010101]}, @timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x4, [{@multicast1, 0x46a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@empty}]}, @rr={0x7, 0xb, 0x1e, [@empty, @multicast2]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x79, 0x7f, [0x7, 0x1], "e7f0a9d4d147237a35a090c6a34354cee4d446d7baacc07250212827d64c8ff27baa1e27dfd819f80dd0706e8568eab2bf4a4659bc3471da1bc7037d8da08fd48eb18d3abac4a98a31dc58663ec7dae66e8724d2c6029e22b07e4143fe06027df33e3f445094e6f83e74b73291d3f9808591551c4591d2b8e3"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "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"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x0, 0x0], "0f8f9fd3"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x1, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x3, 0x3, 0x1, 0x0, 0x6, 0x7}, 0x2, {0x7fff, 0xffff, 0x2, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "2f184660df584ae03b0b689a10f8efce33390155f36790d8d5ef555efda50a8e70fef34e00d77bc4d8516a60fe079f71fae32ee508837ee3e0c57b54da2cd8ce5a5e9a4264816a72d78826fcfe5400146057"}}}}}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'perf_event'}]}, 0xc) (async) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2d, 'perf_event'}]}, 0xc) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1d7}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x10) 2m36.772291219s ago: executing program 3 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "0100", "acba84f0a6731f234db1cc7f3f382ad796bd667c4000a9959087310300", "129c9707", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="8692ac9667a953a3", 0x8}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close(0x3) 2m36.468975865s ago: executing program 3 (id=508): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='rss_stat\x00', r3, 0x0, 0x40}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 2m36.109078672s ago: executing program 3 (id=511): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m35.70158139s ago: executing program 3 (id=517): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000240), 0x8) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'macvlan1\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x203, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000405}, 0x4095) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x20004000) 2m35.434540412s ago: executing program 3 (id=520): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffeff, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="2d7003"], 0xe) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r7, 0xf13, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x24}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x220480d5}, 0x4004004) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f972bef63842ee3b291da39d1977010", 0x1b}], 0x3) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x43, 0x0, 0xfffffffffffffdd4, 0x0, 0x0, &(0x7f0000000040), 0x8, 0xf5, 0x8, 0x0, 0x0}}, 0x10) 2m34.088968903s ago: executing program 3 (id=541): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x1c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x804c010) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x813e, 0x24}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xb5442e6956ea01e1}, 0x800) (async, rerun: 64) r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) r11 = accept4(r10, 0x0, 0x0, 0x800) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(r2, 0x0, 0x2a, &(0x7f0000000340)=0x3, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000002600010026bdf0000600000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r11, @ANYBLOB="4e463d2b9b55dde8ba7ab071868bf302d1c62f1fab35136523a1c879ec473844ab1565ca54201ddb707e707350be4663ef8614b7faade2f3f4674513107f42231551583e5d5a914b5db1ce07d56661a7428af9f29e22c573"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) socket$netlink(0x10, 0x3, 0x13) 2m19.025799065s ago: executing program 33 (id=541): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x1c}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x804c010) r5 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x813e, 0x24}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xb5442e6956ea01e1}, 0x800) (async, rerun: 64) r10 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) r11 = accept4(r10, 0x0, 0x0, 0x800) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(r2, 0x0, 0x2a, &(0x7f0000000340)=0x3, 0x4) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000002600010026bdf0000600000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x20048000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r11, @ANYBLOB="4e463d2b9b55dde8ba7ab071868bf302d1c62f1fab35136523a1c879ec473844ab1565ca54201ddb707e707350be4663ef8614b7faade2f3f4674513107f42231551583e5d5a914b5db1ce07d56661a7428af9f29e22c573"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) socket$netlink(0x10, 0x3, 0x13) 7.717472851s ago: executing program 2 (id=2653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x4d6, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x23c}}, 0x0) 7.537486666s ago: executing program 2 (id=2657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "07ff73312a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4008889) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x128, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5a}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb9, 0xbe, "efae1cb77aadab472e3a46020da57c6ab775138a9bdd52cbf2bf797bb496a262038e093903a7e981cf00ba1fcf1043e84339d7ee6c54bedf000ef5a88b641d54b1c4f8f5f37bcd16116bd640234864665d8655bb101deed6fe076f7d902b5ed6c8e3b6ac0898b25746be00b74be636897f01ea28c5f4d62869895dcf1568e7ebe164e8fee989c0bbd71fa049250a73fe375f2c69bb2d56b7ce14520bc5eb1115097ae11847f67b80638957e77e25febbf7667dffa4"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x30}, {0x30, 0x1}, {0xc}, {0x9, 0x1}, {0x12}, {0x16, 0x1}, {0x48}, {0x24, 0x1}, {0x48, 0x1}, {0x30, 0x1}, {0x30, 0x1}, {0xc}, {0x60}, {0x9, 0x1}, {}, {0x60}, {0x6, 0x1}, {0x12, 0x1}, {0x16, 0x1}, {0x36, 0x1}, {0x12}, {0x6c, 0x1}, {0x12}, {0x9}, {0x9}, {0x60, 0x1}, {0x1, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x128}, 0x1, 0x0, 0x0, 0x48000}, 0x40015) r4 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000480)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @default, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) r5 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x144, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x31}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xdee8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8001}, @NL80211_ATTR_IE={0x102, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0x6f, {0xfc, 0x2, "c017841d3b01fbd0d980160dd19f6685", "d64579acbbd3aceab5dd06b32b138db5c94fcae6e921d1bcf37982e6029dbb90", "851f0f7294d60b16d2904838def32b888571f16108aa09271f826a0477c5053c", [{0x2, 0x7, "2019309a2f77dc"}, {0x3, 0x12, "8ab7a0edfe1ab3a54a7287374ed094ee4648"}]}}, @rann={0x7e, 0x15, {{0x1, 0x20}, 0x0, 0x9, @device_b, 0x8, 0x12ea, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0xab, 0x6}}, @preq={0x82, 0x4c, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x5, 0x80, 0xb, @broadcast, 0xf, @value=@broadcast, 0x352f, 0x6, 0x4, [{{}, @broadcast, 0x7}, {{0x1}, @broadcast, 0x9}, {{0x1}, @broadcast, 0x7f}, {{0x1}, @device_b}]}}, @rann={0x7e, 0x15, {{0x1, 0x2b}, 0xf7, 0x8, @device_b, 0x9, 0x7fff}}, @supported_rates={0x1, 0x1, [{0x2, 0x1}]}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x44001) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000009c0)={0x1, 0x1, 0x1000, 0x72, &(0x7f0000000880)="db6d3836f6c128a05f4ed4b0cdca1a0bc8698a48c3b40ae84b894681d69a00e887553adecfca885f2b2d62df247bf2c3628463cac93e9733c96855ed5a13fdeef704172b805ed891f31c1e9aacd1386a1d656a9f9555f933cca5c76787881bf634ff80a3ec6db7448f09be8e407c7d93fba8", 0xbc, 0x0, &(0x7f0000000900)="c578cb502d8f6c3019084a7b8689a993e2b4947ce974e28daae2ae48a8c9dfdf32672238328067bd6ead962ad829bb386f2ae3836acd171111fa846250a8e7ca72328e88c81cfe147615733318161e1a2ce8d8f56a06dabbc0079238c2fefbd5357f02f8967962f5aa5ad8935dc517131ab32b361cde7f580ca76500e1017296c296f8111fa1ee30e8cd1dc028b6fb368da697eda87de07656aefe6d57c03808d38a632b17eec2aee87dc0553af0c1979349f82f933bb8ec68e85de8"}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000a40)) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000a80)=0x2, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004002}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000cc0)) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1b}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x80800) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000e00)={'dvmrp0\x00', {0x2, 0x4e21, @empty}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x800) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x57}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r12, 0x89f9, &(0x7f0000001080)={'sit0\x00', &(0x7f0000001040)={@private0, @empty, 0x6, 0xd}}) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000010c0)={{0x6, 0x1b98}, 0x100, './file0\x00'}) 7.308884123s ago: executing program 2 (id=2662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.07939418s ago: executing program 2 (id=2671): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='\x00\x00\x00\x00\xdca\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000740)=""/4096, 0x1000, 0x7) 6.92907466s ago: executing program 2 (id=2672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r1}, 0x18) r2 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) 6.791270406s ago: executing program 2 (id=2674): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x1200, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 2.352986683s ago: executing program 5 (id=2742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2.037060787s ago: executing program 5 (id=2748): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000040)=0x1c, 0x800) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x4) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd27, 0x25dfdbfb, 0x6, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getnexthop={0x38, 0x6a, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000}, 0x40080) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000002c0)={{r2}, "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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xe4, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xa2, 0x3, "9c72199b0ec87e5c62be1fdb253007f352784e7e17ea54cf25480f8f121c0e85cfa37dbeb0741b11748366458c31fa58f0f061c2100cabf3f8304699324dcd874d0f200170e5a9cf821573b0d0cb2b37df1770da22e030c504c068e8284a95d05fd8abd91f37ce68ae9dab0e36d2be13fc6c21485139aa0642999aeb671c966f41537d16a81bdda95191d8c93a1a5fd4aa2c49a91cd9c974f14fef5797e3"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000014c0)={r2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001500)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001540)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000001580)={r6, 0xb, 0x6, [0x0, 0xdb0f, 0x3, 0x29, 0x2, 0xb227]}, 0x14) (async) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x5, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c840}, 0x2400c0d0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000016c0)="f57b1aa0e5ce56946bbbcbc234dea256ae9a7035a45860392687284762829094bfe1b3f393e5808a5e8857e4918304939b285fc3fde738f0b11d94538a05438fcd0af3c538cc3b24936e59bad304cfa2bd6945e0e61de9d06312f1be8c64a37afde4963505dfb4a8afe25e376ca7287b8f303ef9d7df35b860447abaf4cdd38142622561f3043f7748b8b30135ef0241094aee0d68134ef1ee40e0982fe5157be036c5519a75b22b88daaa6b691cd9cc6be6a98b325b3b1ba2a825cfb3c97e6da78df629eb5c6bd12855cb8997d1a62b7308ff263be3de46621147473e", 0xdd) (async) close(r3) (async) ioctl$FIONCLEX(r5, 0x5450) (async) getsockname$packet(r5, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001800)=0x14) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000001840)={0x60, "3ebe46f62ecbd86d28d7d29c48cdbe032ca56f5927f80ef13205a50870b27e1ecbc598fb38ab38155788c5fb8350aa59cd46119b8a3ccb22f3b3e13adc40c6844cc8a845dcc09265da47693ca9d06277565e3c4d79ba0d9c36b53453c61fb094d989e0f259ff3800e099786be6c7229cee7177eb9d9ed195ea7a64da7496a7c3"}) (async) getsockname$packet(r5, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001940)=0x14) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000019c0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x6400c054}, 0x4c80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000001ac0)) (async) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001b00)={@private2={0xfc, 0x2, '\x00', 0x1}}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001b40)={r0, 0xfff, 0x2, 0x51faae3f}) (async) recvfrom(r1, &(0x7f0000001b80)=""/124, 0x7c, 0x22000, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@o_path={&(0x7f0000001c00)='./file0\x00', 0x0, 0x18, r8}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r5) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.776761042s ago: executing program 0 (id=2750): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000d7a75b127485f260f38d107515", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r9, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @remote, 0x8, 0x80, 0x1, 0x10000}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000aff8d00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x20, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x0, 0x2, 0x3, 0x8, 0x2, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0xd, 0x4, 0x0, 0xfffffffffffffeda, 0xffffffffffffffff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000380)='GPL\x00', 0x3, 0xff, &(0x7f0000000800)=""/255, 0x40f00, 0x78, '\x00', r6, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x2, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x4, 0x4, 0x6}, {0x4, 0x2, 0x6, 0x7}, {0x0, 0x1, 0x9, 0x8}], 0x10, 0x3}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000c60500000800000085000000a50000a63392faac32f288f9ca2370ce009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r0, &(0x7f0000000000)="3ff52043e27c9a5e6f8a5c22d4f7cec0210de12bcd17d5ffb1b5b2fa7cf172cf63333633a65314dbe2adf88217415257852c105521a6aa77dedcc2a33d2783208bfd1ebc4a4f0a096527ead7bbf7fa9ca34c19be5e", 0x55, 0x20002884, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @loopback, 0x7ade}, 0x1c) 1.653024155s ago: executing program 0 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x0, 0x0) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000600000000000000000000040000000000aa0054422eb19588e75e2eb9413f0a0f1df7db0ccb0dddbd0f0e8d04061d56a3087115483241683c8c963e2a994b864cee5604eb932ed3d5bca9e8f500250bf5c5ae3975dbb6893c10b39689e0b4b812e26a50ca072559ab09d44c1ad3aa88875a387db2c831"], 0x55) r4 = socket(0xb, 0x80000, 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x8, 0x6, 0x7, 0x0, 0xc, 0xa, 0x55, 0xf, 0xb4, 0x1, 0x4, 0x48, 0x2}, 0xe) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x926000000000000, 0x1, 0x10}) r6 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x23, 0x5, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty, 0x40000000}, 0x1c) sendto$packet(r5, &(0x7f0000000300)="ed5802fa8f5eaeaf45d962ec50198acfc2511207cff9c75c1d52c664af7f93cb737b7cf1b2fde801d782f7b6f69afc69d86a4fdd2f7fd8cc503ebc50aaa21cc25f12ac155967c1c08a3bbb5fa335e14a8cdcc15a50aafc0e524dcb2e388fcda0bc049173b623cef37fd3a20e15e4ea7ddffb4f0ab5cc9f0d39b9ce37df994fae", 0x80, 0x40, &(0x7f0000000100)={0x11, 0x7, r2, 0x1, 0x81, 0x6, @random="58d63e271c26"}, 0x14) r9 = socket(0x3, 0x0, 0x0) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r11) vmsplice(r12, &(0x7f0000000900)=[{&(0x7f0000000440)="ac6b80d53873f4b35e75dbf57ccf7e8e75", 0x11}, {&(0x7f0000000700)="40711d68611735f03b9fa5f8bbf7875ffb197e1c6db670a69bb2dd69d60085", 0x1f}], 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, 0x0, &(0x7f0000000200)) 1.224014777s ago: executing program 4 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) unshare(0x26020480) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 1.112917936s ago: executing program 5 (id=2758): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24008811}, 0x20040010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe985b815a6cca8e4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r5 = socket(0x2b, 0x1, 0x0) listen(r5, 0x43b) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0x2710}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) 1.050198582s ago: executing program 6 (id=2759): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2e1ade69cff00cba, &(0x7f0000000300)={0xa, 0x4e24, 0xb, @mcast1}, 0x1a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x8001}}]}}]}, 0x84}}, 0x20000000) bind$can_j1939(r5, &(0x7f0000000140)={0x1d, 0x0, 0x1, {0x1, 0x0, 0x3}}, 0x18) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x800) 961.364148ms ago: executing program 5 (id=2760): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x7fffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5c9b, 0x34) setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f00000003c0)="86edbc00c2250951b06c343d8c0b6b6f807b6e20a61c8230d22de6a7ad6e0860fa7da94b087b96742fb8bab8868d70d28d84ea13fb8633f45f873aee2f43f85ea9364b3bcf3a7f8bc965920171c0088c5e7129771a9d7ae49a755f23f82128d03e78d0726639aefd25e41fadc397a20ec3682b9c460a95312083d14dcd74d2dd22d144ece4fee8eaba42ab8edd469097d2f7acce08828a2b9a12c7ac27252a585ddd352512e5bc4a9260cbee05", 0xad) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="2460cf4782a734649801d319bafbc635259b1466e91c886d832b19a016199327058bee4bee12e0a8", 0x28}], 0x1}}], 0x1, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100fcffffff0000000007000000", @ANYRES32, @ANYBLOB="000000000a000200000000000000000008000900"], 0x30}}, 0x48000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000008c0)={{r3}, "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"}) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) 840.84258ms ago: executing program 4 (id=2761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3a, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r2 = socket$inet(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x22, 0x80000, 0xfffffff7) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500"], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r8 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x1ff, 0x4, 0x2, 0x2}, &(0x7f0000000040)=0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r8) 840.036542ms ago: executing program 5 (id=2762): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 708.301405ms ago: executing program 6 (id=2763): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa) sendmmsg$alg(r1, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="32e299b0937cf2ed3dead0a95c50ce708b8da0c1ddf17ac198958508c8592e6f13f858bf4dfca29fce37f4420f792d21a8e1f793213f2a82fc5ce630fd3a37c629e5adf1ced0a4ebf2376bbd1ae823f1b706a3ca48a2b0f9b55e248f95fd14baf0aa1503b22262fa7ab9e96c879b0696637c0a552989019677ed07db81332eb37d012dea84b12b43538d60437dc58e12ab59df3d1b90daf983849da1ed79c2a3908bff5d26c89d1d1ddb70b7176b169122c1af4e0424c319166450b26c3fc8fb67", 0xc1}], 0x1, &(0x7f0000000480)=[@assoc={0x18, 0x117, 0x4, 0xcc}, @assoc={0x18, 0x117, 0x4, 0x10001}], 0x30, 0x8000}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="dbf9620bd226d73c554ed26eb46674d4dd3609039f4e5b992f3ba6bc20829f64a8c448aca6da22642094bbfa40cff9c381de85319f89b691b81fba9e175f1fa0492a84edbf48df704bb0d6c4b7d121da622d6ab1f0429b8ae0d57bc49b0b31df27f3b583daf62c8425000d4973d1b8d201da5826d48dfbd41bb9a789dbfff5c69002bd35a8", 0x85}, {&(0x7f0000000580)="e9ba82ef4a69290dcc30773ef77b2e0cefb8f77eeff3794e61b5a1d3392a3950f21ff8513a57ef959a1430149d980b2b89978ac099b9cc715e0530a336c87c2b132f425bd95d4ceb29618bace38898d96f456761f8b67ed7f51cab96b62393160b573532c72bf2f20e7aabb8b4d7ff00f829da4cc5948a98c7fb60299a09077dcc3f98d42e9afe4465e7ff7b0aaee9cfae9e5885e6150c47dc3ebfd9eee26ac80379831755da8e2854dccb9e28261dcb595b25f4a7cf6e79133a2e4791317325f31c232e7c9fe3bb1f", 0xc9}], 0x2, &(0x7f00000006c0)=[@iv={0xa8, 0x117, 0x2, 0x93, "d18f94eb1e3aebfcac2ef058f402bcb7874a22ae9d7622bc69ad1c71db79e6b2502c2a6b3883e533be3fc30c3bbf842177c708f6915a855b4595018e4bd569182843ab5217745232833b3b446f96b7c92aaf8f872f733203f27c835e83cbcc4b787a751c54386b5429cc613d16c28f67dccf7589c22c57d3b49550bc364701101edc0ce4a07f68f24affe45236c1e63aba3b6a"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0xc0, 0x20000000}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)="ce223aa2ad2520c2f8ade59e5bb02b3c7d67ac09115026d9a6ba08d8259758c6c21c71cf88770608788b7a68d5b26cccbb33f69e2c785d6d6080883ce78e8b1d90e7680846cdf14f44e190e931f58d0100c9a16255de391f184cf2a29aa54269d645dfa325beb58232ce5654ede92062039f85afc0d9e237f3f8425e56e7c3f1decf201586652df6c818b69c4bd3e4e724ac087da8b49cc4f4abc47615d99781a70e", 0xa2}, {&(0x7f0000000840)="a5701aee4e94b5d963d8197009e9952c95b0a6ed34b23241aa002a53223ba4122ae6320638", 0x25}, {&(0x7f0000004100)="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", 0x159}], 0x3, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x56, "7ddd83850439c69a219c7abebbb1d892b45c13134145f7d32db3ea74752294090417a31c52f2e6c04f57135afa55489c07f8b890e92a1f674dc65d2cfa1cd99a48b356f91f66e4da3e04e0dde78aa6b4fd3d7c40249c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffffc}, @iv={0xc8, 