last executing test programs: 23.044626418s ago: executing program 3 (id=2772): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='-io +dev\x00ces -net_cls -cpu -cpu '], 0x20) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x65, 0x0, &(0x7f0000000100)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) 22.904788725s ago: executing program 3 (id=2775): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x4000080) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0xfff}, 0x10}, 0x94) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r4 = epoll_create1(0x80000) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x80000008}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000080)=""/34, 0x22}) 22.793820575s ago: executing program 3 (id=2777): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0x12) 21.854095112s ago: executing program 3 (id=2793): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x55f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0xf}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000800001c0040"], 0x50}}, 0x0) 20.392723979s ago: executing program 3 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400e45cfad500"/20, @ANYRESDEC=r2, @ANYBLOB="40080000000100001c0016801800018014000b00ffffff7f00000000a8c700000000000008001b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000380)=0x10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x4, 0xda, [0x100000001, 0x5, 0xa, 0x3ff, 0xb5, 0xfffffffffffffffb], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=""/218}, &(0x7f0000000340)=0x78) 20.223289994s ago: executing program 3 (id=2802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x813, 0x6e}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008801}, 0x40) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @null, @rose, @bcast, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x48, 0x81000) connect$netrom(r4, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}, 0x48) r5 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r5, &(0x7f0000000300), 0x0, 0x80, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) poll(&(0x7f0000000400)=[{r4, 0x4000}, {r6, 0xa4}], 0x2, 0x10000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x100, 0x2, 0x8, 0x3, 0x1, 0x101, 0x1000, {0x0, @in={{0x2, 0x2, @remote}}, 0x1, 0xe, 0xd, 0x3, 0x4}}, &(0x7f0000000500)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000540)={r8, 0xc7, 0xb5, 0x0, 0x127d, 0x1}, &(0x7f0000000580)=0x14) ioctl$PPPIOCSFLAGS(r7, 0x40047459, &(0x7f00000005c0)=0x20100) r10 = socket$kcm(0x29, 0x0, 0x0) writev(r10, &(0x7f0000001940)=[{&(0x7f0000000600)="2c9062a0e594230f953abb6dbc45665d1a455fd1c7692cfff8b93fec0b38acdb1f945a92312c076d3657283e0d", 0x2d}, {&(0x7f0000000640)="7610eecf16b853d8c9b4d8d281eeba39f589153fdd977e28e41fc6a39436b99cf2dbe3b7da28f11d63d3745b8ce2048c71428322d96595e1296d1c275b12d62282e0db0f24ee3d4810768cf6134cc2d49b33f1a8b340947b34139fc893a782254be8199c4786d9428a922cede28a45f508777dc13d706cd0f6becb9ac27ca6cf579364cb51ded5523d4e", 0x8a}, {&(0x7f0000000700)="f6f968b86ad9564f0c05f0e206a093edac04be78604e2f25c4f2cb5c066201b8d9e07720fb1952d25909caaa1829ea2e61ca64f9f009f3e129152993eb536526f47b767df09752c2d6278f9192603f781e46df02cb74e9cd2eabc398c7ee56d00b3ae5c97bd4b16e919fc21ba777f5282ff6a8733a87b58655edc68dbb8c76b225c0ed65bd8578c43a2bd72d25ae467a7ae77c49a56bf88d24a923264685394eccef479dc8dd09949dd4aeb78ad0ec5c71b8ac1157ceca6e3ddde4a36f5178e6632e43c3f4f997063cfcfd58545c24fc35b699e4a739476c484f25eb84f8901575aa1005cbfc2d60dd26af58397b69", 0xef}, {&(0x7f0000000800)="ac34ce8daee8f80436484bdb932595db1fa8fe51ad0ebea02903927cfbd9930f85942d71955111701f3fb8be2b6221b0fbde0eac84fdf09e20", 0x39}, {&(0x7f0000000840)="6888a4126d1d31330e9ab62cc2bf3f8d9ae79cf24dee32cb73719769e44f232d9b483aaf0713edc05181c054515d788904c98855eab7277f900f5c10064f52a87dc8f1a1ae7a358c8a559bae88e8e3bcaa81f039f47e5a23188eb50c38f0a9d60358a560dabd7781de20586474b012755750aba7130dac45508db0333e5ee2b3427fb529098cfd99a572c09ccc68f676db25094cd8416bea00f6", 0x9a}, {&(0x7f0000000900)="3cccae5fa586eea554b1c40f4f5915c5b13027", 0x13}, {&(0x7f0000000940)="6eac22fae616deea703445b2278cc7cf119debe982d75652fa8a82cd94084c99a1aaefb7f167137eda2ea3647237a6fbb75e00830d759b4b06b1a090898f479c67abb985d625d5e58da432de8052d3e546fbe3f8abf40bd63328b2589e7cf3ce991be59af2717e078723808bda4f178e6c49e153fe1c5146e9a733ef931c9142a36772ec430f5d87b03757fd0c76b0ce47cd4b0657a45502276c0db2536156a868c2aa93875fe45e6658a112ceea0c4c5433e5874e0442a4de9f24430efcf8d41cdeca54ca43b547e7f6061051ed75978ba9df8195137e3874cc054c38844dba9af38560ae08361283b874dfec9f0b1cb2bf13c9217056e43c38cfc842608466745362d92a88497a3142eb5f77a158f933b8518df3743b870e977bcaeb7659b616ae65c9f216742a00b11453b9f1790446b302be8160a4f1627d9ef4dd599bd53f7b53f91a13b298485e05fcb485c4fd354c52f2cd426d250b78282b6f96c77ef64cc7e0250cd231868b612ec233912d7bcdea7349db6a833dcf6e5c1fffe5f3ae144832010cdaf270ed39afea6db0a1c73795e4829521cda7eff016286e9761ca26dbf88b5495f323531ea71adc05691686f3dea12115102126982eacb587fe9a4366b0fbbf9cab892ec352de5736a7dc2fcb8ba64c030a99456e8f151b76cb8143d15e11a56f8f3fc41eaeca0175ef68152812eb03a3e59a6c9c308a6e904511301a36e2b026621c2ce2a5cc9b06e44031cae4b84ae1aeeee15560b7c74dff0d416497de80256fc66d792f0c6a2b82c0a3abff6e64d711f669a88b2edffbc6dc881fedbe78d650049e4a4c5483df897a932d17096a6dc75efa8f2cdac63c33aa58473909ab2dde59502a4fb83665d81be23549b77b5eccbc0859f6370ecc33d86b85dcda5c5944b1e034e193c5fa9c51af9855a89c58e1a4107dc23f3209184c81bd6b09587bae71dace7168fc54de5dad1e87ec962bc81cd5acbd230eab9e84fb20e54f20299d33a1b1727ec344f3487b9664cd4c058652bc1d576e7099d90f4e1c0f9a03d3b441f1427a06c5eabe98cc4a290366a896fb4c76720f20aadeb113a8af71cf620a3d3c7e6a1a96bae479f7b8683b245504024170f0a1c46f22c20b8695276d91c9a4f5f2a74e2d5fd8a9ecc3faaa5db9993bccb9b1b35a24c67546035a07a5765aca6a48942b3afcad86f051405e155d1288d4678dacd8e954dddd6d57a052e59f0a495906ce32bf70ebfce53bad45333b75d51a16c611ed7b8781ac27602ca55f7ed15b13e8b11312e6db29073c7e4ebcc24fd5113a2f9a3a18a5a9b3695a35a140a90d314804303f659f748aad777d86279a063d07307a4b2a248e4393bec8b1547e046ff0b53c276c6e6e6ac1baa4666ca2fdd17263b7f20890ad9771a83f75738c6c08c41f126111a4339ea5bcd17ba331076be99d27b4e474c4d57e985acbea19f3914f158ac064a4f14ad187df8330d66b2a20a2945427dfa8b327d7d0de33c5934f48d86b4b518e962ce12b772a0e138407c2c5f8e01b7b4bd5a01aecf85d5a7b84b329498ddb9d58ef5eab8a11c7679bd202bb7f0edea02633f184777a3f6b793328b2bc2986a7c125a18101d4805faa11ce1b32cdb15093c4bbd2b5faa8ee042780f194ad1e33811b8c373d9bc8265c8af2e377f09a05c8e87f12cf525b0c9b29941ab915ce45bcb21dd722939bcfd6e7f78437da97acd87e36db55d7d652eabe746d08962e5f6d45bef18b85baad743b7ebde81492f14a48c61afe5547a08391966d0009a1a0e65634c989e386f04fab3ace375ee2ce103cf7206a435571a370673e7c846203fbb16ca96076a197d7179ffab40ebc858a416bfa241225e249e9ee6595ddcfbe4475002d5e229a501c02c0e1b27a9a6d9d3130b5dfb91c508d8acdac8490ad65a44f3c48b0e844d3cc8ba55d07fba0834dc9bec0b5c84e45d2b669bd9ff8059709615846897abbaf5b1bf798d47f340c3de993324aa5c97306f83e2df3dbb9744a3e22746cf1c662a0b882a5b709f4228d88c00392080611bb87c4ef91fde0ec4626fddd255726c29948017e6f96f23b9c5c0503762cdcf5d6a41ab7f523d67de886c36916cbadf168b0d061e99017da87cd716451095616c05dec91d0ceefbbf887c715d7c1a51cb2bec131a718ae4b5350b0696ac98d932297af6b0e9dfe5759beb375a791dd5bafaaa0e189a6a8f0468f70355bb4f5a506c7cddc22207d2bef4bfb0f6191b422b3bb4ca5579e6d7d55b51e3fa3d1af0658e121d243c31fcd0c43ed013083eb23bb7728f4616905723b22e796139b0238641ca02f1e6c9f91ce1e519d44e69eb970f258fe11c7d8ae4a31392825bc404effa3f363e3260dcb391e150b5d58b84e7bc9be370e0f570549ea580e6dca4b42e753e1cc3292a74c12eb344b14596fa1e4be4344fd709e072037ab755764c2a0f6c2fbbea8f53eb4613dde06d7f78c8706a5bf4c84a7736a42a4587963bfbab119e9a2640f07c398f51305afff1930b3a0b34064826bd3b8a47899966732cd414647d97a46755d6bfd7127d3fc0599637b191ce646a54ad7d58f99094c7ee3c71a2317a977b80616350581fcbb156269e18485b5f0b412c773b666f965a83238b44a284caef93f54d38a7ea72329c2feb293b059312592300a0364574585f58e9423b5a479c36c0124a8cc480db432d9500417553ddbf229d33a1975b069c9e7a35f58eedbe1851c244a5e974bbf0c5d51bf85a5de7e93abfc6ad3f4c479a846d9487542c8bb74fb54853309f6b19e18cd8cb1e9c7d316f415d0acea13639f41574d7ce23d0307a868797e34f012141ebbee5ad03edd027b9ef47028aca16b928045d2b2283e1cbea96419c56a2a225b699b8e596e032a5121b61798b7062bec3a65a2d26162581adfa255bfee8ef4678948c6481139b1fac702749effd9fb6f0796d1120a1c23325d99f9b0d5f9704b78ea85003a8f928ee4a769d205112b22c6ce165583e0700b4e3bcb3dba0ac5e4f7757ccf655d4492a483f3e971b0bde49661ffbef62f7debeebe780be922e1a43834043f4b22b3b29094dd27fd025a38a11de03975ba06e275ce4a7a07658c7da2f005af8c495edbd1428a0169fbc6653e7291c868fe4ba0eeea6b0478af9d64bd013dd6abcd2db01e3c1c47a5f9ea03346ebbd0566765e513676ef0d0b21c0f34af4c8daa15b152d9a1a2a4f0306113c2ae513ef64ba83c9ab3ffce8064efe65b3e7ce0c27f4366a90272868fb56c09af4a67c1ec154f3c3d56012bf227a70fab7daaa042006a78528a17ac23b12feb2a85066e3e4fee1237a5094c968b600115c7e255b97d8765d6b6125d6f8fab89351a4f9408fe2888a2ea5769eb36c4ccd6073298c157981483e8d23370884b0c2cd1f0c245c3c84204cc56f0ef0b1339feb34845644006527b88c7c58acceafbc850de7cf75138e9b71191983d5f6c3bbd26d2d1ed88827a99dbc8af23399e40c7ca3db3a9cb9d316550e9ad2b2bf978f9efccc3eefa2e56a35241b0896d3d318773a6b79a17cf5258eb8429fcd7d23a084bc3f9ab4891381f2cdc1e5a999ac06e8c9d276e2f31d59c3839ee63fd8db2d2485430bd8af7a5a66ea7c34729abc82fd