0x117, 0x2, 0xad, "265a61460934aaaf3eda41f894f13ed368a42f0adbcc7b76f6bbeecb0c86dd389c08f5bbb023aed43545cc6b4a6bfe288769f8c337aaf5e5425a85099af0f16aba8cccafc8ca45f70dbf47570d801f2b487c9be4c0427559ae7c1910604895c4352a8c8c0859ea1d66b365469e5bce89a60da52b7671813c2cb1fabfe7b8007b1aa3b9fa635ce217b62f222d022b859d53d6b458642b74ce5204a977679925adcd9a5bd178286df42d11c1128d"}], 0x180, 0x4000}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="08ba962bc976434dcd7cafb7f47817288d54ae1330a522f0386a95b5e38afac0801b184049ed97144115669ccefacf6f7d20f58054518b7b91772ca7f7b0d46855ee921e4078a552f2916842abdf88e20a540a7823991fc13bb277f12d713cf17d2f2a85da25da70c9f5a62f", 0x6c}, {&(0x7f0000000b40)="d0552fdb0717ff2877ddde72cc0090c7d392eac7fe3aa1bfeb11a7ccfb63bd59b5be25927901dd4e48517d7dab7ee9", 0x2f}, {&(0x7f0000000b80)="3bb6106fc41d6afe2c64bf90c9bf1d0d4b410ebc25beab9ecdac339bf9d310c2d7ce54943211a7ed7f2716355f06aed1dd58e7f399ea42251bcd0c1d9e00f5419c6129657b22d50ecc5e72e88b1bb225562a31880a57883163115a36", 0x5c}, {&(0x7f0000000c00)="59e5644777ff43a98e7d3e42da444b7b2b8232b8747b65367740b09867083dcbc85cd30dcc82807f2f747a88be5db33208ba6cf0d68fdf61fa89cb63b2ef734be0d377735dd7d790b557114e43726e8f1a2e81467a538ce797ea6596f69653fd049e5d0e90c7b571b42273c74941cc3647c5cc327e93b6c39ae85cf3f531aa29ec2eca24ba6df847ddc1b9", 0x8b}, {&(0x7f0000000cc0)="6eae5e389fc53cb6e1e3879820b5e5194f5051d7c8a35bdc8a75a2b2c386df29981ea69e344a01ad97850f2d37408c0b40b6d9fc164e949a5d5ab493885c5749cd09558e4218bf925b9811e5435ec12a44490956e7f3d7e503a4cef1ca96d762950eb489f46faa85a76a52a9b01fb55de4ca2f3e678a791ecf8cb3bdf019b42056b13fbe2b03a24589eab734a8b4b35b80782d2642197075f680d9313b13f44a1ff4faeb8ad639511fd355e3cddfb4332c0637b232d389fb3dadfc555a448c20e4a15ca1e605383c6b7b70fb034cf048de764ab0594abcbda15a6446a1590f0ebe", 0xe1}, {&(0x7f0000000dc0)="b28db4b3b7eedc49d7575144014c525f05161f16a8f7d801852bedc5a0274ae2af1e7546e989bf0a69b160a549c39df057df3ee208d474efdbcc946dfb59a45c4feb3d7a9ec62719a4f1f81b1a164ed1240e70db1e617ab55d0abdbbdb95e5b4032e4dbd113a39266089ed1f1c60f31d8d7cba7f7e6c40dde1a61c1ae0036f9bcfe9d0262d55224c9c497fb72ef24a6a996433c8efa697b76940e9757bf215714c24af38c96d5a5ff18b12873019880d13c0", 0xb2}], 0x6, &(0x7f0000000f00)=[@assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x20, 0x117, 0x2, 0xa, "5256850e35b35bb71b9c"}], 0x38, 0x4010021}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f40)="907dd6ac3d86c0e85e047ce6f9f8af3ddd913bc30af97c69cec522f4199a14df09614cd9873d25c07e0f3432e76356d295b404770a07be4fdba5ff77a280a465371a611080fac2550df64dd69ee1d158ac23cf3564f21e37d133cac99fbed986d162e76bfff7016bdfb2f3ec53e89ae0ee32c45161db1a03a2a2279fb84ad7a9533c67e5c8c4afd9bd9b4604effcf3d7316a5bce7b9993e2ca339c6306046093c6bf6b6b31da373f2bc65a9bcf07e5d2", 0xb0}, {&(0x7f0000001000)="d5d4917eb59a12cb4effd4cef7f54c292b55ee2cbfe1be0c", 0x18}, {&(0x7f0000001040)="e2", 0x1}, {&(0x7f0000001180)="e09086a8cb26d353914cfe5cad3d0b08580313a83d78e61bb600860d663e15bb4704f4ea85cabf75fac67ad74fd30c144e9a1490c4ec5dd9ad6d372d012664b1d487ebfcb2c48ba38e669d2ea163f03911b3f0303b95da43bca3cd4ad628d4548140d372c7fcf9d02f0787ca313586c8e10aafbc3992d9d6e3ac74f8dae8f158fe026d22e1c78d4a61c8469ae41d48f402457f154b69f48fd4242de6603395df21c8bdb2a98e1f936ae1c89dbff231333411a4c1e13123b84a1e77bacf029718dc8e30aa73ce4f0485d0c4f965a537d6b41e6b6b", 0xd4}, {&(0x7f0000001080)="ad3c70d7f6df2c2734bbc40f8e2a227ca56421c2e9acd7cb968d2e24a5b58d2676", 0x21}, {&(0x7f0000001280)="b531d9b4b128bf1109f15a0c9ecf46cca4616ca968f14184a33548e152d1fd8ddc3d535926e85b72ae7826490c480c22d2a9b0bdcce93a4e5f83e9fe8865a05e314090bc818f41b085dce89b96a31bc7971e8c39ece1ee10f90f72fa3f9104d07c797f77aa436409763f714935fbd83f75882edaca94e2d12f87b74e55f75da73b21e79f56ae326711a0f470ba5a52be81a96b66c8043c882e0a3fcc09305bc1f6d7c2ae84b80d3ffc7e192f1783eebf42c66a94e1b9a805e373289e54c551451e6f55a636aa3f1862", 0xc9}], 0x6, &(0x7f0000001380)=[@iv={0x108, 0x117, 0x2, 0xed, "9f1c1f071df8295d89f2ff81c59cda23b2965211c8070c19108aa3c2a6ec77dc2fb17cb18f0f9fbbbb10f90ad57091b8095dca9a0a8fe8ee0a3ea9572f4d15e977a05e85151c96f083c1e2aff653a3bf42c07b92d705366cda1886007b7db6d702ed6f0313c4911a36aaeea3eca4a7181408a52523d6a1becbcd151efbc9d664752d2835dde6ade42fdd45bea6a729211caa5368611a7c6896db1fe3c68b8b90607db98488d0ae560d46ef258cff3681e5a6b39dea22ce89cd56fa472c491c7134f60f2dfbeef0c2c22bfdfdcd1e28927fbfa70d1c3a50ef383af295e35a70ce8a6259c8fbc037a93e7a92585d"}, @assoc={0x18}], 0x120, 0x20048050}, {0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="c84ecd98dbc6e59ec65b66d61301bac2dda3242180f8b095f34e0f9f0c92fb86214b11f1245aa2aae55dc9c59938598b2800955b5f3c27cce6610ce3028246fc2b4904b08f0ee5362c0c7ff77d8043bccef38ae2354786ddcebacfd9620771d27471721fca2c", 0x66}, {&(0x7f0000002540)="8a78e11b2a1ab81e2e86b21ca988315adc2b44500f2f233334383d1ebf852a7b8111d8cdd93b673d030c96b994b16410159cd4e000367ac7147a9eb4a41c46e7fc7d7bb4c767084342090298fdf4cfdc33c7a7578f027f3a364e07a667ffe0d4ca7980a87a63bd588329592224daca7104a477d2174fe422aef360d34e79bb25", 0x80}, {&(0x7f00000025c0)="240840f19953e2247e6e226910ead659a4a34fc7a52407ff61384a4315b654701ac82972681377a08ae10bc0f94ba7a8db87ee62bafd6c02b07e63d02dfd175663aa596d1e3aa469e3add2a97379fcced77374b460962e7dc05ffab8807cadab11b05d58d457b705327020b1806c859ecb03552d3b23f88011ee476d9f5928d4dfafdee5654e79e8babbb0bd25f7e941eabefbc3840841941d9d27b949d8024b93af05ccb7b7cfd8f179230ccb875fa20198a51827a516e75f031b86ca95cf33ff0fa814812a524872bbfe52a9175a32", 0xd0}], 0x4, &(0x7f0000002700)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x30, 0x8000}, {0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002740)="83c525dfb21a73c008ab9bf592d56360664696610e170db36223199a78d3e9649d6079f16f205fe9aaf36b656d11225a0c1e8844c818964d70f9e0896bad28fab0bb4a3d0c4927d087ad27f10d32de02f2f362a02844a399b540a9e4ea620fe3c87c6149aadc174d347cec29365b1919abea45bc4dc9cd74e173ee83", 0x7c}, {&(0x7f00000027c0)="9c4b3d700bce8beb97a1d01626a7a1f092cb180ee60de743999f85c532d0", 0x1e}, {&(0x7f0000002800)="79c2833bbcaff83566db35003077409d425d65951aefbc837a434924c41964a0d045690e1b56bb04cddaab3116bb675fe6d6af50184b7edd224554730cb2874c2ee5e1e940996f323b71e21c85f34a1d749d917edc22f9755d7f22dcc3cfd9bdadb02683def2c24a19dc7d98e395c5393b08f0a060c3f241", 0x78}, {&(0x7f0000002880)="d8f99f6b1df517aaa777aaebedb4999de1ae", 0x12}, {&(0x7f00000028c0)="08b9a760eeec9c14b011fcafa77613bb5701ee65778fc0eddd72781bc0b9b5cf62b09b1e0785cad04bea6a7f75378b0127ccbed4a5cdbc76b10424cb93dec2e331413787dbd1ad3b55756d857d197f9788ce5355a724237217303b94a772587fd4968085c222fc0560cb437e3a1e427b74d6d80732b48f1e208ee87f303d62f5f7dc92b039d3055ce0bf48533ad5e1234b1507d90f17bd93f6eff7aaba", 0x9d}, {&(0x7f0000002980)="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", 0x1000}], 0x6, &(0x7f0000003a00)=[@assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0xc233}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xae0}, @op={0x18}, @iv={0x118, 0x117, 0x2, 0xfd, "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"}], 0x1c0, 0x2}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003bc0)="b78ccfebd023f05774725b944c28684d10ac37a04b5954dd61f2853ea74f91b6b82e000bb089b6e0100a7fe4bd8436cac586c643afa637bb967988f82341e898147f9d39fd21e4496df1d376132ed238dbdae702cbd7e998dcc55bad3073cf28023d44a9f93d0d96af48d7b8de2099fdb2", 0x71}, {&(0x7f0000003c40)="067aa0e532b42b9433e9eedb4334112bc3e4800ed20b2696d41aaa770c22d7d07985336ac9e8d235d35fd275885530996b7d8a2ed7541452a9eeed57ab3a3f70926d", 0x42}, {&(0x7f0000003cc0)="f9458e3b514f5afcc4cc0071a29d7a37640660f3", 0x14}, {&(0x7f0000003d00)="8f4dfdb2815b10b97d80c2bf319e092efe179c2c4d6a062b2cb4445e0bdab543035501786376b2828c835f1488073ec6dea1decb282c33b77736acce2c19bee1629419cc2613c04856ce6808156dbcc18ebf1d8cc4f47cca535e8f5d71650266114c76de628bc13e511f36e058fc509cde7620b2c8069b68c664c673", 0x7c}, {&(0x7f0000003d80)="e68186302cf0fb1a8d5f10b81a268234ebb1b1311c425ec766aba7a9b982aff89c24ad59363f408d5c3b456de1de29e0ed91baa8dabe1f6779c2", 0x3a}], 0x5, &(0x7f0000003e40)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xb}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x28, 0x117, 0x2, 0x11, "cf4d1042802ebcef529a73662a30f965ae"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x100, 0x24000000}], 0x8, 0x20000000) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x1, @local}}, 0x1e) connect$pptp(r4, &(0x7f0000000140)={0x18, 0x2, {0x0, @remote}}, 0x1e) connect$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 653.416154ms ago: executing program 0 (id=2764): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x3, 0x9) (async) r1 = socket(0x2, 0x3, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) (async) sendmsg$inet(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) sendmmsg$inet(r4, &(0x7f0000004780), 0xf, 0x800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0x0, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7d, 0x6]}}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002000000000000000000"], 0x3c}}, 0x0) 597.051721ms ago: executing program 5 (id=2765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c9c41, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c04", 0x54}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$l2tp6(0xa, 0x2, 0x73) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r10, 0x0, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) 567.250457ms ago: executing program 6 (id=2766): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0xffff0000, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) listen(0xffffffffffffffff, 0x5bb) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000580)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 491.371028ms ago: executing program 6 (id=2767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00030040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRESOCT=0x0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20000810) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e0000000002000007000000ff7f000000100100", @ANYRES32=0x1, @ANYBLOB="7f3382d0a8670000fe00000000000000000000007ea149a23c57df14ad08f5437936d7147cb6b3ef5b5b186cf00097696dfcf5848450dff0c4f294b011ba3a481c3fbee4184a08467ef336324b8a0c785da852179cc2f29189437bfb84a7fe1e5b7c91d6bb0f395d974acf260eee5130950bf1d0e2abb9790dbbbbc595535e8ad3c1c655c0f4a2", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0300000003000000000000000100"/24, @ANYRES32, @ANYBLOB], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) splice(r5, &(0x7f0000000540)=0x9, r6, &(0x7f00000005c0), 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0xc00, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xfffffffb}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4004) r8 = accept$packet(r3, 0x0, &(0x7f0000000040)=0x56) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) epoll_create1(0x80000) 409.1285ms ago: executing program 4 (id=2768): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x891b, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x20000000, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) recvmmsg(r3, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4f9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) close(r2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e00020000007f000001000000000000000002000100000000000009ae02000000362ffcd029cbd30501c0f90005000000000002000000e0000001e4c0a9fc40b2e3e44e0e2a19903fabcb89fe0c0000000000000014b7d2e26d2c2b631cbc1ca276afcab333377182efdc821652bbaf1e171c925901a06762568f6cf897a6ba00a5593c9de6df32f5a854f305106751432587c5e2f74d183187ec6a23d1474c8afe3eeb503d431b892beefd7717d0f7392da2982776af05368b04000000000000006f4561f3a792cb10c6e8a1089d9821b3ad0912c9"], 0x50}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000000c0)={0x3, 0x5, 0xd5, &(0x7f00000001c0)=""/213}) read(r1, &(0x7f00000002c0)=""/187, 0xbb) ioctl$sock_ifreq(r1, 0x8937, &(0x7f00000003c0)={'nr0\x00', @ifru_data=&(0x7f0000000380)="b2bdcf45d756a74fb2e4d91b6f51fcd27f11984cca7a4276aab74acea4daa360"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x6}, @in6={0xa, 0x4e23, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x54) 407.565892ms ago: executing program 0 (id=2769): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x1, 0x4}, &(0x7f00000000c0)=0x5a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087}, 0x90) 341.696342ms ago: executing program 6 (id=2770): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}}, 0x48004) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) 268.374884ms ago: executing program 4 (id=2771): socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="6a55235104d74150b650acfdd8bae9b9ad56b6c5821fee9d", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) 200.994248ms ago: executing program 0 (id=2772): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f00000008c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x800, 0x1, 0x0, 0x3, 0xd, 0x4, 0x4, 0x8, 0xffffffff, 0x6, 0xc, 0x2e, 0x4790, 0x4d2, 0x4, 0xc, 0x4d, 0xe4, 0x7, 0x0, 0x9, 0xffff, 0x8, 0x93, 0x6, 0x7, 0x4, 0x5, 0xe, 0x8001, 0x5, 0x4, 0x1, 0x0, 0xffff065b, 0x7000, 0x8001, 0x8f, 0x8, 0x0, 0xabfb, 0x2, 0x4, 0xfffffffa, 0x5, 0x7, 0x7, 0x9, 0xfcef, 0x0, 0x0, 0xf27, 0x6, 0x73, 0x3, 0x30, 0x0, 0xfffffff7, 0x6, 0xd, 0x5, 0x5, 0x7, 0x6, 0x7, 0x5, 0x7, 0x7, 0x28, 0x3, 0x2, 0x8, 0x4, 0x3, 0x100, 0x8, 0x4, 0x8001, 0x7fffffff, 0x7, 0xfd, 0x9, 0x1, 0x3, 0x0, 0xfffffff8, 0x100, 0x3d, 0x865, 0xffffffff, 0x1, 0xfffffffe, 0x2, 0x6, 0x3, 0x534b, 0x4, 0xf, 0x10001, 0xc, 0x1, 0x80000000, 0x6, 0x2, 0xf, 0xbe0, 0x2, 0xe0, 0x351, 0x800, 0x5, 0x2, 0x9, 0x100, 0xfff, 0x100, 0xe, 0xa0a, 0x2, 0x4, 0x7, 0x6, 0x8, 0xa, 0x10, 0x7, 0xfffffffd]}}) 152.951518ms ago: executing program 6 (id=2773): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$netlink(0x10, 0x3, 0x9) setsockopt$bt_BT_VOICE(r0, 0x12, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv6=@dccp_packet={0x2, 0x6, "daff06", 0x16, 0x21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[], {{0x4e22, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x8, 0x0, "9004e0", 0x80, "75dbe4"}, "cfd440de0671"}}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='f2fs_get_victim\x00', r5, 0x0, 0x7}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000160a010800000000000066d277c3ceb42dd015000002000000a46e548bb3d1ec5d000000000900010073797a30000000000c0003800800024000000000140000001100010000000000000000000000000a690dfe31bc0354f1eefa38c9aeea7b1b7fc430055a766e6e77a934706dbdbd53be9a47d7415f338938f5c318ebfec7658450844314b30f4f07efb072a5ae14a28afa04fb308dc82bcf"], 0x60}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 125.552291ms ago: executing program 4 (id=2774): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async, rerun: 32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="2d33fd9528dddd2781625ed338d6fd5614bebc9789f2c22ba3589e7cac76bfa92aa7d66fa6c9847beacfd2791be000fdf40964d085bf22f434db551d1e7f5805783ff5db7709520c407235af1d778318131b34cf650dabdbd701db060950fcfc", 0x60}, {&(0x7f0000000100)="cb6b26c3957badef84105bd624617b620e14e3aa0e8ad7d182bea3f9d9c5af2f222ff0fe9aa27922f024dcdb88a5ec45c6295dd37f46d98d23b84008eb7e15ee753feb197b9845a3fcbadda3fa809320c0b361666310c61c38bfdd1f15f55d03c412fdfdf2650ebde5ff32d013989bb9e5cc78ba0db196ce9c5c8abe8bf6cd05bfc6ea52ea36ee0a09635a7332e6581713f3c1a2ea02f3e270c4303b2f855a", 0x9f}, {&(0x7f0000000240)="400b6136aefcf83c36e0562efb088bec50d9ae249aa209a431a6010641968b04c0cf9efbcd613418c3816bc6ce85c6ef0fc618eb7c473f49ec3b1403d3d265c44d7d9c251c92da3f0a34f5b672a03b70dafff265b7d3c432d23e41c73dcc40e988745256b734dd1f30af8932e6ba8bd4b0c717544e4bfe9c58a4ba0abcf8d18835f55e78584a1fda0c88973ad50577bb8ed9877c1ad609a58facb1269c", 0x9d}], 0x3) (rerun: 32) 40.475426ms ago: executing program 0 (id=2775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0xb, 0x0, &(0x7f0000000640)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xc, 0x9, 0x2, 0x208, 0x8}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x0, 0xda, "cad9d9a7d0a4b7bd19cbe61b1d5a2c58b1968aca91338768eeb0d3b5132975b7859d2e7ff70d042df1951cd3d32e4f42b4e67bd4e195cdd7c2f78812ff2590f92f9af9a8c63fa5e67c96975eceadd1ff47e90131ddb9a2fbfe85c02c1b97e0d2a2c319874d79ac4f20e6d37f023ecbbd212bf1eaccd7f59b8e1db7ca29d2d0fbbab8230653ba4e376806c0d35694c525a28ec70888c3b7085b7f31c09d28b4ca47d9167d180a285b7b44edd97a726bebc880ebb4a675d44da56e87e68f766bcc43cea4988f930f122d50d47e64061139476b94b5e8d2a5a645b9"}, 0xe2) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) 0s ago: executing program 4 (id=2776): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x4041) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x401, 0x8, 0x2b78, 0x4, 0x0, 0x2, 0x8000000, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r8, 0x4, 0xff}, &(0x7f0000000400)=0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@getchain={0x3c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {0xfff3, 0x4}, {0x0, 0xd}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="06fefc00", @ANYRES16=r13, @ANYBLOB="010000000000000000002c00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c000000502f4134cc095362ebfe5f29cee772568503000000000000008a35b4105564563a82e0c74abb8c4d00ff9d689f8e85d78e5e93a2dad7050fb6bcd5453b0a1361e405b22ddcd2ea319e64e08083e48424cafd108a6b7577310af0ff7a", @ANYRES16=r13, @ANYBLOB="080025bd7000fedbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044800) (async) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x200000000000016e, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) kernel console output (not intermixed with test programs): ich could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.604670][ T8461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.761399][ T8554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.788338][ T8461] hsr_slave_0: entered promiscuous mode [ 138.796467][ T8461] hsr_slave_1: entered promiscuous mode [ 138.804783][ T8461] debugfs: 'hsr0' already exists in 'hsr' [ 138.810838][ T8554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.821311][ T8461] Cannot create hsr debugfs directory [ 138.922563][ T8561] netlink: 48 bytes leftover after parsing attributes in process `syz.2.758'. [ 139.082048][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 139.213986][ T8572] veth3: entered promiscuous mode [ 139.249091][ T8575] veth3: entered promiscuous mode [ 139.288184][ T8578] vlan2: entered promiscuous mode [ 139.293404][ T8578] bridge0: entered promiscuous mode [ 139.299429][ T8578] vlan2: entered allmulticast mode [ 139.304743][ T8578] bridge0: entered allmulticast mode [ 139.312157][ T8579] can: request_module (can-proto-3) failed. [ 139.521556][ T8585] netlink: 'syz.5.763': attribute type 4 has an invalid length. [ 139.557646][ T8585] netlink: 'syz.5.763': attribute type 4 has an invalid length. [ 139.601863][ T8461] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 139.643883][ T8461] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 139.687178][ T8461] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 139.749108][ T8461] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.780064][ T8593] syzkaller0: entered promiscuous mode [ 139.790752][ T8593] syzkaller0: entered allmulticast mode [ 140.191457][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.283087][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.295816][ T5832] Bluetooth: hci6: command tx timeout [ 140.352968][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.360173][ T8114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.404330][ T1310] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.411527][ T1310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.440270][ T8636] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 140.466592][ T8636] netlink: 228 bytes leftover after parsing attributes in process `syz.0.777'. [ 140.572607][ T8634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'. [ 140.678947][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.779'. [ 140.773731][ T8657] netlink: 'syz.5.781': attribute type 11 has an invalid length. [ 140.807908][ T8657] tipc: Failed to remove unknown binding: 66,1,1/0:3818975877/3818975879 [ 140.861094][ T8657] tipc: Failed to remove unknown binding: 66,1,1/0:3818975877/3818975879 [ 141.056129][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.785'. [ 141.140261][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.784'. [ 141.169095][ T8665] syzkaller0: entered promiscuous mode [ 141.189843][ T8665] syzkaller0: entered allmulticast mode [ 141.201943][ T8667] tipc: New replicast peer: 255.255.255.255 [ 141.212351][ T8667] tipc: Enabled bearer , priority 10 [ 141.264872][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.326549][ T5883] tipc: Node number set to 3481338284 [ 142.388772][ T5832] Bluetooth: hci6: command tx timeout [ 142.669247][ T8700] netlink: 'syz.4.793': attribute type 2 has an invalid length. [ 142.699176][ T8700] netlink: 244 bytes leftover after parsing attributes in process `syz.4.793'. [ 142.756699][ T8704] netlink: 'syz.4.793': attribute type 2 has an invalid length. [ 142.778172][ T8704] netlink: 244 bytes leftover after parsing