181449c367a98ebdc0b69372ece3a9560342f94020a650dea40158e9169ff5d2760e7a349a8d2f1d0be08bf37d0ead98555444b40cb8c07a8ceb5ed011ee047e77a0a93d53b30c9ef7b7c8792ea1425c374bd9833504a3eb9820f6f1722ff3178d994fb197177b6d9a8c0c265f0d554f21a01fcf6bd9044796b56c9ea7b1bcfcfc55262877263eb74389dbffa1863e64d51180c8adf1d9121e396aa6882330ad37c56b25d93d1b5651982b9e91e96b6439aa211ee5e41b559395b5ee91090daf9aec2f26be61d141b5e2ad36b1276668cb3f1d94dca5fe63613812c56107358e98439b4b12b060669a7e384e6173cb0733c2a70cc0a02172739a2e92a63cc256411bc2e092ae68f12721f73e58e68ca6ca82c12cae799d40823b063223102a851308a96f9e81dcc7bdb10c7aba19eafa9b40bfc549b82749374af38214a93992bc34b90f47d663f06764e1adce87a1fc3c83c89d73be4323c750b32f49b9a5f8d8460d3e8708da040e575361726cd7ddb191c956591c302ce86cb72f1501a5a5b605851ea09f5364ec501e22aec90e3b2247ed0e9ed481afed1a82d6a844d7d35e25a1734128207e88acfcd6f35583a3c6b3dae4b7117ba8799890b05f54a67a706e065d930630e0c49296672220e43223e1202f9be61a5dbe1e8f7be66dac64509ab431237817177cf50e19892cd9a2bba72c1362bc4e2ce19cb1d2227de07ed27e5f60efe705201d565cee3a35dbbf12700b75c5fce39d0c2fc8db01715dc71244244e11c3f8458321f88355c394e6c4bdcd22731074aa99a35aa626c0f2a4dd1233a2d2a38baad81d8adc6d41ddbed5b81d6889923d4e7cabe78c5a5174ca0086573046f27c13ea6ad39002f31fa94bc1863de4d7e78e0567307a01683f4dec3bc653d378394c1d6450242dc299fb09fac991d77109d0404b203010b33775dbcb8530b1ab638957b593a177fa911f2f37a8d677e513b8af7f9e6f06e66d114d1675720c328f062485beefbdb493d81a903d6226975dc79621213e18ef2de0875a19a755daad6dd79a0e30f214d28185e1535232fc8a2550e79b963cb9ca016816dcf5508e029fc51d3b43bb8de22a28f38d35450b3c98c5c334ede737d5669b41a6c9e7a73e997fb96679f267ea28f62fd900e41037698da5e7698a8b422d3a5ff8dfe2d3771f28d1f1cc29f1c83677742f045304160f3506b031192f981eca9898a006e283546073da3062e7083f5cd1b2f5a9e442fe5ef09cf6b03d8832b1e53124bfc1afa53f11e1fa83ec52da9e9bf1101bfac1709710f664dd5755463fc30a01683b61713531e8eeb7c2af7409946908ff04df3ada1ad4ed6b2de379553c762fef51f9220002e100dbdec42ea3066cce9e3c5f6762dba4d3e1636a49ddafaede018a0c3a17b453dff7171a40387458b87be77a8a885a60a675c9f830a72754948a537b02d25dce8eebb06d90c5430b8416cc268c2855dd8aa8620852982f51203b75ebf12b5c3a671edb7a0957cb6142a001f4fca80f254ce7aedc4ab3aa610c790b27b45e8bbf6086542e0dd456735b9c210068bbeaa4243a0a609ab4d6d50eeb6834335591e4ea76f4deba9ed61e6e9cea7f8f84394eebb1c0be1a83812fc4b9a239c6105773f2ca55144ce08f17a435346c494899c808bb86812fecc23ed3b3a7a5a99e21ed53b6bb162afe4d2b8393a579ee1d1cce43402c8cb00a50d4bffb6b28b995bdbae7d08ac72f3aeb7a5b07c6dffe89407ce2791b2ca05a696a4046c7886cdbc30fc2968b6e6444a741764f0b5a4c7537e464833e9ce61bcdb51a53ef60d2302c0be89116d917685ffdcc89ae0c2a8260bcc57558c1baa74ab507b695c24b01e7459b4f3c3a22e2c59187c7993d72225c9a53464ccc01636172c71d4d6fcc86a6301751ba20522c070c9408f330789bfa21ec2a50659614b14bc3d9aec0c575e73e6fb21c34999e420c2a0a27f109f69a8fdc224c5b79fc45900605db83ff48eaa34153abe9a44a5c8213e4f10bb77c07b0fe8e1c824e9cd95efa87bc53951b4a55e1fa83bd08a40bd691e7d9b6daa04e5306734ed9e0c396fd327616f9ea51f75d213a586be981bd567e943e6977aa32a47b1558cd89146c003a1cb76c1f106b3af0cedbe5cb3c5b89864", 0x1000}], 0x7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r11, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x190, r12, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24148de6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa987da4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a381288}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5453b85a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f77dd3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5654bc0}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x80, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f000d81b4878b24c6898c163d67a19f6852ebf0ab2023a34"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044800}, 0xc801) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x40, r13, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x53}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}}, 0xc000) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000001f00)={r9, 0x7fff}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000001f80)={r15, 0x8}, &(0x7f0000001fc0)=0x8) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000002000)=0x7, &(0x7f0000002040)=0x4) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f00000020c0)={r8, 0x3c, &(0x7f0000002080)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x8, @local, 0xffffbb98}]}, &(0x7f0000002100)=0x10) 18.981579734s ago: executing program 0 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x22, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18.850141005s ago: executing program 0 (id=2830): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x80, &(0x7f0000000140)=""/128, 0x40f00, 0x52, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x6fef, 0xffffffffffffffff, 0x4, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x5, 0x9, 0xb}, {0x1, 0x3, 0xd, 0x9}, {0x2, 0x4, 0xd, 0x9}, {0x4, 0x1, 0x10}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback=r1, 0xffffffffffffffff, 0x29, 0x0, r0, @void, @value=r2}, 0x20) (async) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0xafee, 0x8000, 0x101, 0x5060}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x53, 0xaf, &(0x7f00000003c0)="6d431d9b6996369554767bd7caeb1a47d4362fbe3ce1d6912ef478f4aaf5370dfe21737d748af74e7649e967b79fb581b55b29642f59cdba0a3ea55ec4907bcb4402ad229dbded9d9f0932dad82112294fa5ee", &(0x7f0000000440)=""/175, 0x9, 0x0, 0x28, 0x4a, &(0x7f0000000500)="8df87dd84453d2d6c48d8d641cdac88b1db11b45e35e4a97c5a22118b1ebab9f28b78f1495b7f08e", &(0x7f0000000540)="5b2a3838bb9eb5db116f4a3d6d7f3b5dc525da23b711bedae70ab5c53bdc4b9d20b5be3b809aa311a22f816bff8aa44b6b11b479326f79a5bd4f1b1933c3ddae135a505f97dd3abe112e", 0x2, 0x0, 0x100}, 0x50) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000640)) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) (async, rerun: 32) writev(r3, &(0x7f0000000940)=[{&(0x7f0000000680)="bbe5f7a90e210849a84889948c7a19c71909d8ff553d5d575db2f03f9a84b1a859de10a759254bc71f18eadf9db064b93019982550f618e44b1c869ab37149140c5b8b3c5010cf618c021884083942f635f9112652", 0x55}, {&(0x7f0000000700)="e8060bc812c192e647939d0a21af628c2a3455576a703980ac99ff773ba1a03dcc9e8833d18b465644d5d3666d35ac9c851d9374c79b12d61c9c78b7019b468426620bff9479aa6de0e5e19dadca2dadf53981d39389d93258b62076bec277532350fc87b3670f388f02deeda3725b4031959ae8b9f90e5ac3f905f901b7e7eb2e0d69cf024d0ce95bc669cf63bae213548d78ab11fe1bfe96aaaa16aa4c4965cc3089e4d14f55cbf1470976efd76343934f0a3887a805990feea936319acace646b643e608dfaef30644f33eaa64d9a7d86a930a4f0ec0a4010", 0xda}, {&(0x7f0000000800)="28ec1238f22c983ff245eb86f4f4a303068d766f1c9a1424968ae27f995e9b33986022ced01fb4ed9f6fd74aab75e9f13d8359af1e36c904f49723153b", 0x3d}, {&(0x7f0000000840)="17e76f8a4ca8d3cbf56787f7f683662fdb5622f228c8ec632b590160837b322bfeb177e088cab6128588b07625cf529022ae70d4cb51b2d9430847978a862ec53bc2aa86398c54aa581667967490e801dc74929806ae461e7809315140ee8a8ccb2aea55c74d8b779da258b6ee313eb4a06dc3fc9d58a63d82896aae81a18c877578bdfb5e423ee7ee4ab91e4c68e59745ef5a07fcb2f5e45cf3a13602fb83a95f510900e36a246b4b85b4ac6a3f09cd0fd589e0", 0xb4}, {&(0x7f0000000900)="6207c3783b5f7b80062fb36fb98701c22ac188be8b13", 0x16}], 0x5) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000009c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000a00)=r4) r5 = socket$netlink(0x10, 0x3, 0x1) (async) r6 = socket$inet(0x2, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000a40)={0x0, 0x9, 0x3, [0x3, 0x9, 0x9]}, &(0x7f0000000a80)=0xe) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000ac0)={r7, 0x0, 0x8000, 0x8, 0x8, 0x50, 0x1, 0x3, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0x2, 0x5, 0x3, 0x1b}}, &(0x7f0000000b80)=0xb0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000bc0)={0x8, 'virt_wifi0\x00', {'vlan0\x00'}, 0x9}) (async, rerun: 32) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r9, &(0x7f0000000c40)={[{0x2b, 'io'}, {0x2d, 'cpuacct'}, {0x2b, 'net'}, {0x2b, 'cpu'}, {0x2d, 'pids'}, {0x2d, 'perf_event'}]}, 0x29) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048801}, 0x4000) (async, rerun: 64) setsockopt(r6, 0x4, 0x2, &(0x7f0000000d80)="98580b8f3f8be5c649bec597523987ae5cec2b6ccfb983fc1ba8e1c50b6af80e9eac2b672fd18157d35a70af4838d1a04e9aae3ae9e5c4813555886bf95e77ba762f293088f4d6bee38a195fa9a783d1dc2ddd28b6170027c4031da031195a4ba2de6625e6c392a07c6a20eff54aec2543c0c0d25c37def117e12e78f7a1efef9f65eed89fa0e131b653b3a53f653f701a010bffde6bd11bc10ad87f66b2cafb94087d2a52a1b368", 0xa8) (rerun: 64) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000e40)={'sit0\x00'}) (async, rerun: 64) recvfrom(r6, &(0x7f0000000e80)=""/4096, 0x1000, 0x122, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000002000)={0x51, 0x9, 0x9, 0x5, 0xbb, 0x9, 0x0, 0x5, r8}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x808a0003}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3b}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1d}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) 18.634485743s ago: executing program 0 (id=2835): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x10, 0x3, 0x0) (rerun: 32) epoll_create1(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (rerun: 64) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 18.512904226s ago: executing program 0 (id=2837): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4806180000000000000000000000000000000104", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) 18.318968938s ago: executing program 0 (id=2839): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x310, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x1e0, 0x1, [@m_xt={0x100, 0xa, 0x0, 0x0, {{0x7}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x2a, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000}}, @TCA_IPT_TARG={0x51, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb237023375"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xdc, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x11c, 0x1, [@m_csum={0x118, 0x1a, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffffffc, 0x7, 0x7, 0x9}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc62, 0x1, 0xffffffffdffffff8, 0x0, 0x675}, 0x4e}}]}, {0xb1, 0x6, "d2990ddc96447f6733ad356593557e70e17945b617d6e26390f64d88754d4a753e27565de494e3e78f119c8b7a529ddd13c6f4117badc7056e7a1b38494e3afa87056c9db99cd66c882461eb503f4be4ea8e12c19c1e5a8b86b5d7d42ee1a73b81fb6edb42b5c214adbe13f0a0b82f8468461b4734f7c938ee1135a00ce2a96764c79a1ecc6a68c24bafea591f2cd4840854e99eca1a30faa2e0a58a517340ce87576cc0b04eb806c22c08a430"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 18.261406663s ago: executing program 0 (id=2840): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r2, 0x0, 0x0, 0xbb8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @local}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000100)}, {&(0x7f00000006c0)=""/151, 0x97}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000400)=""/28, 0x1c}, {&(0x7f0000000780)=""/37, 0x25}, {&(0x7f0000000100)=""/35, 0x23}, {&(0x7f00000016c0)=""/183, 0xb7}], 0xa}, 0xffffff81}, {{&(0x7f0000001840)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000004e40)=""/121, 0x79}, {&(0x7f0000001940)=""/192, 0xc0}], 0x2}, 0x9}, {{&(0x7f0000001a00)=@rc={0x1f, @none}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000001a80)=""/22, 0x16}, {&(0x7f0000001ac0)=""/103, 0x67}, {&(0x7f0000001b40)=""/154, 0x9a}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/60, 0x3c}], 0x6, &(0x7f0000004d00)=""/38, 0x26}, 0x1}], 0x3, 0x2000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfc}, {&(0x7f0000000340)="d019d1f9eb239dc079fd2234d864ac82905f4b9900aa5ff9072c2f730c6180039c9a4e5c48327dedc3a9d270f944220ec094ac5f93c57027bf9ef28741da9f69c49908e4a8a6f2636800074a211b595fcaa10f515cd2139c6ff811cdb74ff750ade68202e720b60f507e4d0c402108fdfd69e89b27ac76f59e084a272ca4283b84e5ee131e9e1b1e744e319547ff08279d18005fe0c761e6b60e119b8fade284a4123dff2aa050e2d492a4402a1323f5f7d584", 0xb3}, {&(0x7f0000000840)="81c661f5bd760f02735de2d8a25a8fcdff79a4152a4d4cc2e992290b32c456b5e79be4b22b0447b419e2b736d68ca14093fe9d2209391c8884bdf2d8162e655d1417fc0ec611fc767246a5a20cc0e6f93891a28203e853b490035a861ab2be4ea8b28cc4e19c87ec8e6dde1a72aaf5ce9740a570a0d21b978489dc91ac6d682634e65ca6aa1ec19f9a41792c3633ee311ef23e0f15d0dd4d2765e77b958a2cb8bf50f357eaad7633f410dc73ec1f99095c59ad79d6b0cb0af436aaa7c1b0e9be8d78550aeb8d1e908e081de911833b92ec21a93ee56f92a3a812598149585e3eb5fb97c8c211df446695a6425b06fc9b8adef57abc879c076072446ff17d1625c7d5881f35e88d079ba3c6398d5545a38513f0712d0014e147bed30b500fdf721c0fb514e37d55c81ceb0461cb2d3f33d71eb6cf04cce9fcfb711442555aa0b9da69ae95216093a384bc74fe05b3830bbd03f4ef1ad994de03c572cdd571a2c3d4cd268370e0bc46e021ba82aae2653a5367353e3fead3fc5ac09e5e747050a645a350752e3ff63edf515425c03766d02f753fa283d951f9626a5a4a2522578bf197f02b719f172c794a9ac0e0420dbc170beaf40249a67d5f2384e8d46c22d1a3aab5f6ac549e8eb3c6a7a4ece4bfaa5239d7e9cf5cb5dd2e808f5ec4b1ecff2cf40552e4d7d2fba4af5d7b9ca2b829dfc44df49bd6ad4e3c78625d925256aa810ce0dc9b7296ec86aee51f90fa7b138faf71afccacdd2b10e5caf3deb690c98974260f10491e882f79531b0b59377c8a1c6e96db44630bd72d87930fd6394848777a43ce9771cc809f84514180faf09caffb53d64c73b6987b92f873aadf04d21ff9b26529db083ce59d1428643fa13c79e350d0bda2a6d90a2ded4600974dd6381a6142879fedde12f774eb15b1e4a5e3c659ae4ac87afcd2296a5325957ae82c8306b37f4fc43f080c670b0c1b901c931af413c454a730d3d0b4739e91b56ea4cfcc90893634ea3e3df692ca3bba12491b56c8c8ec221890575411540af390aee0820791fb4f1fa7adc692b3e20bf26a041a23c225f9608c2af305c95b777ad21b38a1110aa15f19eb4f7c2c5bb3032f86b78d667c8b223056a6cf7ab8088ce5ba5c3deb3c6c332dcfdc7619487cea33b20b7ea2ecc69a88fa9d746a97ec7822e431a8bb89caa17d70e29a0c71c4263ef236cb6a9ed23fc50f76ce58a6c2c624cf313b64540f595fb5204eb94d6418c39026b27a0a23c60ff1ee2307d75bb0f28dc6cd2685be92dd6cf91a86346e6b8d071e2e2c839a5ff2544cce8bcf8c4e5379e7b