attributes in process `syz.4.793'. [ 142.871845][ T8714] IPVS: length: 8 != 1152 [ 142.896839][ T8713] x_tables: duplicate underflow at hook 2 [ 143.682821][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 144.460132][ T5832] Bluetooth: hci6: command tx timeout [ 144.556770][ T8726] u: renamed from veth0 (while UP) [ 144.563744][ T8727] veth0: entered promiscuous mode [ 144.613560][ T8743] veth3: entered promiscuous mode [ 144.728520][ T8744] veth3: entered promiscuous mode [ 144.757105][ T8750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.804'. [ 144.771941][ T8728] veth0: left promiscuous mode [ 144.859351][ T8461] veth0_vlan: entered promiscuous mode [ 144.934872][ T8461] veth1_vlan: entered promiscuous mode [ 144.998487][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.807'. [ 145.036547][ T8758] SET target dimension over the limit! [ 145.122648][ T8461] veth0_macvtap: entered promiscuous mode [ 145.187625][ T8461] veth1_macvtap: entered promiscuous mode [ 145.243975][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.286748][ T8771] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 145.296100][ T8461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.307807][ T8771] bridge0: port 3(team0) entered blocking state [ 145.314260][ T8771] bridge0: port 3(team0) entered disabled state [ 145.354893][ T8771] team0: entered allmulticast mode [ 145.381624][ T8777] netlink: del zone limit has 4 unknown bytes [ 145.390833][ T8771] team_slave_0: entered allmulticast mode [ 145.405950][ T8771] team_slave_1: entered allmulticast mode [ 145.415013][ T8771] team0: entered promiscuous mode [ 145.421284][ T8771] team_slave_0: entered promiscuous mode [ 145.432941][ T8771] team_slave_1: entered promiscuous mode [ 145.459140][ T8771] bridge0: port 3(team0) entered blocking state [ 145.465594][ T8771] bridge0: port 3(team0) entered forwarding state [ 145.524075][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.815'. [ 145.548646][ T1310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.577464][ T8115] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.604289][ T8115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.665917][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'. [ 145.675329][ T8791] netlink: 44 bytes leftover after parsing attributes in process `syz.2.816'. [ 145.685773][ T8789] veth3: entered promiscuous mode [ 145.710304][ T8115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.765114][ T8785] veth3: entered promiscuous mode [ 145.925716][ T8117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.933572][ T8117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.981865][ T8800] netlink: 40 bytes leftover after parsing attributes in process `syz.2.819'. [ 146.022505][ T8800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.819'. [ 146.040817][ T8800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.819'. [ 146.089325][ T7890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.105900][ T7890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.121542][ T8808] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 146.398523][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.828'. [ 146.417752][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.828'. [ 146.500255][ T8840] netlink: 60 bytes leftover after parsing attributes in process `syz.6.720'. [ 146.606159][ T8829] netlink: 80 bytes leftover after parsing attributes in process `syz.4.827'. [ 146.868827][ T8854] can: request_module (can-proto-4) failed. [ 146.995099][ T5891] IPVS: starting estimator thread 0... [ 147.064098][ T8866] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 147.090938][ T8863] IPVS: using max 32 ests per chain, 76800 per kthread [ 148.234799][ T8905] netlink: 'syz.2.846': attribute type 21 has an invalid length. [ 148.721335][ T8930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.849421][ T8937] bond1: option resend_igmp: invalid value (32767) [ 148.859767][ T8937] bond1: option resend_igmp: allowed values 0 - 255 [ 148.868377][ T8937] bond1 (unregistering): Released all slaves [ 149.334094][ T8966] netlink: 'syz.6.864': attribute type 2 has an invalid length. [ 149.384343][ T8966] 9: entered promiscuous mode [ 149.559805][ T8979] syzkaller1: entered promiscuous mode [ 149.578028][ T8979] syzkaller1: entered allmulticast mode [ 149.891249][ T9002] Cannot find add_set index 0 as target [ 150.320654][ T9021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.524279][ T9042] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 150.532923][ T9042] __nla_validate_parse: 14 callbacks suppressed [ 150.532940][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.889'. [ 150.555109][ T9040] smc: net device vcan0 applied user defined pnetid SYZ1 [ 150.759097][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 150.803323][ T9056] sctp: [Deprecated]: syz.2.894 (pid 9056) Use of int in maxseg socket option. [ 150.803323][ T9056] Use struct sctp_assoc_value instead [ 150.894223][ T9059] sctp: Trying to GSO but underlying device doesn't support it. [ 150.906848][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.896'. [ 151.034284][ T9065] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 151.118238][ T9065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.164789][ T9076] veth8: entered promiscuous mode [ 151.261706][ T9065] veth10: entered promiscuous mode [ 151.291775][ T9065] bond3: (slave veth10): Enslaving as an active interface with a down link [ 151.639982][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 151.649955][ T9111] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 151.684919][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 152.077462][ T9135] netlink: 52 bytes leftover after parsing attributes in process `syz.5.918'. [ 152.093998][ T9135] netlink: 52 bytes leftover after parsing attributes in process `syz.5.918'. [ 152.488103][ T9151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.866398][ T9160] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 153.064006][ T9187] netlink: 332 bytes leftover after parsing attributes in process `syz.4.932'. [ 153.129911][ T9189] tipc: Enabled bearer , priority 0 [ 153.137542][ T9189] syzkaller0: entered promiscuous mode [ 153.143505][ T9189] syzkaller0: entered allmulticast mode [ 153.159453][ T9189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.933'. [ 153.194830][ T9189] tipc: Resetting bearer [ 153.226050][ T9188] tipc: Resetting bearer [ 153.252036][ T9188] tipc: Disabling bearer [ 153.630700][ T9213] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 153.642789][ T9213] vlan0: left promiscuous mode [ 153.643840][ T9219] netlink: 'syz.5.942': attribute type 1 has an invalid length. [ 153.666379][ T9213] veth3: left promiscuous mode [ 153.673540][ T9213] veth5: left promiscuous mode [ 153.679220][ T9213] veth7: left promiscuous mode [ 153.686800][ T9213] veth8: left promiscuous mode [ 153.691931][ T9213] veth10: left promiscuous mode [ 153.888130][ T9226] FAULT_INJECTION: forcing a failure. [ 153.888130][ T9226] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.901805][ T9226] CPU: 0 UID: 0 PID: 9226 Comm: syz.0.943 Not tainted syzkaller #0 PREEMPT(full) [ 153.901828][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.901838][ T9226] Call Trace: [ 153.901845][ T9226] [ 153.901853][ T9226] dump_stack_lvl+0x189/0x250 [ 153.901883][ T9226] ? __pfx____ratelimit+0x10/0x10 [ 153.901903][ T9226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.901925][ T9226] ? __pfx__printk+0x10/0x10 [ 153.901944][ T9226] ? __might_fault+0xb0/0x130 [ 153.901979][ T9226] should_fail_ex+0x414/0x560 [ 153.902009][ T9226] _copy_from_user+0x2d/0xb0 [ 153.902030][ T9226] __sys_connect+0x123/0x440 [ 153.902054][ T9226] ? __fget_files+0x3a0/0x420 [ 153.902072][ T9226] ? __pfx___sys_connect+0x10/0x10 [ 153.902109][ T9226] ? __pfx_ksys_write+0x10/0x10 [ 153.902139][ T9226] __x64_sys_connect+0x7a/0x90 [ 153.902164][ T9226] do_syscall_64+0xfa/0xfa0 [ 153.902183][ T9226] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.902203][ T9226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.902220][ T9226] ? clear_bhb_loop+0x60/0xb0 [ 153.902242][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.902266][ T9226] RIP: 0033:0x7f541c98efc9 [ 153.902283][ T9226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.902297][ T9226] RSP: 002b:00007f541d7a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 153.902317][ T9226] RAX: ffffffffffffffda RBX: 00007f541cbe5fa0 RCX: 00007f541c98efc9 [ 153.902329][ T9226] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000004 [ 153.902340][ T9226] RBP: 00007f541d7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.902351][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.902361][ T9226] R13: 00007f541cbe6038 R14: 00007f541cbe5fa0 R15: 00007ffff0865108 [ 153.902394][ T9226] [ 154.111283][ T9230] netlink: 'syz.5.944': attribute type 1 has an invalid length. [ 154.177684][ T9230] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.196242][ T9236] netlink: 'syz.4.946': attribute type 2 has an invalid length. [ 155.806432][ T9235] veth3: entered promiscuous mode [ 155.818810][ T9235] bond3: (slave veth3): Enslaving as an active interface with a down link [ 155.938858][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 155.966407][ T1310] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.985723][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 156.004943][ T1310] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.011586][ T9275] FAULT_INJECTION: forcing a failure. [ 156.011586][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.023835][ T1310] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.057641][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.2.957 Not tainted syzkaller #0 PREEMPT(full) [ 156.057664][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.057673][ T9275] Call Trace: [ 156.057681][ T9275] [ 156.057689][ T9275] dump_stack_lvl+0x189/0x250 [ 156.057717][ T9275] ? __pfx____ratelimit+0x10/0x10 [ 156.057738][ T9275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.057761][ T9275] ? __pfx__printk+0x10/0x10 [ 156.057791][ T9275] should_fail_ex+0x414/0x560 [ 156.057821][ T9275] _copy_to_user+0x31/0xb0 [ 156.057844][ T9275] simple_read_from_buffer+0xe1/0x170 [ 156.057875][ T9275] proc_fail_nth_read+0x1b3/0x220 [ 156.057899][ T9275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.057923][ T9275] ? rw_verify_area+0x2a6/0x4d0 [ 156.057944][ T9275] ? __lock_acquire+0xab9/0xd20 [ 156.057959][ T9275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.057981][ T9275] vfs_read+0x200/0xa30 [ 156.058002][ T9275] ? fdget_pos+0x247/0x320 [ 156.058023][ T9275] ? __pfx___mutex_lock+0x10/0x10 [ 156.058045][ T9275] ? __pfx_vfs_read+0x10/0x10 [ 156.058068][ T9275] ? __fget_files+0x2a/0x420 [ 156.058088][ T9275] ? __fget_files+0x3a0/0x420 [ 156.058103][ T9275] ? __fget_files+0x2a/0x420 [ 156.058128][ T9275] ksys_read+0x145/0x250 [ 156.058154][ T9275] ? __pfx_ksys_read+0x10/0x10 [ 156.058180][ T9275] ? do_syscall_64+0xbe/0xfa0 [ 156.058204][ T9275] do_syscall_64+0xfa/0xfa0 [ 156.058221][ T9275] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.058240][ T9275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.058257][ T9275] ? clear_bhb_loop+0x60/0xb0 [ 156.058277][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.058302][ T9275] RIP: 0033:0x7f4259b8d9dc [ 156.058318][ T9275] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.058332][ T9275] RSP: 002b:00007f425a94f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.058351][ T9275] RAX: ffffffffffffffda RBX: 00007f4259de5fa0 RCX: 00007f4259b8d9dc [ 156.058364][ T9275] RDX: 000000000000000f RSI: 00007f425a94f0a0 RDI: 0000000000000005 [ 156.058375][ T9275] RBP: 00007f425a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.058385][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.058394][ T9275] R13: 00007f4259de6038 R14: 00007f4259de5fa0 R15: 00007ffe53b6a708 [ 156.058425][ T9275] [ 156.065572][ T1310] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.408786][ T9285] netlink: 28 bytes leftover after parsing attributes in process `syz.6.962'. [ 156.455757][ T9285] netlink: 28 bytes leftover after parsing attributes in process `syz.6.962'. [ 156.668785][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.968'. [ 156.726000][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.969'. [ 156.786818][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 156.804849][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.814455][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.828446][ T9310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.836779][ T9310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.850855][ T9310] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 156.858780][ T9310] batman_adv: batadv0: Removing interface: netdevsim0 [ 156.924197][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 157.246578][ T9337] netlink: 9 bytes leftover after parsing attributes in process `syz.6.979'. [ 157.254632][ T9340] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 157.411424][ T9349] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 157.447332][ T9349] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.468688][ T9349] bond5: (slave geneve3): making interface the new active one [ 157.478292][ T9349] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 157.512436][ T1310] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.532076][ T1310] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.577568][ T1310] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.588465][ T1310] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.610098][ T9358] netlink: 'syz.4.983': attribute type 3 has an invalid length. [ 157.635617][ T9358] netlink: 766 bytes leftover after parsing attributes in process `syz.4.983'. [ 158.484805][ T9388] netlink: 'syz.5.989': attribute type 1 has an invalid length. [ 158.592222][ T9371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.604361][ T9371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.630122][ T9371] bond0 (unregistering): (slave team0): Releasing backup interface [ 158.662264][ T9371] bond0 (unregistering): Released all slaves [ 158.756099][ T9382] lo: entered promiscuous mode [ 158.786866][ T9382] tunl0: entered promiscuous mode [ 158.792346][ T9382] gre0: entered promiscuous mode [ 158.816161][ T9382] gretap0: entered promiscuous mode [ 158.822125][ T9382] erspan0: entered promiscuous mode [ 158.832790][ T9382] ip_vti0: entered promiscuous mode [ 159.185722][ T9421] netlink: 'syz.6.999': attribute type 30 has an invalid length. [ 159.510219][ T9442] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 159.524282][ T9442] bond2 (unregistering): Released all slaves [ 160.017580][ T9481] Unsupported ieee802154 address type: 0 [ 160.124852][ T9484] netlink: 'syz.5.1018': attribute type 1 has an invalid length. [ 160.216790][ T9491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.239144][ T9491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.417151][ T9499] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 160.475282][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.485963][ T9510] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 160.532355][ T9513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.557981][ T9513] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 160.873445][ T9527] tipc: Enabled bearer , priority 10 [ 160.899921][ T9529] pim6reg: entered allmulticast mode [ 161.002353][ T9534] xt_hashlimit: size too large, truncated to 1048576 [ 161.049957][ T9540] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 161.164181][ T9540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.230165][ T9543] __nla_validate_parse: 8 callbacks suppressed [ 161.230181][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1038'. [ 161.312134][ T9545] veth3: entered promiscuous mode [ 161.324245][ T9545] bond3: (slave veth3): Enslaving as an active interface with a down link [ 161.345695][ T9543] netlink: 'syz.6.1038': attribute type 1 has an invalid length. [ 161.423205][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'. [ 161.578158][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1044'. [ 161.872224][ T9579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1050'. [ 161.907328][ T9587] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.985655][ T10] tipc: Node number set to 3113639405 [ 162.553010][ T9626] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1064'. [ 162.889797][ T9646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'. [ 162.919647][ T9648] tunl0: entered promiscuous mode [ 162.929071][ T9648] netlink: 'syz.4.1067': attribute type 3 has an invalid length. [ 162.975587][ T9648] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1067'. [ 163.120390][ T9655] lo: entered promiscuous mode [ 163.133931][ T9655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.195068][ T9659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.353186][ T9665] netlink: 'syz.6.1073': attribute type 1 has an invalid length. [ 163.465048][ T9665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.702595][ T9667] veth3: entered promiscuous mode [ 163.720595][ T9667] bond2: (slave veth3): Enslaving as an active interface with a down link [ 163.852002][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'. [ 164.159724][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1079'. [ 164.246518][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1079'. [ 164.320123][ T9696] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 164.387552][ T9696] netlink: 'syz.2.1083': attribute type 11 has an invalid length. [ 164.749528][ T9724] veth0: entered promiscuous mode [ 164.760492][ T9723] veth0: left promiscuous mode [ 165.763941][ T9747] sctp: [Deprecated]: syz.6.1098 (pid 9747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.763941][ T9747] Use struct sctp_sack_info instead [ 166.191219][ T9801] tipc: Enabled bearer , priority 0 [ 166.245683][ T9801] syzkaller0: entered promiscuous mode [ 166.251191][ T9801] syzkaller0: entered allmulticast mode [ 166.367768][ T9806] tipc: Resetting bearer [ 166.404493][ T9800] tipc: Resetting bearer [ 166.476671][ T9800] tipc: Disabling bearer [ 166.534879][ T9822] __nla_validate_parse: 8 callbacks suppressed [ 166.534896][ T9822] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.1124'. [ 166.551064][ T9822] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 166.591041][ T9817] bond5: entered allmulticast mode [ 166.596939][ T9817] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.735178][ T9834] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1127'. [ 167.068133][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 167.077553][ T9852] team0: left allmulticast mode [ 167.082424][ T9852] team_slave_0: left allmulticast mode [ 167.093020][ T9852] team_slave_1: left allmulticast mode [ 167.100209][ T9852] team0: left promiscuous mode [ 167.105074][ T9852] team_slave_0: left promiscuous mode [ 167.112014][ T9852] team_slave_1: left promiscuous mode [ 167.120000][ T9853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.129442][ T9852] bridge0: port 3(team0) entered disabled state [ 167.152078][ T9852] bridge_slave_1: left allmulticast mode [ 167.158052][ T9852] bridge_slave_1: left promiscuous mode [ 167.164308][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.191233][ T9852] bridge_slave_0: left allmulticast mode [ 167.201354][ T9852] bridge_slave_0: left promiscuous mode [ 167.208394][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.357884][ T9858] ip6gre1: entered allmulticast mode [ 167.364503][ T9861] bridge_slave_0: default FDB implementation only supports local addresses [ 167.500661][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 167.509314][ T9829] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 167.622611][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1138'. [ 167.656178][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 167.790905][ T9885] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1142'. [ 167.939945][ T9890] tipc: Started in network mode [ 167.961634][ T9890] tipc: Node identity ea44f749f0ed, cluster identity 4711 [ 167.976459][ T9890] tipc: Enabled bearer , priority 0 [ 168.006878][ T9898] syzkaller0: entered promiscuous mode [ 168.012384][ T9898] syzkaller0: entered allmulticast mode [ 168.071424][ T9890] tipc: Resetting bearer [ 168.150390][ T9889] tipc: Resetting bearer [ 168.192844][ T9889] tipc: Disabling bearer [ 168.429777][ T9928] netlink: 'syz.0.1152': attribute type 2 has an invalid length. [ 168.458425][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 168.628844][ T9937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1154'. [ 168.690061][ T9944] netlink: 'syz.4.1155': attribute type 2 has an invalid length. [ 168.740095][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 168.849156][ T9953] netlink: 'syz.6.1158': attribute type 1 has an invalid length. [ 168.920952][ T9953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.960783][ T9953] veth5: entered promiscuous mode [ 168.998052][ T9953] veth7: entered promiscuous mode [ 169.011948][ T9953] bond3: (slave veth7): Enslaving as an active interface with a down link [ 169.424740][ T9993] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 169.654404][T10006] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 169.826966][T10009] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 169.897264][T10013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 169.903747][T10013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 169.970436][T10017] xt_cgroup: xt_cgroup: no path or classid specified [ 170.016539][T10019] veth0_vlan: left promiscuous mode [ 170.062978][T10023] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 170.138313][T10019] v: renamed from vlan0 [ 170.331045][T10023] 8021q: adding VLAN 0 to HW filter on device bond7 [ 170.346210][T10043] netlink: 'syz.2.1187': attribute type 1 has an invalid length. [ 170.450565][T10035] hsr_slave_1 (unregistering): left promiscuous mode [ 170.503292][T10043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.543977][T10051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.552848][T10052] netlink: 'syz.6.1189': attribute type 27 has an invalid length. [ 170.581313][T10052] netlink: 'syz.6.1189': attribute type 27 has an invalid length. [ 170.601744][T10039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.634791][T10039] bond4: (slave macvlan2): making interface the new active one [ 170.684939][T10039] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 170.944816][T10080] tipc: Enabled bearer , priority 0 [ 170.997467][T10082] syzkaller0: entered promiscuous mode [ 171.002967][T10082] syzkaller0: entered allmulticast mode [ 171.139073][T10082] tipc: Resetting bearer [ 171.291447][T10101] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 171.401241][T10061] tipc: Resetting bearer [ 171.559799][T10061] tipc: Disabling bearer [ 171.645969][T10120] __nla_validate_parse: 8 callbacks suppressed [ 171.645985][T10120] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1205'. [ 171.692031][T10101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.748107][T10111] veth5: entered promiscuous mode [ 171.758663][T10111] bond5: (slave veth5): Enslaving as an active interface with a down link [ 171.809442][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1206'. [ 171.850366][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.850454][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1206'. [ 171.873250][T10131] Unknown options in mask b7f2 [ 171.881757][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.916839][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.957322][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.025893][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1210'. [ 172.166657][ T5492] veth0_vlan: entered promiscuous mode [ 172.189345][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1213'. [ 172.259112][T10149] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1214'. [ 172.342361][T10153] nbd: must specify an index to disconnect [ 172.459317][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.675308][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 172.716459][T10173] bond4: option resend_igmp: invalid value (32767) [ 172.723136][T10173] bond4: option resend_igmp: allowed values 0 - 255 [ 172.733452][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 172.735294][T10173] bond4 (unregistering): Released all slaves [ 172.749663][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1224'. [ 173.160793][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 173.863434][T10245] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 173.895313][T10245] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 173.912920][T10253] syz_tun: entered allmulticast mode [ 173.995352][T10253] pimreg: entered allmulticast mode [ 174.051163][T10260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.058564][T10260] IPv6: NLM_F_CREATE should be set when creating new route [ 174.065846][T10260] IPv6: NLM_F_CREATE should be set when creating new route [ 174.078881][T10251] syz_tun: left allmulticast mode [ 174.084021][T10251] pimreg: left allmulticast mode [ 174.108245][T10260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.334640][T10268] tipc: Enabling of bearer rejected, failed to enable media [ 174.426009][T10268] validate_nla: 5 callbacks suppressed [ 174.426023][T10268] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 174.512609][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.530631][T10268] bridge_slave_1: left allmulticast mode [ 174.543841][T10268] bridge_slave_1: left promiscuous mode [ 174.558169][T10268] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.748593][T10284] netlink: 'syz.4.1255': attribute type 12 has an invalid length. [ 174.760238][T10284] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 175.540794][T10322] tipc: Enabling of bearer rejected, failed to enable media [ 175.658201][T10336] netlink: 'syz.4.1273': attribute type 2 has an invalid length. [ 175.676791][T10334] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 175.711540][T10334] veth0_virt_wifi: entered allmulticast mode [ 175.776753][T10334] team0: Port device veth0_virt_wifi added [ 175.784252][ T8115] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 175.788339][T10343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.006350][T10360] syzkaller0: entered promiscuous mode [ 176.011849][T10360] syzkaller0: entered allmulticast mode [ 176.028728][T10365] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.056353][T10365] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.065962][T10365] gretap1: entered promiscuous mode [ 176.077142][T10365] gretap1: entered allmulticast mode [ 176.346346][T10384] raw_sendmsg: syz.6.1283 forgot to set AF_INET. Fix it! [ 176.534642][T10399] netlink: 'syz.5.1290': attribute type 3 has an invalid length. [ 176.613554][T10403] sock: sock_set_timeout: `syz.5.1292' (pid 10403) tries to set negative timeout [ 176.793529][T10410] ieee802154 phy1 wpan1: encryption failed: -90 [ 176.796820][T10408] dvmrp0: entered allmulticast mode [ 176.832462][T10411] ieee802154 phy1 wpan1: encryption failed: -90 [ 176.858970][T10414] netlink: 'syz.4.1289': attribute type 4 has an invalid length. [ 176.995222][T10422] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 177.161349][T10427] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 177.176670][T10424] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 177.207648][ T8115] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.226837][T10425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.335930][ T8115] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.352690][T10427] 8021q: adding VLAN 0 to HW filter on device bond8 [ 177.496262][T10431] veth12: entered promiscuous mode [ 177.519769][T10431] bond8: (slave veth12): Enslaving as an active interface with a down link [ 177.615039][T10434] veth14: entered promiscuous mode [ 177.686108][T10457] __nla_validate_parse: 11 callbacks suppressed [ 177.686125][T10457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1306'. [ 177.861155][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 177.899838][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1311'. [ 178.261613][T10499] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.325929][T10495] netlink: zone id is out of range [ 178.479603][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'. [ 178.512130][T10506] netlink: 'syz.2.1318': attribute type 7 has an invalid length. [ 178.549972][T10506] netlink: 'syz.2.1318': attribute type 8 has an invalid length. [ 178.570992][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 178.617825][T10507] syzkaller0: entered promiscuous mode [ 178.636981][T10507] syzkaller0: entered allmulticast mode [ 178.719636][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1323'. [ 179.102274][T10541] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1324'. [ 182.556486][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 182.627111][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1328'. [ 182.752339][T10554] tipc: Enabling of bearer rejected, media not registered [ 182.845708][T10568] netlink: 'syz.6.1333': attribute type 4 has an invalid length. [ 182.892519][T10570] netlink: 'syz.6.1333': attribute type 4 has an invalid length. [ 183.030032][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'. [ 183.492465][T10605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1343'. [ 183.551747][T10610] xt_socket: unknown flags 0x50 [ 183.572531][T10610] xt_socket: unknown flags 0x50 [ 183.595990][T10610] xt_socket: unknown flags 0x50 [ 183.601030][T10610] xt_socket: unknown flags 0x50 [ 183.626688][T10610] xt_socket: unknown flags 0x50 [ 183.655358][T10610] xt_socket: unknown flags 0x50 [ 183.674778][T10611] syzkaller0: entered promiscuous mode [ 183.675731][T10610] xt_socket: unknown flags 0x50 [ 183.685305][T10610] xt_socket: unknown flags 0x50 [ 183.719342][T10611] syzkaller0: entered allmulticast mode [ 184.190764][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 184.205680][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1352'. [ 184.308106][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1354'. [ 184.489799][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 184.520919][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 184.546511][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 185.222636][T10692] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1364'. [ 185.244554][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 185.259145][T10694] x_tables: duplicate underflow at hook 1 [ 185.267526][T10694] x_tables: duplicate underflow at hook 3 [ 185.379998][T10698] 8021q: VLANs not supported on syzkaller1 [ 185.569800][T10712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.806379][T10722] vlan2: entered promiscuous mode [ 185.821152][T10722] bridge0: entered promiscuous mode [ 186.090764][T10733] bond0: left promiscuous mode [ 186.104237][T10733] bond_slave_0: left promiscuous mode [ 186.113799][T10733] bond_slave_1: left promiscuous mode [ 186.271720][T10733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.426067][T10733] netdevsim netdevsim2 : left promiscuous mode [ 186.533254][T10733] gretap1: left promiscuous mode [ 186.541014][T10733] gretap1: left allmulticast mode [ 186.548359][T10733] vlan2: left allmulticast mode [ 186.553543][T10733] hsr0: left allmulticast mode [ 186.558632][T10733] hsr_slave_1: left allmulticast mode [ 186.568917][T10733] veth3: left promiscuous mode [ 186.589569][T10733] veth5: left promiscuous mode [ 186.632267][ T1310] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.651111][ T1310] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.669871][ T1310] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.813823][ T1310] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.984728][T10788] netlink: 'syz.6.1385': attribute type 11 has an invalid length. [ 187.116329][T10788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.285024][T10799] bond4: Unable to set down delay as MII monitoring is disabled [ 187.379764][T10799] bond4 (unregistering): Released all slaves [ 187.571213][T10819] syzkaller0: entered promiscuous mode [ 187.603272][T10819] syzkaller0: entered allmulticast mode [ 188.648375][T10870] syzkaller0: entered promiscuous mode [ 188.676275][T10870] syzkaller0: entered allmulticast mode [ 188.689977][T10888] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 188.997600][T10912] __nla_validate_parse: 6 callbacks suppressed [ 188.997616][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1403'. [ 190.881192][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 190.901619][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'. [ 190.944522][T10957] netlink: 'syz.4.1408': attribute type 10 has an invalid length. [ 190.984736][T10952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1407'. [ 191.021806][T10957] team0: Port device dummy0 added [ 191.128452][T10967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1410'. [ 191.504819][T10989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1416'. [ 191.738567][T10997] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1420'. [ 192.000812][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 192.152001][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1424'. [ 192.239193][T11022] xt_l2tp: wrong L2TP version: 0 [ 192.251540][T11022] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 192.271712][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 192.328702][T11028] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 192.337005][T11028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.374486][T11028] netlink: 'syz.4.1427': attribute type 4 has an invalid length. [ 192.432498][T11031] netlink: 'syz.4.1427': attribute type 4 has an invalid length. [ 192.532170][T11036] syzkaller0: entered promiscuous mode [ 192.565170][T11036] syzkaller0: entered allmulticast mode [ 192.609860][T11045] xt_hashlimit: invalid rate [ 192.612488][T11044] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 192.679615][T11044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.846310][T11044] veth7: entered promiscuous mode [ 192.864058][T11044] bond4: (slave veth7): Enslaving as an active interface with a down link [ 192.966236][T11044] syzkaller0: entered promiscuous mode [ 192.971771][T11044] syzkaller0: entered allmulticast mode [ 193.370424][T11094] netlink: 'syz.0.1442': attribute type 2 has an invalid length. [ 193.980994][T11104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.078568][T11129] netlink: 'syz.2.1454': attribute type 1 has an invalid length. [ 194.131126][T11129] __nla_validate_parse: 5 callbacks suppressed [ 194.131139][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1454'. [ 194.154269][T11129] 8021q: adding VLAN 0 to HW filter on device bond7 [ 194.240486][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1456'. [ 194.304775][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.504717][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1459'. [ 194.732192][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 194.804440][T11167] netlink: 'syz.4.1465': attribute type 25 has an invalid length. [ 194.825679][T11166] netlink: 'syz.4.1465': attribute type 25 has an invalid length. [ 195.243398][T11195] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1471'. [ 195.300346][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1471'. [ 195.330559][T11195] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 195.749373][T11224] netlink: 'syz.6.1479': attribute type 13 has an invalid length. [ 195.780091][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1477'. [ 195.791516][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1477'. [ 195.810265][T11224] gretap0: refused to change device tx_queue_len [ 195.824783][T11224] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.873102][T11232] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1481'. [ 195.923473][T11232] netlink: 'syz.4.1481': attribute type 11 has an invalid length. [ 195.950643][T11232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1481'. [ 196.004097][T11238] Bluetooth: MGMT ver 1.23 [ 196.030040][T11232] netlink: 'syz.4.1481': attribute type 2 has an invalid length. [ 196.037869][T11232] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 196.097200][T11241] netlink: 'syz.2.1484': attribute type 21 has an invalid length. [ 196.121329][T11241] netlink: 'syz.2.1484': attribute type 5 has an invalid length. [ 196.376431][ T5838] Bluetooth: hci3: command 0x0401 tx timeout [ 196.383581][T11262] syzkaller0: entered promiscuous mode [ 196.389204][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.391972][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 196.395425][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 196.415656][T11262] syzkaller0: entered allmulticast mode [ 196.449593][T11261] tipc: Enabled bearer , priority 0 [ 196.521421][T11261] tipc: Resetting bearer [ 196.551379][T11261] tipc: Disabling bearer [ 197.155982][T11315] team0: Device wireguard0 is of different type [ 197.644234][T11338] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 197.788765][T11338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 197.909249][T11338] veth9: entered promiscuous mode [ 197.918610][T11338] bond8: (slave veth9): Enslaving as an active interface with a down link [ 197.927292][T11351] FAULT_INJECTION: forcing a failure. [ 197.927292][T11351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.927337][T11351] CPU: 0 UID: 0 PID: 11351 Comm: syz.2.1512 Not tainted syzkaller #0 PREEMPT(full) [ 197.927356][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.927367][T11351] Call Trace: [ 197.927374][T11351] [ 197.927381][T11351] dump_stack_lvl+0x189/0x250 [ 197.927417][T11351] ? __pfx____ratelimit+0x10/0x10 [ 197.927437][T11351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.927458][T11351] ? __pfx__printk+0x10/0x10 [ 197.927477][T11351] ? __might_fault+0xb0/0x130 [ 197.927510][T11351] should_fail_ex+0x414/0x560 [ 197.927540][T11351] _copy_from_user+0x2d/0xb0 [ 197.927561][T11351] ___sys_sendmsg+0x158/0x2a0 [ 197.927581][T11351] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.927633][T11351] ? __fget_files+0x2a/0x420 [ 197.927649][T11351] ? __fget_files+0x3a0/0x420 [ 197.927675][T11351] __x64_sys_sendmsg+0x19b/0x260 [ 197.927695][T11351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.927721][T11351] ? __pfx_ksys_write+0x10/0x10 [ 197.927747][T11351] ? do_syscall_64+0xbe/0xfa0 [ 197.927772][T11351] do_syscall_64+0xfa/0xfa0 [ 197.927790][T11351] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.927810][T11351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.927827][T11351] ? clear_bhb_loop+0x60/0xb0 [ 197.927848][T11351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.927864][T11351] RIP: 0033:0x7f4259b8efc9 [ 197.927894][T11351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.927909][T11351] RSP: 002b:00007f4257df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.927933][T11351] RAX: ffffffffffffffda RBX: 00007f4259de6090 RCX: 00007f4259b8efc9 [ 197.927946][T11351] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 197.927957][T11351] RBP: 00007f4257df6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.927968][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.927978][T11351] R13: 00007f4259de6128 R14: 00007f4259de6090 R15: 00007ffe53b6a708 [ 197.928009][T11351] [ 198.491607][T11363] syz.5.1516 (11363) used greatest stack depth: 17832 bytes left [ 198.664917][T11385] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 198.857119][T11402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.918783][T11407] netlink: 'syz.2.1528': attribute type 1 has an invalid length. [ 198.959358][T11407] 8021q: adding VLAN 0 to HW filter on device bond9 [ 198.985094][T11412] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 198.994907][T11407] veth11: entered promiscuous mode [ 199.006253][T11407] bond9: (slave veth11): Enslaving as an active interface with a down link [ 199.029296][T11407] FAULT_INJECTION: forcing a failure. [ 199.029296][T11407] name failslab, interval 1, probability 0, space 0, times 1 [ 199.048973][T11407] CPU: 1 UID: 0 PID: 11407 Comm: syz.2.1528 Not tainted syzkaller #0 PREEMPT(full) [ 199.048997][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.049016][T11407] Call Trace: [ 199.049024][T11407] [ 199.049032][T11407] dump_stack_lvl+0x189/0x250 [ 199.049060][T11407] ? __pfx____ratelimit+0x10/0x10 [ 199.049081][T11407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.049103][T11407] ? __pfx__printk+0x10/0x10 [ 199.049126][T11407] ? __pfx___might_resched+0x10/0x10 [ 199.049144][T11407] ? fs_reclaim_acquire+0x7d/0x100 [ 199.049173][T11407] should_fail_ex+0x414/0x560 [ 199.049202][T11407] should_failslab+0xa8/0x100 [ 199.049218][T11407] kmem_cache_alloc_node_noprof+0x77/0x710 [ 199.049239][T11407] ? __alloc_skb+0x112/0x2d0 [ 199.049262][T11407] ? netlink_autobind+0xdb/0x300 [ 199.049282][T11407] __alloc_skb+0x112/0x2d0 [ 199.049310][T11407] netlink_sendmsg+0x5c6/0xb30 [ 199.049343][T11407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.049369][T11407] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.049394][T11407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.049411][T11407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.049436][T11407] __sock_sendmsg+0x21c/0x270 [ 199.049460][T11407] ____sys_sendmsg+0x505/0x830 [ 199.049483][T11407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.049509][T11407] ? import_iovec+0x74/0xa0 [ 199.049533][T11407] ___sys_sendmsg+0x21f/0x2a0 [ 199.049553][T11407] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.049611][T11407] ? __fget_files+0x2a/0x420 [ 199.049627][T11407] ? __fget_files+0x3a0/0x420 [ 199.049654][T11407] __x64_sys_sendmsg+0x19b/0x260 [ 