941ee4c3670d02f1dd631527edd1b9edf485e5389b1d6e2d8adcff05e43178ad4d00b34c8ea557a96d9d9e51da4e20fb7648590f4889cb267e370805d62be4996bf06cc746cb5178b78253968cf51635b598b5eba7af2d3e9e93ed3a2e29575b93aee9e44fa4c0b351285738364c61d81478e6ac5e302c0bc9ffeff5eb925330c2cf53051cad5438b8f240b4264ce89b8f2c96bedc38b938d63187471f08697e3509d9176f803963f2c9377b0c61680085509c64204da0335f1b6f3d0071b8ea96256258124e49f704a6c357137d39bde188f64f5245294d6df82d7d93fd2a170d1023a9c1a2afd485a8462781f88690b31315ceb19717bcf54ce7de6e6d1d5b5a0f9043ae34496cdc97b6b3b4aa750332df886c8c96943d9fcdb0371778f81c8bb509a3827c6fe47184f0c694193e8477677e43ff6d79c7b2d26b01d37062596565163a2ebfd87c818c8156423bb6d945e39039e9dd6093d21f20e66ecd605e3ab1dca67c7e1fedf05795b67bdd7a93a0de21e7114aec0a9c7c8f417523057a7b87b79a802da948af7591048790feefbf84e0dc1a91ee7989582b4b922e6d61ab442e8139a8a1d476f6e0bdf750aa959094afe1da1eb095f9ba40d49cbfeb79112f769e02e53572f91a4ba2357bfa9f525ed7956d8cbb41a2952f81a2c9410871a85c391c400c9ad1e5c6d0a8b4b51435c989dc296b79e67e046fc845d51302495fbd3d95cfc0b874118f5bbd81d9c40547238c9495913ee738b428f0a7be2b4873d52e67ee9b7fc2761f4c7029e42fbd2de17a92a16ea051e7300fef707610ecd3509c1abeff222af9c913d245634511af1b056f638cc1397a51669dd0a75af82ab6f736ecdf4df6e7371eb818bb54d41fea67c3daabaacaff5d79e7f47ab794542ab09c78f449983ace599f961e7bb2c486f0245b54178fa78b77207c2a5ad02c4c27a77c1a95fbdcfeb840b86422fa513fd62066d7307854311ee74ebc4e348a78ef86aac201ce50e277210e980ff1f7cbd4ce2ee10f72e900373488accd5ea563f432b1b56433e34955ce9b54c03508572861d588d2cc693cd5d90232ea2e1ee0e95c62df7cbfb57f7c29bdd59862e5c3ed7b45f31fc3e35e9fcd767c6fe9779f45dade9c95d5aa9fd7963a659fb43eb32763812bf967ffe3a339aa30e13fd0d7a31d4275e458980eb2087611292402921233226be46f02c82780efa0bd44a1e2c949a8c05968f02e060112d3ea3a7097439dcb2a6f0bb72e5e87a0253719ddc37ce433bf1d2fbbc5f1932678f21f02981a1e1630a72bf33c91d9f1ef83e0d90ea5b00cc7d5a4110dddb2e745704e60663605080fecb52cc35d85b1069ee4d707ac444044d7981e1abcec51d26d1c66719a3a72a55e7e5da2579a26890387a9925bf26777808513ed97c833786c424f818e86212b4ecc6f3eeb843bfd0014538990c103b9ffd9bd17243673a7d37ecdf0baf80d08d926f09a1c3c0536e6b7e973c6c2b0c8fc2a1f95840bc805cecec11d0cd296203f2b052c4290d732d7481067df67602c0def2ec09c67eebe76bac9bcf11e9738e3f8c85054871b885a78e13037d1f3eae005fe5e85b95aa3a604783e775edad7a7922d192eadcf4e1c5e0f9eff22294afcd52af39e886bdfd264fb48661e42d400f46fbba572093765c56faeb2d90d386ba0e5170ed73d370122fbee6e194cddf14ff587abae6a423d9af5679d12d45606d3fc3b8b663105dabedf3edb76effb0fc6f597f2a1670976b147270e133ebc4d893ca731fdb8a24bd80ea9b6a7468f0728108b1e03f29e58989e7728fa90c7171bbb277f93e86ef7614429b9f7a84422541acbfe62f2c1dc5df7bd8765ca1ec73a0967bb2ad40528ee83be41f5a3b03bd53a56da1cb885546422b54fbe87fa5422745afaddf5a767dfaf38d9a4f042f8672c04a9ae9ac8dc859bb30963fe03e89968348a125ca3eb403cceab7dc503bed3548e2bfc35ba9d1da3ce1955fb70bd522204af59136ef24b112702805e22a2ecc8ce2d48c94d0fb33cae65a894273ca90311b42b83325b686771d1d534f1a77e791c97fe77fa8bb305c52816e99636f17dfb98be72447cae2248f5684d4361cdf24ab33b9b681fb8824c131f360d1acb8ce72b192a5928795951351443e5e830c5ce8123ed4c8314d6b459b37f2c231835ee4df54972dcb8fed47c310a8d7c33ef18ad209a8743ce78f07e0a4c7fdc406ec7b840455fde42cf91f7fa1b189d24dc6101e1a3d78cc270dfb0b96d24454fb2c22f0d8524d793f5a13b70e9c6b6c3515fdf36daf5cbcb693009ed5ee02ca57e403b2d467e47aa8656ab166cc73ad92384609f59436bd4c403816c36c13dce78e899f3f1f4895e2aa090af763aabb28e6495869bfaa712b2f09e62ac6c11d1bd65361bf73007d9703dbcfcd1782ff4f967a8dfa3edab4ca89f53c5c0250795dcfed5f2a22dff03f18d2402fe9138540aaca957fc8ea28c4d216b2eb33a288cb190d32f0b7ddd1b00e86a65f337018a8732692450802e88281c2a425cbf86dd57c4a5be5aee6f8f0334cd9681606c189fd18ca847770dd2209bf750870151687f6a8eee367546130d54676df54c46c1d861791f49bc112569dda526b658a1c9cc0e6eca83efbf9b7c37870738745c55dac0c6219bddcd760b1eabdc3800e271eac0e3c795c2670fe52337a221814437717cb32def22cc4f680dbc752533f14440eeaf34a47221ff8305f9352c7296682542f542795668ac137a6f2899da5d101d79429b3e03ca564b8c958eb594c33dd66703c0e4d3b5938c8991bb00ca118829838a05739f3de80b541d28d97f086c2408eb0bbd3f3b92c20ad31f73abe35a58ba05bcc6fed9c3b34fb1c9415616e15aeed99c6c1b3109b96680fe8d2fd0049c4b6dec56bbf88609f9e16f43f42dfff9ffb32db8e6a165442b4ba73cc851ea1428800efcc425301b26043493e8df53b322961a56562dc86f2063ad6b1017d3b9038a937872356a76aee1f90c9e9967985d224c0706f4864fd5faf6236b8c924418c60f947896cc4a874fa659a444d18a87f17e5ed990dff0532d74220dc1a30f29bd087dcd659bd16ff7d78db268cda542c0431c314492df43cf665961b2493a44508a7740ea5e5d4eeb58ff509dae6fecb01d80f9df33864569f47ed24a417e01845a4f2c8e4bfa37900e723b93451c9a22d348ef73f1fb9cb053ea174d7144bdfcecf0369d663352aa595a2f6e61cefe30a1a76e019cb441