199.049675][T11407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.049701][T11407] ? __pfx_ksys_write+0x10/0x10 [ 199.049728][T11407] ? do_syscall_64+0xbe/0xfa0 [ 199.049753][T11407] do_syscall_64+0xfa/0xfa0 [ 199.049771][T11407] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.049792][T11407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.049809][T11407] ? clear_bhb_loop+0x60/0xb0 [ 199.049830][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.049846][T11407] RIP: 0033:0x7f4259b8efc9 [ 199.049862][T11407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.049877][T11407] RSP: 002b:00007f425a94f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.049897][T11407] RAX: ffffffffffffffda RBX: 00007f4259de5fa0 RCX: 00007f4259b8efc9 [ 199.049910][T11407] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 199.049921][T11407] RBP: 00007f425a94f090 R08: 0000000000000000 R09: 0000000000000000 [ 199.049932][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.049942][T11407] R13: 00007f4259de6038 R14: 00007f4259de5fa0 R15: 00007ffe53b6a708 [ 199.049972][T11407] [ 199.072081][T11412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.122745][T11422] netlink: 'syz.5.1533': attribute type 32 has an invalid length. [ 199.357431][T11419] veth9: entered promiscuous mode [ 199.389231][T11419] bond5: (slave veth9): Enslaving as an active interface with a down link [ 199.485187][T11423] veth11: entered promiscuous mode [ 199.498006][T11423] bond5: (slave veth11): Enslaving as an active interface with a down link [ 199.516094][T11432] netlink: 'syz.2.1535': attribute type 2 has an invalid length. [ 199.543052][T11432] __nla_validate_parse: 13 callbacks suppressed [ 199.543070][T11432] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1535'. [ 199.782500][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1541'. [ 199.978654][T11459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1543'. [ 199.981268][T11461] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 200.180616][T11461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.284604][T11472] veth13: entered promiscuous mode [ 200.309185][T11489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.309462][T11472] bond6: (slave veth13): Enslaving as an active interface with a down link [ 200.316483][T11489] IPv6: NLM_F_CREATE should be set when creating new route [ 200.316561][T11489] IPv6: NLM_F_CREATE should be set when creating new route [ 200.320664][T11489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.519156][T11492] 8021q: adding VLAN 0 to HW filter on device bond10 [ 200.544484][T11497] veth13: entered promiscuous mode [ 200.557729][T11497] bond10: (slave veth13): Enslaving as an active interface with a down link [ 200.610255][T11500] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 200.627993][T11500] team0: Device macvtap1 is already an upper device of the team interface [ 200.743389][T11492] veth15: entered promiscuous mode [ 200.757283][T11492] bond10: (slave veth15): Enslaving as an active interface with a down link [ 200.995166][T11523] bond5: option all_slaves_active: invalid value (222) [ 201.009398][T11523] bond5 (unregistering): Released all slaves [ 201.065557][T11531] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1560'. [ 201.210111][T11547] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1565'. [ 201.218056][T11549] tipc: Enabled bearer , priority 0 [ 201.221889][T11548] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1566'. [ 201.266161][T11549] syzkaller0: entered promiscuous mode [ 201.271665][T11549] syzkaller0: entered allmulticast mode [ 201.357201][T11560] openvswitch: netlink: Flow actions attr not present in new flow. [ 201.387109][T11562] validate_nla: 1 callbacks suppressed [ 201.387126][T11562] netlink: 'syz.5.1569': attribute type 1 has an invalid length. [ 201.389037][T11549] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 201.473030][T11562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 201.491786][T11565] veth5: entered promiscuous mode [ 201.501183][T11565] bond6: (slave veth5): Enslaving as an active interface with a down link [ 201.517419][T11549] tipc: Resetting bearer [ 201.527828][T11549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.578640][T11562] veth7: entered promiscuous mode [ 201.587977][T11562] bond6: (slave veth7): Enslaving as an active interface with a down link [ 201.605897][T11545] tipc: Resetting bearer [ 201.716918][T11545] tipc: Disabling bearer [ 201.751700][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1573'. [ 201.803392][T11577] bond7: Invalid ad_actor_system MAC address. [ 201.812376][T11577] bond7: option ad_actor_system: invalid value (1) [ 201.832811][T11577] bond7 (unregistering): Released all slaves [ 201.876670][T11574] tipc: Enabling of bearer rejected, failed to enable media [ 201.884594][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'. [ 201.894569][T11579] netlink: 'syz.5.1573': attribute type 1 has an invalid length. [ 202.052262][T11592] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1577'. [ 202.074176][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1577'. [ 202.124500][T11598] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 202.134897][T11595] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.727369][T11639] netlink: 'syz.0.1593': attribute type 2 has an invalid length. [ 202.807698][T11640] tipc: Enabling of bearer rejected, failed to enable media [ 202.824461][T11640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.842204][T11640] batadv_slave_1: entered promiscuous mode [ 202.859715][T11640] batadv_slave_1: entered allmulticast mode [ 203.344680][T11668] tipc: Enabled bearer , priority 0 [ 203.353256][T11673] syzkaller0: entered promiscuous mode [ 203.360523][T11673] syzkaller0: entered allmulticast mode [ 203.383923][T11680] sch_fq: defrate 0 ignored. [ 203.508974][ T5891] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/1 [ 203.518839][ T5891] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22 [ 203.576948][T11676] tipc: Resetting bearer [ 203.617461][T11667] tipc: Resetting bearer [ 203.653181][T11667] tipc: Disabling bearer [ 204.016675][T11710] delete_channel: no stack [ 204.043834][T11711] delete_channel: no stack [ 204.136533][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 204.365816][T11732] tipc: New replicast peer: 255.255.255.255 [ 204.373184][T11732] tipc: Enabled bearer , priority 10 [ 204.389506][T11737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.552836][T11750] netlink: 'syz.5.1625': attribute type 7 has an invalid length. [ 204.848282][T11766] lo: left promiscuous mode [ 204.873107][T11764] __nla_validate_parse: 12 callbacks suppressed [ 204.873127][T11764] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1629'. [ 205.268489][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.276334][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.516516][T11766] bridge_slave_0: left allmulticast mode [ 205.522419][T11766] bridge_slave_0: left promiscuous mode [ 205.528741][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.555347][T11766] bridge_slave_1: left allmulticast mode [ 205.562607][T11766] bridge_slave_1: left promiscuous mode [ 205.571802][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.597705][T11766] bond0: (slave bond_slave_0): Releasing backup interface [ 205.624827][T11766] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 205.858553][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1638'. [ 205.877258][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 205.987482][T11812] netlink: 'syz.4.1636': attribute type 4 has an invalid length. [ 206.020936][T11817] xt_l2tp: missing protocol rule (udp|l2tpip) [ 206.027859][T11817] openvswitch: netlink: Key type 241 is out of range max 32 [ 206.156870][T11827] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1642'. [ 206.172063][T11827] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1642'. [ 206.231059][T11827] netlink: 'syz.6.1642': attribute type 6 has an invalid length. [ 206.282773][T11827] netlink: 'syz.6.1642': attribute type 5 has an invalid length. [ 206.291018][T11827] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1642'. [ 206.302207][T11839] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1645'. [ 206.754828][T11868] openvswitch: netlink: Message has 592 unknown bytes. [ 206.762031][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.826894][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1655'. [ 207.236684][T11889] tipc: Enabled bearer , priority 0 [ 207.250063][T11889] syzkaller0: entered promiscuous mode [ 207.256736][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'. [ 207.266859][T11889] syzkaller0: entered allmulticast mode [ 207.290651][T11889] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 207.311433][T11889] tipc: Resetting bearer [ 207.329433][T11889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.360778][T11891] bridge0: port 1(batadv1) entered blocking state [ 207.369213][ T13] nci: nci_rx_work: unknown MT 0x7 [ 207.371882][T11891] bridge0: port 1(batadv1) entered disabled state [ 207.382214][T11891] batadv1: entered allmulticast mode [ 207.388935][T11891] batadv1: entered promiscuous mode [ 207.397766][T11888] tipc: Resetting bearer [ 207.423219][T11888] tipc: Disabling bearer [ 207.437085][T11897] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1665'. [ 207.594872][T11912] syzkaller0: entered promiscuous mode [ 207.602505][T11912] syzkaller0: entered allmulticast mode [ 207.855640][ T8117] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 207.864897][ T8117] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 208.457793][T11940] IPv6: sit2: Disabled Multicast RS [ 208.478145][T11940] sit2: entered allmulticast mode [ 208.650138][T11956] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 208.786336][T11958] bond8: (slave bridge3): making interface the new active one [ 208.794880][T11958] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 209.562749][T12010] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 209.654107][T12013] netlink: 'syz.0.1696': attribute type 4 has an invalid length. [ 209.866486][T12024] tipc: Enabled bearer , priority 0 [ 209.887354][T12027] tipc: Enabled bearer , priority 0 [ 209.894960][T12024] syzkaller0: entered promiscuous mode [ 209.916523][T12024] syzkaller0: entered allmulticast mode [ 209.924155][T12027] syzkaller0: entered promiscuous mode [ 209.931092][T12027] syzkaller0: entered allmulticast mode [ 209.959220][T12024] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 210.082556][T12038] tipc: Resetting bearer [ 210.095036][T12027] tipc: Resetting bearer [ 210.119159][T12023] tipc: Resetting bearer [ 210.156425][T12023] tipc: Disabling bearer [ 210.170190][T12025] tipc: Resetting bearer [ 210.182755][T12025] tipc: Disabling bearer [ 210.196461][T12042] __nla_validate_parse: 5 callbacks suppressed [ 210.196477][T12042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 210.213734][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 210.369030][T12050] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 210.488935][T12055] x_tables: duplicate entry at hook 2 [ 210.654742][T12070] netlink: 'syz.0.1710': attribute type 21 has an invalid length. [ 210.676489][T12070] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1710'. [ 210.716561][T12070] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1710'. [ 210.894990][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1716'. [ 210.915834][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1716'. [ 210.964719][T12086] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1716'. [ 210.981732][T12081] netlink: 'syz.5.1716': attribute type 1 has an invalid length. [ 210.992924][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'. [ 211.001989][T12085] bridge_slave_0: default FDB implementation only supports local addresses [ 211.012419][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 211.103890][T12089] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1719'. [ 211.147083][T12092] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.173325][T12092] smc: net device gre0 applied user defined pnetid SYZ1 [ 211.183559][T12092] smc: net device gre0 erased user defined pnetid SYZ1 [ 211.273060][T12097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.320618][T12104] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 211.329739][T12103] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 211.771881][T12134] netlink: 'syz.0.1732': attribute type 5 has an invalid length. [ 211.801968][T12134] geneve2: entered promiscuous mode [ 211.821957][T12134] geneve2: entered allmulticast mode [ 211.842360][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 211.860185][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 211.881443][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 211.913046][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 211.999162][T12140] netlink: 'syz.6.1735': attribute type 1 has an invalid length. [ 212.007754][T12140] netlink: 'syz.6.1735': attribute type 2 has an invalid length. [ 212.576967][T12167] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 212.658876][T12170] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 212.984155][T12185] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 213.034980][T12185] bond11 (unregistering): Released all slaves [ 213.087817][T12197] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 213.267603][T12207] dvmrp0: entered allmulticast mode [ 213.287004][T12207] dvmrp0: left allmulticast mode [ 213.395256][T12211] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 213.752537][T12232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.837141][T12232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.979765][T12232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.046378][T12244] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 214.246516][T12261] validate_nla: 5 callbacks suppressed [ 214.246532][T12261] netlink: 'syz.6.1771': attribute type 1 has an invalid length. [ 214.298537][T12266] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 214.389095][T12266] bond9: entered promiscuous mode [ 214.394999][T12266] 8021q: adding VLAN 0 to HW filter on device bond9 [ 214.510359][T12270] 8021q: adding VLAN 0 to HW filter on device bond9 [ 214.527818][T12278] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 214.538213][T12278] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 214.596316][T12270] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 214.607241][T12270] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 214.630959][T12270] bond9: (slave wireguard0): making interface the new active one [ 214.639201][T12270] wireguard0: entered promiscuous mode [ 214.647366][T12270] bond9: (slave wireguard0): Enslaving as an active interface with an up link [ 215.146264][ T5982] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 215.180941][ T5982] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.222835][ T5982] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.265194][T12321] tipc: Enabled bearer , priority 0 [ 215.273374][T12320] tipc: Enabling of bearer rejected, already enabled [ 215.294757][ T5982] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.318744][T12321] syzkaller0: entered promiscuous mode [ 215.324960][T12321] syzkaller0: entered allmulticast mode [ 215.343380][T12320] tipc: Resetting bearer [ 215.358882][T12327] bond0: (slave bond_slave_0): Releasing backup interface [ 215.382772][T12327] bond0: (slave bond_slave_1): Releasing backup interface [ 215.399261][T12327] team0: Port device team_slave_0 removed [ 215.417361][T12327] team0: Port device team_slave_1 removed [ 215.423772][T12327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.437974][T12327] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 215.466836][T12319] tipc: Resetting bearer [ 215.507883][T12319] tipc: Disabling bearer [ 215.529080][T12334] __nla_validate_parse: 16 callbacks suppressed [ 215.529097][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1793'. [ 215.532193][T12336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1794'. [ 215.636573][T12331] syzkaller1: entered promiscuous mode [ 215.642230][T12331] syzkaller1: entered allmulticast mode [ 215.918512][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'. [ 215.918594][T12357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'. [ 215.972586][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'. [ 216.131916][T12364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.156052][T12364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.496074][ T5982] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.531232][T12378] tipc: Enabled bearer , priority 0 [ 216.588628][ T5982] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.629054][ T5982] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.660412][T12376] syzkaller0: entered promiscuous mode [ 216.668688][T12376] syzkaller0: entered allmulticast mode [ 216.698887][ T8114] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.713535][T12376] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.794952][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1808'. [ 216.808873][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1808'. [ 216.912325][T12376] tipc: Resetting bearer [ 216.919453][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1810'. [ 216.930803][T12375] tipc: Resetting bearer [ 216.992701][T12375] tipc: Disabling bearer [ 217.004878][T12393] tipc: Enabled bearer , priority 0 [ 217.017847][T12396] syzkaller0: entered promiscuous mode [ 217.023943][T12396] syzkaller0: entered allmulticast mode [ 217.075744][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 217.118936][T12392] tipc: Resetting bearer [ 217.231471][T12392] tipc: Disabling bearer [ 217.240673][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1816'. [ 217.250102][T12411] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 217.273395][T12411] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 217.797214][T12444] tipc: Enabled bearer , priority 0 [ 217.807330][T12447] netlink: 'syz.2.1828': attribute type 30 has an invalid length. [ 217.817984][T12444] syzkaller0: entered promiscuous mode [ 217.824841][T12444] syzkaller0: entered allmulticast mode [ 217.937235][T12444] tipc: Resetting bearer [ 217.948678][T12440] tipc: Resetting bearer [ 217.994724][T12440] tipc: Disabling bearer [ 218.219988][T12466] netlink: 'syz.6.1835': attribute type 1 has an invalid length. [ 218.491659][T12474] sctp: [Deprecated]: syz.4.1839 (pid 12474) Use of int in maxseg socket option. [ 218.491659][T12474] Use struct sctp_assoc_value instead [ 218.655992][T12485] netlink: 'syz.4.1844': attribute type 13 has an invalid length. [ 218.718435][T12485] gretap0: refused to change device tx_queue_len [ 218.753864][T12485] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.760351][T12491] SET target dimension over the limit! [ 219.013648][T12505] IPVS: length: 197 != 8 [ 219.416215][T12499] tipc: Enabled bearer , priority 0 [ 219.426749][T12508] syzkaller0: entered promiscuous mode [ 219.437678][T12508] syzkaller0: entered allmulticast mode [ 219.456361][T12511] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 219.476271][T12513] tipc: Resetting bearer [ 219.485230][T12498] tipc: Resetting bearer [ 219.560750][T12498] tipc: Disabling bearer [ 219.622382][T12525] netlink: 'syz.4.1853': attribute type 1 has an invalid length. [ 219.648550][T12525] netlink: 'syz.4.1853': attribute type 2 has an invalid length. [ 219.970417][T12540] netlink: 'syz.4.1857': attribute type 2 has an invalid length. [ 220.015656][T12550] netlink: 'syz.5.1861': attribute type 1 has an invalid length. [ 220.061538][T12540] 9: entered promiscuous mode [ 220.157373][T12550] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.216631][T12557] veth9: entered promiscuous mode [ 220.278095][T12557] bond7: (slave veth9): Enslaving as an active interface with a down link [ 220.343793][T12554] veth11: entered promiscuous mode [ 220.354296][T12554] bond7: (slave veth11): Enslaving as an active interface with a down link [ 220.983787][T12566] __nla_validate_parse: 13 callbacks suppressed [ 220.983804][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1864'. [ 220.990183][T12598] netlink: 'syz.6.1874': attribute type 21 has an invalid length. [ 221.015048][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1873'. [ 221.024548][T12598] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1874'. [ 221.150648][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1876'. [ 221.172925][T12608] netlink: 294 bytes leftover after parsing attributes in process `syz.4.1875'. [ 221.214547][T12610] netlink: 'syz.6.1877': attribute type 1 has an invalid length. [ 221.232095][T12608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.292629][T12610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.473445][T12615] veth9: entered promiscuous mode [ 221.490723][T12615] bond5: (slave veth9): Enslaving as an active interface with