b25e255337d456810ad0cc73e4a13776636276bd14d97c451b01da01f891256dcfb1944b99faeecfe2554ba7ea92e2682e4a38752c6c86bd807c9d9f4062518644b76ebc6590e48641a19823612ea0d98656e46c9a9f061227db23a70a5d76a0f13ea8936be13c4e1b8d3a6695f7cb1d7c7c669f842c63c0b10d86924ac75831d7d6b7ab0cb44c196637e394fc9e2467c112c068dfaa14784906b48ee2df697696ae203f8c24dc040d4422cbccb0ca564af7eab5c78d19f065ec6844c6f57d092b1359e1d2787f43b445eff7f9b456bdf79b85c319bbbe313f737d0b7bf649a6acc542737fe423bbdec7456adf0707f4c1dcc6707f62c44a00663368e2a0e0a28b4423a73f7beb01896ea571b44d2959d077f2f8810e3b6a51efb48207613ac921743c98354e6cf64a9ea107f9f3f53286a9209ca7bdf3d9dbaf94874aac9dc587a1e62bdf75169c7a476b7762f3b2035f861d85adc08fce22bdbcd92d2a9531d81376c47136da640e8e971c3d045768103532d68365e0ff7bc463dbdbea2316b4b944c8799854e3dfbdc1abd265ed6c667bbf86fecfe6d233cc8", 0xe42}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000000280)="be5684ee8e3ddac96a39f7bd6d94c09e", 0x10}], 0x5}}], 0x1, 0x4000800) sendfile(r2, r1, &(0x7f0000004e00)=0x7, 0xffffffff) 16.206575054s ago: executing program 4 (id=2881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getchain={0x2c, 0x66, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0xf}, {0x8, 0xf}, {0x6, 0xb}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8804) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.142369285s ago: executing program 4 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000ac0)={&(0x7f00000004c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000680)={0x3e4, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x75}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r6}, {0x1c0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x18, 0xd5, 0x1}, {0x5f, 0x4, 0x1b, 0x100}, {0x0, 0x7, 0xf8, 0x4}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2f01000010000100feffffbf177d75980a6876e779cd84e800010000fe880000000000000000000000000001ae1414aa00000000000027d8e9ff000000010794183806c2dfe5f96a4fd9e2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r12) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="030b28bde103ffdbdf2503000000ed64a77514bb0727206974a701f7a5d5b8ade3ba99c852ec01673b10e9aa433c939b59880fc1f29e918d7cda6624eaa418f455bb5a3d95bfc67c21329c2e849c8a57a69eed39ef5ed30eae296cae457587f43a9583ec1a91ef076dc17826f36c0596c83cb87e16ff2677d2a1cf2d8c1a2e06e1083bdf9907423f0fb82c1dee7a5a82393622b8711b3dbd075e8ace04"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) sendmsg$NLBL_MGMT_C_LISTDEF(r11, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r13, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd62}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getaddr={0x54, 0x16, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x1, 0x82, 0xfe, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x146}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x80}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0x2ca, 0x1, 0xf6b}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005c00), r15) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xff64, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r15, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x58, r16, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xaf}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xfd}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x84c) sendmsg$NLBL_UNLABEL_C_LIST(r15, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 15.922389179s ago: executing program 4 (id=2888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000005e}, 0x0) 15.919421434s ago: executing program 1 (id=2889): r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x1, 0xfffe, 0x8000, 0x100, 0x1000, 0x10001, 0x3, 0x92c4, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r1, 0x7}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x250, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x523}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1fbd70e5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d63}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8219}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x362}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x59}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x24040000}, 0x40088d4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e21, @private=0xa010102}], 0x2c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000005c0)={@private0, 0x0}, &(0x7f0000000600)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0xf807, 0x700, 0x5, 0x4c4, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x65, 0x0, 0xe, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@end, @timestamp_addr={0x44, 