a down link [ 221.512084][T12624] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 221.525398][T12621] IPVS: set_ctl: invalid protocol: 100 127.0.0.1:20002 [ 221.533705][T12626] IPVS: set_ctl: invalid protocol: 100 127.0.0.1:20002 [ 221.859570][T12634] bond10: (slave bridge2): making interface the new active one [ 221.876882][T12634] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 221.926204][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1887'. [ 222.025155][T12648] bond8: entered promiscuous mode [ 222.037261][T12648] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.071637][T12662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1891'. [ 222.119752][T12663] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1887'. [ 222.211531][T12665] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 222.249506][T12665] 8021q: adding VLAN 0 to HW filter on device bond11 [ 222.289974][T12665] veth21: entered promiscuous mode [ 222.303031][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1894'. [ 222.306150][T12665] bond11: (slave veth21): Enslaving as an active interface with a down link [ 222.337309][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1894'. [ 222.391011][T12665] veth23: entered promiscuous mode [ 222.410063][T12665] bond11: (slave veth23): Enslaving as an active interface with a down link [ 222.510987][T12682] netlink: 'syz.6.1900': attribute type 1 has an invalid length. [ 222.529053][T12682] netlink: 'syz.6.1900': attribute type 2 has an invalid length. [ 222.686235][T12694] dvmrp0: entered allmulticast mode [ 223.153367][T12723] Unsupported ieee802154 address type: 0 [ 223.163887][T12721] bond12: Unable to set up delay as MII monitoring is disabled [ 223.184395][T12721] bond12 (unregistering): Released all slaves [ 223.876416][T12771] tipc: Enabled bearer , priority 10 [ 224.170936][T12789] tipc: Enabled bearer , priority 0 [ 224.238430][T12792] syzkaller0: entered promiscuous mode [ 224.245946][T12792] syzkaller0: entered allmulticast mode [ 224.304485][T12789] tipc: Resetting bearer [ 224.327098][T12799] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 224.342745][T12800] x_tables: duplicate underflow at hook 1 [ 224.362164][T12796] nbd0: detected capacity change from 0 to 127 [ 224.374248][ T5832] block nbd0: Receive control failed (result -32) [ 224.642621][T12820] validate_nla: 2 callbacks suppressed [ 224.642638][T12820] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 224.705532][T12820] bond9: (slave geneve3): Opening slave failed [ 224.899630][T12833] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.916882][T12786] tipc: Resetting bearer [ 224.937882][T12786] tipc: Disabling bearer [ 224.962601][T12834] syzkaller0: entered allmulticast mode [ 224.993829][T12836] batadv1: left allmulticast mode [ 224.999643][T12836] batadv1: left promiscuous mode [ 225.004967][T12836] bridge0: port 4(batadv1) entered disabled state [ 225.022795][T12836] syz_tun: left allmulticast mode [ 225.031857][T12836] syz_tun: left promiscuous mode [ 225.037253][T12836] bridge0: port 3(syz_tun) entered disabled state [ 225.054815][T12836] bridge_slave_1: left allmulticast mode [ 225.060644][T12836] bridge_slave_1: left promiscuous mode [ 225.070717][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.084100][T12836] bridge_slave_0: left allmulticast mode [ 225.103766][T12836] bridge_slave_0: left promiscuous mode [ 225.113461][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.908357][T12892] xfrm1: entered allmulticast mode [ 226.041929][T12900] __nla_validate_parse: 8 callbacks suppressed [ 226.041943][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'. [ 226.200798][T12918] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1976'. [ 226.243570][T12919] dvmrp0: entered allmulticast mode [ 226.265090][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 226.329056][T12923] ip6gre1: entered promiscuous mode [ 226.437042][T12930] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1982'. [ 226.463142][T12938] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 226.640508][T12949] netlink: 'syz.6.1987': attribute type 11 has an invalid length. [ 226.655661][T12949] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1987'. [ 226.793486][T12964] IPv6: sit1: Disabled Multicast RS [ 226.804531][T12964] sit1: entered allmulticast mode [ 226.999445][ T36] nci: nci_rx_work: unknown MT 0x7 [ 227.022492][T12983] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1997'. [ 227.382868][T13006] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 227.534993][T13011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2006'. [ 227.883934][T13025] netlink: 'syz.5.2011': attribute type 1 has an invalid length. [ 227.967664][T13029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2012'. [ 228.009692][T13031] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2014'. [ 228.091517][T13029] delete_channel: no stack [ 228.212951][T13046] netlink: 'syz.4.2019': attribute type 1 has an invalid length. [ 228.224973][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 228.228631][T13046] netlink: 'syz.4.2019': attribute type 11 has an invalid length. [ 228.427662][T13070] xt_connbytes: Forcing CT accounting to be enabled [ 228.545393][T13081] netlink: 'syz.2.2030': attribute type 1 has an invalid length. [ 228.603397][T13081] ip6gre1: entered allmulticast mode [ 228.889258][T13103] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 228.899233][T13103] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 228.911372][T13103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.342775][T13138] veth1_macvtap: left promiscuous mode [ 229.349323][T13138] macsec0: entered promiscuous mode [ 229.358884][T13138] macsec0: entered allmulticast mode [ 229.393903][T13145] veth1_macvtap: entered promiscuous mode [ 229.401753][T13145] veth1_macvtap: entered allmulticast mode [ 229.421065][T13145] macsec0: left promiscuous mode [ 229.431378][T13145] macsec0: left allmulticast mode [ 229.451500][T13145] veth1_macvtap: left allmulticast mode [ 229.527291][T13138] netlink: 'syz.0.2047': attribute type 2 has an invalid length. [ 229.796246][T13171] netlink: 'syz.6.2058': attribute type 11 has an invalid length. [ 229.929729][T13175] tipc: Enabling of bearer rejected, failed to enable media [ 229.942084][T13179] netlink: 'syz.4.2061': attribute type 3 has an invalid length. [ 229.984120][T13173] netlink: 'syz.6.2058': attribute type 4 has an invalid length. [ 230.021794][T13173] netlink: 'syz.6.2058': attribute type 4 has an invalid length. [ 230.094674][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.102979][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.110969][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.118922][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.126893][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.134831][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.142826][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.150804][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.158789][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.166749][T13186] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 230.367521][T13201] pim6reg1: entered promiscuous mode [ 230.372961][T13201] pim6reg1: entered allmulticast mode [ 230.379025][T13202] x_tables: duplicate underflow at hook 2 [ 230.426772][T13197] x_tables: duplicate underflow at hook 2 [ 230.829375][T13238] netlink: 'syz.2.2080': attribute type 83 has an invalid length. [ 230.864501][T13235] bond11: entered promiscuous mode [ 231.132203][T13263] __nla_validate_parse: 10 callbacks suppressed [ 231.132231][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2089'. [ 231.188459][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2090'. [ 231.308918][T13276] netlink: 'syz.2.2093': attribute type 1 has an invalid length. [ 231.317327][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2092'. [ 231.362519][T13276] 8021q: adding VLAN 0 to HW filter on device bond12 [ 231.435161][T13276] veth27: entered promiscuous mode [ 231.452612][T13276] bond12: (slave veth27): Enslaving as an active interface with a down link [ 231.559026][T13285] veth29: entered promiscuous mode [ 231.567944][T13285] bond12: (slave veth29): Enslaving as an active interface with a down link [ 231.578787][T13295] netlink: 'syz.5.2097': attribute type 8 has an invalid length. [ 231.762925][T13307] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 231.994130][T13325] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2106'. [ 232.158792][T13336] netlink: 'syz.2.2110': attribute type 1 has an invalid length. [ 232.217107][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 232.242420][T13336] 8021q: adding VLAN 0 to HW filter on device bond13 [ 232.270178][T13344] veth31: entered promiscuous mode [ 232.283902][T13344] bond13: (slave veth31): Enslaving as an active interface with a down link [ 232.301090][T13354] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2114'. [ 232.405171][T13336] veth33: entered promiscuous mode [ 232.423238][T13336] bond13: (slave veth33): Enslaving as an active interface with a down link [ 232.536454][T13363] x_tables: duplicate underflow at hook 4 [ 232.567348][T13363] netlink: 'syz.5.2119': attribute type 10 has an invalid length. [ 232.621975][T13363] veth1_macvtap: left promiscuous mode [ 232.713172][T13383] netlink: 'syz.4.2121': attribute type 12 has an invalid length. [ 232.721204][T13383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2121'. [ 232.794706][T13385] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2122'. [ 232.904252][T13395] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 233.040697][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 233.082470][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2127'. [ 233.384908][T13419] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2132'. [ 233.401875][T13419] NCSI netlink: No device for ifindex 813332851 [ 234.229183][T13451] syzkaller0: entered promiscuous mode [ 234.234699][T13451] syzkaller0: entered allmulticast mode [ 234.275693][T13464] gre0: entered promiscuous mode [ 235.612953][T13456] tipc: Enabling of bearer rejected, failed to enable media [ 235.863557][T13492] net_ratelimit: 45 callbacks suppressed [ 235.863575][T13492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.871017][T13488] bond14: (slave bond_slave_1): Device is not bonding slave [ 235.890169][T13488] bond14: option active_slave: invalid value (bond_slave_1) [ 235.901072][T13488] bond14 (unregistering): Released all slaves [ 235.906752][T13495] sctp: [Deprecated]: syz.5.2152 (pid 13495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.906752][T13495] Use struct sctp_sack_info instead [ 235.921335][T13492] validate_nla: 7 callbacks suppressed [ 235.921353][T13492] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 235.954222][T13492] IPVS: Unknown mcast interface: vcan0 [ 236.316287][T13519] xt_hashlimit: max too large, truncated to 1048576 [ 236.329733][T13517] __nla_validate_parse: 9 callbacks suppressed [ 236.329750][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2159'. [ 236.332273][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2157'. [ 236.361755][T13522] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2160'. [ 236.408013][T13522] team_slave_0: entered allmulticast mode [ 236.502501][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2164'. [ 236.646039][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2166'. [ 236.785940][T13554] Cannot find add_set index 0 as target [ 236.910047][T13569] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2175'. [ 237.078541][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2177'. [ 237.237782][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2182'. [ 237.314675][T13590] tipc: Enabled bearer , priority 0 [ 237.325002][T13590] tipc: Resetting bearer [ 237.357976][T13589] tipc: Disabling bearer [ 237.389761][T13593] syzkaller0: entered promiscuous mode [ 237.403309][T13593] syzkaller0: entered allmulticast mode [ 237.427108][T13593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2185'. [ 237.465715][T13593] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2185'. [ 237.507497][T13599] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 237.620377][T13604] 8021q: VLANs not supported on ip_vti0 [ 238.153952][T13642] netlink: 'syz.2.2201': attribute type 21 has an invalid length. [ 238.162480][T13642] netlink: 'syz.2.2201': attribute type 5 has an invalid length. [ 238.427755][T13667] batadv1: left allmulticast mode [ 238.465621][T13667] batadv1: left promiscuous mode [ 238.470900][T13667] bridge0: port 1(batadv1) entered disabled state [ 238.829211][T13693] IPVS: set_ctl: invalid protocol: 113 100.1.1.2:20000 [ 239.496048][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.621142][T13746] tipc: Enabled bearer , priority 0 [ 239.772475][T13763] tipc: Disabling bearer [ 239.981733][T13781] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 240.021654][T13785] netlink: 'syz.6.2243': attribute type 4 has an invalid length. [ 240.056016][T13791] netlink: 'syz.6.2243': attribute type 4 has an invalid length. [ 240.280191][T13805] netlink: 'syz.4.2249': attribute type 12 has an invalid length. [ 240.289225][T13805] netlink: 'syz.4.2249': attribute type 29 has an invalid length. [ 240.302894][T13805] netlink: 'syz.4.2249': attribute type 2 has an invalid length. [ 240.314094][T13805] netlink: 'syz.4.2249': attribute type 3 has an invalid length. [ 240.340005][T13803] syzkaller1: entered promiscuous mode [ 240.345388][T13812] netlink: 'syz.5.2251': attribute type 1 has an invalid length. [ 240.354245][T13803] syzkaller1: entered allmulticast mode [ 240.440653][T13822] nbd: must specify an index to disconnect [ 240.513888][T13807] syzkaller0: entered promiscuous mode [ 240.519677][T13807] syzkaller0: entered allmulticast mode [ 240.533571][T13826] netem: change failed [ 240.583859][T13831] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 240.601090][T13831] bond12 (unregistering): Released all slaves [ 240.724518][T13839] tipc: Enabled bearer , priority 0 [ 240.735906][T13839] tipc: Resetting bearer [ 240.758216][T13838] tipc: Disabling bearer [ 241.258612][T13876] bond6: option xmit_hash_policy: invalid value (64) [ 241.277815][T13876] bond6 (unregistering): Released all slaves [ 241.353829][T13879] netlink: 'syz.5.2271': attribute type 1 has an invalid length. [ 241.424639][T13891] __nla_validate_parse: 24 callbacks suppressed [ 241.424657][T13891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2272'. [ 241.521181][T13895] netlink: 'syz.6.2274': attribute type 11 has an invalid length. [ 241.643208][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2276'. [ 241.717275][T13904] netlink: 'syz.6.2278': attribute type 2 has an invalid length. [ 241.870219][T13912] netlink: 'syz.4.2279': attribute type 11 has an invalid length. [ 242.018826][T13916] can: request_module (can-proto-3) failed. [ 242.109777][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'. [ 242.166994][T13916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.447967][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'. [ 242.672665][T13914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.688604][T13914] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 242.742544][T13914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.755532][T13914] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 242.775319][T13914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.796611][T13914] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 242.851183][T13914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.874458][T13914] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 242.920731][T13914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.949256][T13914] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 243.057660][T13975] netlink: zone id is out of range [ 243.190822][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 243.204506][T13985] netlink: 'syz.5.2294': attribute type 11 has an invalid length. [ 243.226909][T13914] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 243.243034][T13914] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 243.289374][T13986] lo: left promiscuous mode [ 243.305188][T13986] tunl0: left promiscuous mode [ 243.337235][T13986] gre0: left promiscuous mode [ 243.365114][T13986] gretap0: left promiscuous mode [ 243.391564][T13986] erspan0: left promiscuous mode [ 243.411443][T13994] netlink: 'syz.4.2295': attribute type 21 has an invalid length. [ 243.417602][T13986] ip_vti0: left promiscuous mode [ 243.473812][T13986] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.481783][T13986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.520570][T13986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.541043][T13986] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.554225][T13986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.603487][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 243.646059][T13914] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 243.667130][T13914] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 243.722610][T13994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2295'. [ 243.736377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.003788][T14021] netlink: 'syz.6.2297': attribute type 10 has an invalid length. [ 244.028340][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 244.063478][T14014] bridge_slave_0: default FDB implementation only supports local addresses [ 244.104739][T14021] team0: Device ipvlan1 failed to register rx_handler [ 244.271337][T14034] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2301'. [ 244.559913][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2306'. [ 244.842141][T14070] syzkaller1: entered promiscuous mode [ 244.891876][T14070] syzkaller1: entered allmulticast mode [ 245.087070][T14085] netlink: 'syz.2.2313': attribute type 39 has an invalid length. [ 245.306318][T14103] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 245.462060][T14106] bond12: (slave gretap2): making interface the new active one [ 245.527050][T14106] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 246.195859][T14156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.241898][T14158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.463108][T14166] netlink: 'syz.6.2333': attribute type 6 has an invalid length. [ 246.491222][T14166] tipc: Enabled bearer , priority 0 [ 246.506373][T14166] syzkaller0: entered promiscuous mode [ 246.522243][T14166] syzkaller0: entered allmulticast mode [ 246.552752][T14166] tipc: Resetting bearer [ 246.569767][T14165] tipc: Resetting bearer [ 246.600080][T14165] tipc: Disabling bearer [ 246.664224][T14178] __nla_validate_parse: 1 callbacks suppressed [ 246.664243][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 246.684338][T14178] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2336'. [ 246.746767][T14178] geneve4: entered promiscuous mode [ 246.765127][T14178] geneve4: entered allmulticast mode [ 246.869900][T14192] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 246.879970][ T5872] IPVS: starting estimator thread 0... [ 246.905952][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2339'. [ 246.985823][T14193] IPVS: using max 29 ests per chain, 69600 per kthread [ 246.987816][T14199] FAULT_INJECTION: forcing a failure. [ 246.987816][T14199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.006182][T14199] CPU: 1 UID: 0 PID: 14199 Comm: syz.6.2341 Not tainted syzkaller #0 PREEMPT(full) [ 247.006207][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.006217][T14199] Call Trace: [ 247.006224][T14199] [ 247.006232][T14199] dump_stack_lvl+0x189/0x250 [ 247.006262][T14199] ? __pfx____ratelimit+0x10/0x10 [ 247.006284][T14199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.006307][T14199] ? __pfx__printk+0x10/0x10 [ 247.006326][T14199] ? __might_fault+0xb0/0x130 [ 247.006361][T14199] should_fail_ex+0x414/0x560 [ 247.006390][T14199] _copy_from_user+0x2d/0xb0 [ 247.006412][T14199] ax25_setsockopt+0x16c/0xc20 [ 247.006439][T14199] ? __pfx_ax25_setsockopt+0x10/0x10 [ 247.006462][T14199] ? aa_sock_opt_perm+0xff/0x1b0 [ 247.006489][T14199] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 247.006506][T14199] ? __pfx_ax25_setsockopt+0x10/0x10 [ 247.006528][T14199] do_sock_setsockopt+0x17c/0x1b0 [ 247.006559][T14199] __x64_sys_setsockopt+0x13f/0x1b0 [ 247.006589][T14199] do_syscall_64+0xfa/0xfa0 [ 247.006609][T14199] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.006629][T14199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.006647][T14199] ? clear_bhb_loop+0x60/0xb0 [ 247.006669][T14199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.006686][T14199] RIP: 0033:0x7f104bb8efc9 [ 247.006702][T14199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.006718][T14199] RSP: 002b:00007f104cad2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.006737][T14199] RAX: ffffffffffffffda RBX: 00007f104bde5fa0 RCX: 00007f104bb8efc9 [ 247.006751][T14199] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 247.006762][T14199] RBP: 00007f104cad2090 R08: 0000000000000010 R09: 0000000000000000 [ 247.006772][T14199] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 247.006784][T14199] R13: 00007f104bde6038 R14: 00007f104bde5fa0 R15: 00007ffdf76740b8 [ 247.006816][T14199] [ 247.233001][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'. [ 247.502484][T14218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'. [ 247.532957][T14219] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 247.568048][T14216] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.593632][T14216] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.610486][T14232] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2347'. [ 247.760367][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.859333][T14216] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.864153][T14238] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2348'. [ 247.887633][T14216] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.028190][T14216] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.033027][T14245] netlink: 'syz.2.2350': attribute type 1 has an invalid length. [ 248.045271][T14216] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.161659][T14245] 8021q: adding VLAN 0 to HW filter on device bond15 [ 248.171269][T14251] netlink: 'syz.4.2352': attribute type 21 has an invalid length. [ 248.184640][T14251] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2352'. [ 248.205217][T14249] veth35: entered promiscuous mode [ 248.214660][T14249] bond15: (slave veth35): Enslaving as an active interface with a down link [ 248.267867][T14216] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.289006][T14216] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.323767][T14245] veth37: entered promiscuous mode [ 248.333105][T14245] bond15: (slave veth37): Enslaving as an active interface with a down link [ 248.492753][ T8115] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.513546][ T8115] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.534082][ T8115] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.542695][ T8115] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.573925][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2357'. [ 248.600858][T14268] FAULT_INJECTION: forcing a failure. [ 248.600858][T14268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.615942][T14268] CPU: 0 UID: 0 PID: 14268 Comm: syz.0.2356 Not tainted syzkaller #0 PREEMPT(full) [ 248.615968][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.615979][T14268] Call Trace: [ 248.615986][T14268] [ 248.615994][T14268] dump_stack_lvl+0x189/0x250 [ 248.616023][T14268] ? __pfx____ratelimit+0x10/0x10 [ 248.616044][T14268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.616067][T14268] ? __pfx__printk+0x10/0x10 [ 248.616098][T14268] should_fail_ex+0x414/0x560 [ 248.616129][T14268] _copy_from_user+0x2d/0xb0 [ 248.616151][T14268] copy_from_sockptr+0x5e/0xa0 [ 248.616174][T14268] ax25_setsockopt+0x34d/0xc20 [ 248.616201][T14268] ? __pfx_ax25_setsockopt+0x10/0x10 [ 248.616224][T14268] ? aa_sock_opt_perm+0xff/0x1b0 [ 248.616252][T14268] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 248.616270][T14268] ? __pfx_ax25_setsockopt+0x10/0x10 [ 248.616291][T14268] do_sock_setsockopt+0x17c/0x1b0 [ 248.616323][T14268] __x64_sys_setsockopt+0x13f/0x1b0 [ 248.616354][T14268] do_syscall_64+0xfa/0xfa0 [ 248.616374][T14268] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.616394][T14268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.616412][T14268] ? clear_bhb_loop+0x60/0xb0 [ 248.616434][T14268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.616451][T14268] RIP: 0033:0x7f541c98efc9 [ 248.616468][T14268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.616484][T14268] RSP: 002b:00007f541d7a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.616503][T14268] RAX: ffffffffffffffda RBX: 00007f541cbe5fa0 RCX: 00007f541c98efc9 [ 248.616517][T14268] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 248.616527][T14268] RBP: 00007f541d7a6090 R08: 0000000000000010 R09: 0000000000000000 [ 248.616539][T14268] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 248.616551][T14268] R13: 00007f541cbe6038 R14: 00007f541cbe5fa0 R15: 00007ffff0865108 [ 248.616584][T14268] [ 248.828846][ T8115] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.837349][ T8115] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.860856][ T8115] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.885530][ T8115] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.914770][T14278] tipc: Enabled bearer , priority 0 [ 248.954098][T14278] syzkaller0: MTU too low for tipc bearer [ 248.977801][T14278] tipc: Disabling bearer [ 249.004499][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2358'. [ 249.075707][T14289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.125805][T14294] IPVS: length: 234 != 8 [ 249.177479][T14294] dvmrp0: left allmulticast mode [ 249.292807][T14298] bond0: (slave bond_slave_0): Releasing backup interface [ 249.354298][T14298] bond0: (slave bond_slave_1): Releasing backup interface [ 249.412073][T14314] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 249.418479][T14298] team0: Port device team_slave_0 removed [ 249.447323][T14298] team0: Port device team_slave_1 removed [ 249.457143][T14298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.694469][T14333] tipc: Enabled bearer , priority 0 [ 249.732379][T14333] tipc: Resetting bearer [ 249.740719][T14337] can: request_module (can-proto-0) failed. [ 249.826648][T14330] tipc: Disabling bearer [ 250.148046][T14361] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 250.256530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.429784][T14383] syzkaller0: entered promiscuous mode [ 250.435369][T14383] syzkaller0: entered allmulticast mode [ 250.515920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.624095][T14392] syzkaller0: entered promiscuous mode [ 250.643742][T14392] syzkaller0: entered allmulticast mode [ 250.751591][T14401] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 251.181769][T14432] pim6reg1: entered promiscuous mode [ 251.187933][T14432] pim6reg1: entered allmulticast mode [ 251.493134][T14447] syzkaller1: entered promiscuous mode [ 251.499018][T14447] syzkaller1: entered allmulticast mode [ 251.573951][T14452] netlink: 'syz.6.2412': attribute type 1 has an invalid length. [ 251.588304][T14453] IPVS: sync thread started: state = BACKUP, mcast_ifn = netpci0, syncid = 4, id = 0 [ 251.860152][T14472] __nla_validate_parse: 4 callbacks suppressed [ 251.860166][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2417'. [ 251.888741][T14472] vlan0: entered allmulticast mode [ 251.893889][T14472] bridge_slave_0: entered allmulticast mode [ 252.095879][T14481] netlink: 'syz.4.2419': attribute type 10 has an invalid length. [ 252.137626][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 252.617087][T14519] netlink: 'syz.6.2434': attribute type 1 has an invalid length. [ 252.883861][T14532] netlink: 'syz.4.2433': attribute type 1 has an invalid length. [ 252.903632][T14532] netlink: 'syz.4.2433': attribute type 2 has an invalid length. [ 252.966927][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 252.977368][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 252.987866][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 252.997849][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 252.999282][T14519] bond6: (slave gretap2): making interface the new active one [ 253.007793][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 253.018158][T14519] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 253.025145][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 253.050657][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 253.105853][T14535] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2436'. [ 253.400406][T14555] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 253.671712][T14572] bond7: Unable to set down delay as MII monitoring is disabled [ 253.751927][T14572] bond7 (unregistering): Released all slaves [ 254.153310][T14608] tipc: Enabled bearer , priority 0 [ 254.190507][T14607] tipc: Disabling bearer [ 254.914574][T14655] dvmrp0: entered allmulticast mode [ 255.081551][T14656] dvmrp0: left allmulticast mode [ 255.518966][T14676] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 255.742747][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.783010][T14693] netlink: 'syz.2.2480': attribute type 7 has an invalid length. [ 255.795614][T14693] netlink: 'syz.2.2480': attribute type 8 has an invalid length. [ 255.851244][T14701] netlink: 'syz.5.2484': attribute type 4 has an invalid length. [ 255.865840][T14700] netlink: 'syz.6.2483': attribute type 1 has an invalid length. [ 255.944376][T14700] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.081639][T14708] veth11: entered promiscuous mode [ 256.100253][T14708] bond7: (slave veth11): Enslaving as an active interface with a down link [ 256.192017][T14700] veth13: entered promiscuous mode [ 256.227673][T14700] bond7: (slave veth13): Enslaving as an active interface with a down link [ 256.976830][T14769] __nla_validate_parse: 35 callbacks suppressed [ 256.976854][T14769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 256.979049][T14772] netlink: 'syz.4.2498': attribute type 8 has an invalid length. [ 257.129550][T14782] bond0: (slave gre0): Error: Device type is different from other slaves [ 257.147211][T14780] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2501'. [ 257.247872][T14780] x_tables: duplicate underflow at hook 1 [ 257.288578][T14787] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 257.327060][T14787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2502'. [ 257.396953][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2504'. [ 257.597378][T14808] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2506'. [ 257.607348][T14813] netlink: 'syz.4.2507': attribute type 75 has an invalid length. [ 257.730891][T14817] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 257.757664][T14823] netlink: 'syz.5.2510': attribute type 10 has an invalid length. [ 257.790132][T14826] netlink: 'syz.4.2512': attribute type 1 has an invalid length. [ 257.837467][T14828] netlink: 'syz.5.2510': attribute type 10 has an invalid length. [ 257.904186][T14826] 8021q: adding VLAN 0 to HW filter on device bond13 [ 257.980168][T14823] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 258.155854][T14852] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2515'. [ 258.169424][T14831] veth18: entered promiscuous mode [ 258.191168][T14831] bond13: (slave veth18): Enslaving as an active interface with a down link [ 258.287208][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2517'. [ 258.297382][T14859] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 258.308269][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 258.320500][T14826] veth20: entered promiscuous mode [ 258.330987][T14826] bond13: (slave veth20): Enslaving as an active interface with a down link [ 258.539360][T14854] bond11: option lp_interval: invalid value (0) [ 258.548575][T14854] bond11: option lp_interval: allowed values 1 - 2147483647 [ 258.572838][T14854] bond11 (unregistering): Released all slaves [ 258.686853][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 258.776821][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 258.991720][T14904] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 259.536107][T14931] netlink: 'syz.5.2533': attribute type 1 has an invalid length. [ 259.849999][T14949] : renamed from veth1_vlan (while UP) [ 259.908289][T14956] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 260.060570][T14970] nftables ruleset with unbound chain [ 260.205657][ T30] audit: type=1800 audit(1761237552.807:2): pid=14966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2541" name="memory.events" dev="tmpfs" ino=1814 res=0 errno=0 [ 260.297942][T14978] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.857100][T15008] bond16 (unregistering): Released all slaves [ 260.910233][T15007] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 261.320644][T15047] x_tables: duplicate underflow at hook 1 [ 261.351423][T15049] netlink: 'syz.2.2567': attribute type 1 has an invalid length. [ 261.451950][T15056] 8021q: adding VLAN 0 to HW filter on device bond16 [ 262.179551][T15102] bond11: option miimon: invalid value (18446744071562067969) [ 262.187345][T15102] bond11: option miimon: allowed values 0 - 2147483647 [ 262.224097][T15102] bond11 (unregistering): Released all slaves [ 262.263986][T15109] ip6t_srh: unknown srh match flags 5F28 [ 262.295248][T15108] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 262.813396][T15146] xt_recent: Unsupported userspace flags (000000b1) [ 262.875159][T15151] __nla_validate_parse: 15 callbacks suppressed [ 262.875179][T15151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2590'. [ 262.984402][T15146] bond9: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 263.006991][T15146] bond9: entered promiscuous mode [ 263.018750][T15146] bond9: entered allmulticast mode [ 263.037275][T15146] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.179081][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 263.462305][T15190] validate_nla: 1 callbacks suppressed [ 263.462324][T15190] netlink: 'syz.2.2605': attribute type 2 has an invalid length. [ 264.069225][T15222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2614'. [ 264.093753][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2615'. [ 264.118021][T15228] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2615'. [ 264.128546][T15228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2615'. [ 264.276945][T15245] ip6gre1: entered promiscuous mode [ 264.299124][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2618'. [ 264.328562][T15249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2618'. [ 264.559177][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2627'. [ 264.620466][T15276] netlink: 'syz.4.2625': attribute type 4 has an invalid length. [ 264.631607][T15263] netlink: 'syz.4.2625': attribute type 4 has an invalid length. [ 264.924103][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 265.832667][T15344] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 266.888825][T15404] netlink: 'syz.0.2659': attribute type 1 has an invalid length. [ 267.034073][T15408] netlink: 'syz.6.2660': attribute type 6 has an invalid length. [ 267.377759][T15422] netlink: 'syz.5.2668': attribute type 4 has an invalid length. [ 267.432888][T15440] netlink: 'syz.5.2668': attribute type 4 has an invalid length. [ 267.457498][T15439] netlink: 'syz.2.2672': attribute type 12 has an invalid length. [ 267.609924][T15448] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 267.611164][T15445] vlan0: entered promiscuous mode [ 267.686269][T15448] 8021q: adding VLAN 0 to HW filter on device bond17 [ 267.758594][T15454] veth39: entered promiscuous mode [ 267.773193][T15454] bond17: (slave veth39): Enslaving as an active interface with a down link [ 267.820607][T15448] veth41: entered promiscuous mode [ 267.831220][T15448] bond17: (slave veth41): Enslaving as an active interface with a down link [ 267.841570][T15461] bridge_slave_0: entered promiscuous mode [ 267.848047][T15462] bridge_slave_0: left promiscuous mode [ 267.866215][T15470] tipc: Enabled bearer , priority 0 [ 267.906086][T15456] syzkaller0: entered promiscuous mode [ 267.911592][T15456] syzkaller0: entered allmulticast mode [ 268.035590][T15456] tipc: Resetting bearer [ 268.045249][T15456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.053703][T15456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.097379][T15455] tipc: Resetting bearer [ 268.178473][T15455] tipc: Disabling bearer [ 268.331212][T15489] __nla_validate_parse: 76 callbacks suppressed [ 268.331233][T15489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2688'. [ 268.371282][T15489] openvswitch: netlink: Flow key attr not present in new flow. [ 268.506593][T15493] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2689'. [ 268.531321][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.547178][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.555373][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.563497][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.573028][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.606203][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.613617][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.621308][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.629564][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.643031][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.770493][T15505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2691'. [ 269.010843][T15519] netlink: 'syz.6.2693': attribute type 4 has an invalid length. [ 269.036225][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2693'. [ 269.073197][T15498] chnl_net:caif_netlink_parms(): no params data found [ 269.099142][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 269.247314][T15524] bond10: Unable to set down delay as MII monitoring is disabled [ 269.271987][T15524] bond10 (unregistering): Released all slaves [ 269.333665][T15531] Bluetooth: MGMT ver 1.23 [ 269.429939][T15498] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.437633][T15498] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.445337][T15498] bridge_slave_0: entered allmulticast mode [ 269.448541][T15543] netlink: 'syz.5.2701': attribute type 1 has an invalid length. [ 269.454866][T15498] bridge_slave_0: entered promiscuous mode [ 269.468768][T15498] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.476027][T15498] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.483291][T15498] bridge_slave_1: entered allmulticast mode [ 269.491777][T15498] bridge_slave_1: entered promiscuous mode [ 269.660228][T15543] 8021q: adding VLAN 0 to HW filter on device bond11 [ 269.722211][T15498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.807917][T15548] netlink: 'syz.6.2702': attribute type 1 has an invalid length. [ 269.874357][T15555] veth13: entered promiscuous mode [ 269.889570][T15555] bond11: (slave veth13): Enslaving as an active interface with a down link [ 269.924960][T15559] veth15: entered promiscuous mode [ 269.925860][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2705'. [ 269.939942][T15559] bond11: (slave veth15): Enslaving as an active interface with a down link [ 269.958655][T15498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.084140][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2707'. [ 270.097791][T15498] team0: Port device team_slave_0 added [ 270.104037][T15581] Cannot find add_set index 0 as target [ 270.161266][T15498] team0: Port device team_slave_1 added [ 270.261745][T15590] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2710'. [ 270.309761][T15498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.334890][T15498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.410903][T15498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.444170][T15498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.455782][T15498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.472762][T15599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2714'. [ 270.483386][T15498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.638953][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2716'. [ 270.669080][T15498] hsr_slave_0: entered promiscuous mode [ 270.687522][T15498] hsr_slave_1: entered promiscuous mode [ 270.695385][T15498] debugfs: 'hsr0' already exists in 'hsr' [ 270.695819][ T5832] Bluetooth: hci1: command tx timeout [ 270.733161][T15498] Cannot create hsr debugfs directory [ 270.954567][T15621] 8021q: VLANs not supported on ip_vti0 [ 270.997584][T15629] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 271.026054][T15631] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 271.171106][T15644] veth1_to_bond: entered allmulticast mode [ 271.206660][T15643] veth1_to_bond: left allmulticast mode [ 271.328290][T15498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.412210][T15498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.519825][T15498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.601108][T15498] netdevsim netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.615277][T15664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.831282][T15498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.868511][T15498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.893307][T15498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.940105][T15498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.043741][T15690] netlink: 'syz.6.2745': attribute type 1 has an invalid length. [ 272.083306][T15699] netlink: 'syz.0.2746': attribute type 1 has an invalid length. [ 272.143817][T15699] 8021q: adding VLAN 0 to HW filter on device bond12 [ 272.302147][T15699] veth15: entered promiscuous mode [ 272.314006][T15699] bond12: (slave veth15): Enslaving as an active interface with a down link [ 272.358759][T15706] veth17: entered promiscuous mode [ 272.368910][T15706] bond12: (slave veth17): Enslaving as an active interface with a down link [ 272.421330][T15498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.544776][T15498] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.603444][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.610700][ T8103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.660695][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.667890][ T8103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.689063][T15723] syzkaller1: entered promiscuous mode [ 272.694621][T15723] syzkaller1: entered allmulticast mode [ 272.761032][T15723] bond10 (unregistering): Released all slaves [ 272.775864][ T5832] Bluetooth: hci1: command tx timeout [ 273.321863][T15498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.480408][T15498] veth0_vlan: entered promiscuous mode [ 273.528544][T15498] veth1_vlan: entered promiscuous mode [ 273.607214][T15764] __nla_validate_parse: 8 callbacks suppressed [ 273.607232][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 273.657149][T15764] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2761'. [ 273.660004][T15498] veth0_macvtap: entered promiscuous mode [ 273.731326][T15764] bond14 (unregistering): Released all slaves [ 273.738001][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 273.831279][T15782] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2767'. [ 273.848859][T15779] tipc: Enabled bearer , priority 0 [ 273.874283][T15498] veth1_macvtap: entered promiscuous mode [ 273.887520][T15775] syzkaller0: entered promiscuous mode [ 273.893149][T15775] syzkaller0: entered allmulticast mode [ 273.916916][T15782] set match dimension is over the limit! [ 273.933825][T15498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.954135][T15498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.066325][ T8109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.099112][ T8109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.151962][ T8109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.190368][ T8109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.269981][T15804] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2773'. [ 274.289790][ T8109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.298428][ T31] INFO: task syz.3.541:7748 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.315619][ T31] Not tainted syzkaller #0 [ 274.322844][ T8109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.331668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.342047][T15804] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2773'. [ 274.344851][ T31] task:syz.3.541 state:D stack:27240 pid:7748 tgid:7744 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 274.418403][ T31] Call Trace: [ 274.434031][ T31] [ 274.478066][ T31] __schedule+0x1798/0x4cc0 [ 274.492531][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.525896][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.530800][ T31] ? __pfx___schedule+0x10/0x10 [ 274.545496][ T31] ? schedule+0x91/0x360 [ 274.549801][ T31] schedule+0x165/0x360 [ 274.554175][ T31] schedule_preempt_disabled+0x13/0x30 [ 274.562674][ T31] __mutex_lock+0x7e6/0x1350 [ 274.572177][ T31] ? __mutex_lock+0x5bb/0x1350 [ 274.577248][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 274.583000][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 274.588102][ T31] ? __nlmsg_put+0xef/0x1b0 [ 274.592601][ T31] ? genlmsg_put+0x137/0x2e0 [ 274.597341][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 274.602907][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 274.609128][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.614503][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.620379][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 274.626008][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.632141][ T31] genl_rcv_msg+0x60e/0x790 [ 274.637134][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.642182][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 274.648422][ T31] ? __asan_memcpy+0x40/0x70 [ 274.653030][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.658614][ T31] netlink_rcv_skb+0x208/0x470 [ 274.663370][ T31] ? __lock_acquire+0xab9/0xd20 [ 274.668311][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.673351][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.679347][ T31] ? down_read+0x1ad/0x2e0 [ 274.683794][ T31] genl_rcv+0x28/0x40 [ 274.688008][ T31] netlink_unicast+0x82f/0x9e0 [ 274.692808][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 274.698846][ T31] ? netlink_sendmsg+0x642/0xb30 [ 274.703817][ T31] ? skb_put+0x11b/0x210 [ 274.708213][ T31] netlink_sendmsg+0x805/0xb30 [ 274.712985][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.718318][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.723280][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.728686][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.733973][ T31] __sock_sendmsg+0x21c/0x270 [ 274.738753][ T31] ____sys_sendmsg+0x505/0x830 [ 274.743532][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.748899][ T31] ? import_iovec+0x74/0xa0 [ 274.753397][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 274.758374][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.763600][ T31] ? __fget_files+0x2a/0x420 [ 274.768706][ T31] ? __fget_files+0x3a0/0x420 [ 274.773409][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 274.779401][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.784895][ T31] ? rcu_is_watching+0x15/0xb0 [ 274.790244][ T31] do_syscall_64+0xfa/0xfa0 [ 274.794766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.800058][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.806232][ T31] ? clear_bhb_loop+0x60/0xb0 [ 274.810927][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.816880][ T31] RIP: 0033:0x7fb15898efc9 [ 274.821301][ T31] RSP: 002b:00007fb159847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.829848][ T31] RAX: ffffffffffffffda RBX: 00007fb158be6090 RCX: 00007fb15898efc9 [ 274.837980][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000051 [ 274.846046][ T31] RBP: 00007fb158a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.854014][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.862216][ T5832] Bluetooth: hci1: command tx timeout [ 274.870621][ T31] R13: 00007fb158be6128 R14: 00007fb158be6090 R15: 00007ffee0645bf8 [ 274.878683][ T31] [ 274.881926][ T31] [ 274.881926][ T31] Showing all locks held in the system: [ 274.930641][ T31] 3 locks held by kworker/0:1/10: [ 274.955523][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 274.975936][ T31] #1: ffffc900000f7ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 275.006130][ T31] #2: ffff888056f08240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 275.032199][ T31] 3 locks held by kworker/1:0/24: [ 275.046237][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 275.065627][ T31] #1: ffffc900001e7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 275.099735][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 275.138546][ T31] 1 lock held by khungtaskd/31: [ 275.143479][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 275.185475][ T31] 4 locks held by kworker/1:1/48: [ 275.190573][ T31] 2 locks held by getty/5583: [ 275.195259][ T31] #0: ffff888033b850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 275.247160][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 275.285579][ T31] 1 lock held by syz-executor/5829: [ 275.290821][ T31] 2 locks held by syz.1.36/6066: [ 275.315552][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 275.323813][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 275.375706][ T31] 2 locks held by syz.3.541/7748: [ 275.380777][ T31] #0: ffffffff8f332490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 275.417646][ T31] #1: ffffffff8e226b68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 275.435498][ T31] 3 locks held by kworker/1:11/12371: [ 275.440909][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 275.475490][ T31] #1: ffffc9001b00fba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 275.505492][ T31] #2: ffff888056f08240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 275.527207][ T31] 4 locks held by syz-executor/15498: [ 275.532620][ T31] #0: ffff888057398dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 275.543933][ T31] #1: ffff8880573980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 275.553795][ T31] #2: ffffffff8f436928 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 275.563955][ T31] #3: ffff88807f938b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 275.573439][ T31] 1 lock held by syz.5.2765/15779: [ 275.579479][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 275.588640][ T31] 1 lock held by syz.6.2773/15803: [ 275.593764][ T31] #0: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 275.604775][ T31] 1 lock held by syz.4.2776/15813: [ 275.610905][ T31] #0: ffffffff8f2cc808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 275.620985][ T31] [ 275.623360][ T31] ============================================= [ 275.623360][ T31] [ 275.641910][ T31] NMI backtrace for cpu 1 [ 275.641933][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 275.641953][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.641963][ T31] Call Trace: [ 275.641970][ T31] [ 275.641978][ T31] dump_stack_lvl+0x189/0x250 [ 275.642009][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.642040][ T31] ? __pfx__printk+0x10/0x10 [ 275.642071][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 275.642100][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 275.642128][ T31] ? __pfx__printk+0x10/0x10 [ 275.642151][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 275.642179][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 275.642208][ T31] watchdog+0xf60/0xfa0 [ 275.642231][ T31] ? watchdog+0x1e2/0xfa0 [ 275.642254][ T31] kthread+0x711/0x8a0 [ 275.642280][ T31] ? __pfx_watchdog+0x10/0x10 [ 275.642297][ T31] ? __pfx_kthread+0x10/0x10 [ 275.642320][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.642341][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.642359][ T31] ? __pfx_kthread+0x10/0x10 [ 275.642382][ T31] ret_from_fork+0x4bc/0x870 [ 275.642403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 275.642429][ T31] ? __switch_to_asm+0x39/0x70 [ 275.642442][ T31] ? __switch_to_asm+0x33/0x70 [ 275.642457][ T31] ? __pfx_kthread+0x10/0x10 [ 275.642479][ T31] ret_from_fork_asm+0x1a/0x30 [ 275.642512][ T31] [ 275.642519][ T31] Sending NMI from CPU 1 to CPUs 0: [ 275.793331][ C0] NMI backtrace for cpu 0 [ 275.793354][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 275.793372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.793384][ C0] Workqueue: events drain_vmap_area_work [ 275.793405][ C0] RIP: 0010:stack_trace_consume_entry+0xa2/0x280 [ 275.793427][ C0] Code: cc 41 0f b6 04 17 84 c0 0f 85 78 01 00 00 44 89 23 b0 01 e9 99 00 00 00 31 c0 e9 92 00 00 00 48 89 f8 48 c1 e8 03 80 3c 10 00 <74> 29 49 89 ff 48 89 74 24 08 49 89 d4 4c 89 04 24 4c 89 cb e8 85 [ 275.793442][ C0] RSP: 0018:ffffc900000f7358 EFLAGS: 00000246 [ 275.793455][ C0] RAX: 1ffff9200001ee8c RBX: ffffc900000f746c RCX: ecf81e1914c3e400 [ 275.793468][ C0] RDX: dffffc0000000000 RSI: ffffffff820ba036 RDI: ffffc900000f7460 [ 275.793480][ C0] RBP: 1ffff9200001ee8e R08: ffffc900000f7470 R09: 0000000000000002 [ 275.793492][ C0] R10: ffffc900000f73f8 R11: ffffffff81ac2cd0 R12: 0000000000000000 [ 275.793503][ C0] R13: 1ffff9200001ee8d R14: ffffc900000f7468 R15: 1ffff9200001ee8d [ 275.793515][ C0] FS: 0000000000000000(0000) GS:ffff88812613f000(0000) knlGS:0000000000000000 [ 275.793528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.793539][ C0] CR2: 0000562449154000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 275.793553][ C0] Call Trace: [ 275.793559][ C0] [ 275.793565][ C0] ? __apply_to_page_range+0xb66/0x13d0 [ 275.793588][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 275.793608][ C0] arch_stack_walk+0x110/0x150 [ 275.793628][ C0] ? __apply_to_page_range+0xb66/0x13d0 [ 275.793648][ C0] stack_trace_save+0x9c/0xe0 [ 275.793667][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 275.793691][ C0] save_stack+0xf5/0x1f0 [ 275.793713][ C0] ? __pfx_save_stack+0x10/0x10 [ 275.793732][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 275.793752][ C0] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 275.793780][ C0] ? page_ext_put+0x97/0xc0 [ 275.793803][ C0] __reset_page_owner+0x71/0x1f0 [ 275.793824][ C0] __free_frozen_pages+0xbc4/0xd30 [ 275.793850][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 275.793870][ C0] __apply_to_page_range+0xb66/0x13d0 [ 275.793895][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 275.793919][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 275.793937][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 275.793962][ C0] kasan_release_vmalloc+0xa2/0xd0 [ 275.793982][ C0] purge_vmap_node+0x214/0x8f0 [ 275.794020][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 275.794041][ C0] ? flush_tlb_kernel_range+0x358/0x470 [ 275.794064][ C0] __purge_vmap_area_lazy+0x7a4/0xb40 [ 275.794082][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 275.794100][ C0] drain_vmap_area_work+0x27/0x40 [ 275.794114][ C0] process_scheduled_works+0xae1/0x17b0 [ 275.794145][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 275.794170][ C0] worker_thread+0x8a0/0xda0 [ 275.794200][ C0] kthread+0x711/0x8a0 [ 275.794221][ C0] ? __pfx_worker_thread+0x10/0x10 [ 275.794237][ C0] ? __pfx_kthread+0x10/0x10 [ 275.794256][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.794274][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.794290][ C0] ? __pfx_kthread+0x10/0x10 [ 275.794309][ C0] ret_from_fork+0x4bc/0x870 [ 275.794326][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 275.794351][ C0] ? __switch_to_asm+0x39/0x70 [ 275.794365][ C0] ? __switch_to_asm+0x33/0x70 [ 275.794377][ C0] ? __pfx_kthread+0x10/0x10 [ 275.794397][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.794420][ C0] [ 276.209853][T15779] tipc: Resetting bearer [ 276.244190][T15779] tipc: Disabling bearer [ 276.888242][ T5982] bond6 (unregistering): (slave gretap2): Releasing active interface [ 277.449420][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.460237][ T5982] bond0 (unregistering): Released all slaves [ 277.480839][ T5982] bond1 (unregistering): Released all slaves [ 277.573441][ T5982] bond2 (unregistering): (slave veth3): Releasing active interface [ 277.582379][ T5982] bond2 (unregistering): Released all slaves [ 277.672633][ T5982] bond3 (unregistering): (slave veth7): Releasing active interface [ 277.681729][ T5982] bond3 (unregistering): Released all slaves [ 277.693957][ T5982] bond4 (unregistering): Released all slaves [ 277.782649][ T5982] bond5 (unregistering): (slave veth9): Releasing active interface [ 277.792550][ T5982] bond5 (unregistering): Released all slaves [ 277.804869][ T5982] bond6 (unregistering): Released all slaves [ 277.896830][ T5982] bond7 (unregistering): (slave veth11): Releasing active interface [ 277.908811][ T5982] bond7 (unregistering): (slave veth13): Releasing active interface [ 277.918625][ T5982] bond7 (unregistering): Released all slaves [ 277.931754][ T5982] bond8 (unregistering): Released all slaves [ 278.021455][ T5982] bond9 (unregistering): Released all slaves [ 278.146165][ T5982] 9: left promiscuous mode [ 278.200299][ T5982] tipc: Left network mode [ 278.214245][ T5982] IPVS: stopping backup sync thread 14453 ... [ 278.284449][ T5982] hsr_slave_0: left promiscuous mode [ 278.290461][ T5982] hsr_slave_1: left promiscuous mode [ 278.692157][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 278.733380][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 279.401031][ T5982] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.488968][ T5982] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.580236][ T5982] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.639033][ T5982] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.746093][ T5982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.757515][ T5982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.767857][ T5982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.843173][ T5982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.853688][ T5982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.864087][ T5982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 279.941204][ T5982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.951618][ T5982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.962152][ T5982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.016212][ T5982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.026634][ T5982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.037438][ T5982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 280.144480][ T5982] bridge_slave_1: left allmulticast mode [ 280.153205][ T5982] bridge_slave_1: left promiscuous mode [ 280.161032][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.171442][ T5982] bridge_slave_0: left allmulticast mode [ 280.177448][ T5982] bridge_slave_0: left promiscuous mode [ 280.183180][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.194519][ T5982] bridge_slave_0: left allmulticast mode [ 280.200518][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.591903][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.602976][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.613538][ T5982] bond0 (unregistering): Released all slaves [ 281.519611][ T5982] bond12 (unregistering): (slave gretap2): Releasing active interface [ 281.581793][ T5982] bond5 (unregistering): (slave geneve3): Releasing active interface [ 281.735740][ T5982] bond10 (unregistering): (slave bridge2): Releasing active interface [ 281.890441][ T5982] bond1 (unregistering): (slave veth3): Releasing backup interface [ 281.900102][ T5982] bond1 (unregistering): Released all slaves [ 281.992445][ T5982] bond2 (unregistering): (slave veth5): Releasing backup interface [ 282.003702][ T5982] bond2 (unregistering): (slave veth7): Releasing backup interface [ 282.013217][ T5982] bond2 (unregistering): Released all slaves [ 282.105339][ T5982] bond3 (unregistering): (slave veth10): Releasing active interface [ 282.115676][ T5982] bond3 (unregistering): Released all slaves [ 282.127871][ T5982] bond4 (unregistering): Released all slaves [ 282.219146][ T5982] bond5 (unregistering): Released all slaves [ 282.240716][ T5982] bond0 (unregistering): Released all slaves [ 282.253205][ T5982] bond6 (unregistering): Released all slaves [ 282.342829][ T5982] bond7 (unregistering): Released all slaves [ 282.432261][ T5982] bond8 (unregistering): (slave veth12): Releasing active interface [ 282.441997][ T5982] bond8 (unregistering): Released all slaves [ 282.538678][ T5982] bond9 (unregistering): (slave wireguard0): Releasing backup interface [ 282.547171][ T5982] wireguard0: left promiscuous mode [ 282.554011][ T5982] bond9 (unregistering): Released all slaves [ 282.566981][ T5982] bond10 (unregistering): Released all slaves [ 282.579710][ T5982] bond11 (unregistering): Released all slaves [ 282.592458][ T5982] bond12 (unregistering): Released all slaves [ 282.687697][ T5982] bond13 (unregistering): (slave veth18): Releasing active interface [ 282.699770][ T5982] bond13 (unregistering): (slave veth20): Releasing active interface [ 282.709650][ T5982] bond13 (unregistering): Released all slaves [ 282.877340][ T5982] 9: left promiscuous mode [ 282.976740][ T5982] tipc: Disabling bearer [ 282.983855][ T5982] tipc: Left network mode [ 283.192661][ T5982] hsr_slave_0: left promiscuous mode [ 283.198904][ T5982] hsr_slave_1: left promiscuous mode [ 283.204754][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.212299][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.220268][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.227695][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.240056][ T5982] hsr_slave_0: left promiscuous mode [ 283.247421][ T5982] hsr_slave_1: left promiscuous mode [ 283.253280][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.261322][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.269803][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.304743][ T5982] veth1_macvtap: left promiscuous mode [ 283.310638][ T5982] veth0_macvtap: left promiscuous mode [ 283.316266][ T5982] veth1_vlan: left promiscuous mode [ 283.321651][ T5982] veth0_vlan: left promiscuous mode [ 283.329002][ T5982] veth1_macvtap: left promiscuous mode [ 283.334491][ T5982] veth0_macvtap: left promiscuous mode [ 283.341062][ T5982] veth1_vlan: left promiscuous mode [ 283.771442][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 283.810424][ T5982] team0 (unregistering): Port device team_slave_0 removed