0x2c, 0x25, 0x1, 0x6, [{@multicast1, 0xffff}, {@multicast1, 0xd9a}, {@multicast1, 0x43e}, {@multicast1, 0xc}, {@remote, 0x7}]}, @ssrr={0x89, 0x2b, 0x6c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @loopback]}, @end, @generic={0x82, 0x3, 'H'}, @generic={0x7, 0x11, "28f8f9cd63856117ceb5b02551719b"}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x2f, 0xf9, 0x4, 0x5, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x7800, 0x20, 0x10000, 0x7}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1ec, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x801) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000b80)) socketpair(0x0, 0x803, 0x1, &(0x7f0000000bc0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000c00)={0x2, 'veth0\x00', {0x8}, 0x4}) sendto$ax25(r15, &(0x7f0000000c40)="6048b0ad22", 0x5, 0x4000000, &(0x7f0000000c80)={{0x3, @default, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r4) r16 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r16, &(0x7f0000000d40)="0124899fdffa83a95ea3a540812bd0bb6a6f924f617b6b20fabaa29b321ad2b3f4b6b04f452d15afd158cd6abbb3fd92ebabf9eec15fc0f9abf2f2b0132136dc15bcef512ba5a30431a8c1ac4ee48ee94d21355610da2c42ecdaf31ede30e33b70742b5345f34f2c0974d18d5f08f590a65f1e27eb652df95625a3edbb9c911222a9faf7676db2ea78aedcfede9bab2bfe5709a300b0e1c43cd0dcaf50e4126019fb6f31275a3039e03290c9a370ce4ebd12c25bc67bd09390f2abc6e63a84bf810a10dc1c088bbf62c7249321469c892efa1dd228b7a99971afa5b8c1b3af6b21a91c149a21", 0xe6, 0x4008000, &(0x7f0000000e40)={0x2, 0x0, @empty, 0x3}, 0x10) socket$packet(0x11, 0x2, 0x300) recvfrom$ax25(r15, &(0x7f0000000e80)=""/145, 0x91, 0x12020, &(0x7f0000000f40)={{0x3, @default, 0x3}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r17 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r17, 0x84, 0x76, &(0x7f0000000fc0)={r1, 0x17b}, &(0x7f0000001000)=0x8) 15.894448305s ago: executing program 4 (id=2891): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getae={0xf4, 0x1f, 0x200, 0x70bd27, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d2, 0xa, 0xff}, @in=@loopback, 0x80, 0x3}, [@proto={0x5, 0x19, 0x32}, @address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @in=@rand_addr=0x64010101, 0x2, 0xa, 0xf1}}, @srcaddr={0x14, 0xd, @in=@loopback}, @mark={0xffffff35, 0x15, {0x35075c, 0x3}}, @etimer_thresh={0x8, 0xc, 0x10000}, @algo_crypt={0x5b, 0x2, {{'ctr(blowfish-asm)\x00'}, 0x98, "158c4c63dd93d45a105a5e9b0ce0a09dfd2baa"}}]}, 0xf4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000200a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa0000000000000000000000007de9896affffffff000000000000000000000000e0000002000000000000000004000000ac1414aa0000000000000000000000003c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newtaction={0xe0, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xcc, 0x1, [@m_skbedit={0xc8, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3fe, 0xb, 0x7, 0x1, 0x5425c2c2}}]}, {0x6b, 0x6, "3def19caba502b502da8e9ea365a8c86a33deebc86bd6bbd0ad0a2769bf8af871f78187fde5698911fd4e208cac3bb646c1f1c1f23d07e97e53fc0f17b7f74c10e14c273d928d513daedc2461d85bb947a000000000000000000936cfc73ec5c8f1a4f8aa1f73c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xe0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000080000001811000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000020009500000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000000000080000001811000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000020009500000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x9}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000005200010200000000000000001c"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r4}, 0x94) 15.746550641s ago: executing program 4 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 15.720769968s ago: executing program 1 (id=2894): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000240)=0xa, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) 15.705427811s ago: executing program 4 (id=2895): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff8, 0xfff, 0xd}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 15.613076184s ago: executing program 1 (id=2898): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601000000000000000026f3fb5a0010000300686173683a69702c6d6163000900020073797a32000000000c0007800800080000000000050001000700000005000400000000000500050002000000"], 0x54}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="2f000000004070fd00000000", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x6, 0x21, &(0x7f0000000280)="7980282ccbb5", &(0x7f00000002c0)=""/33, 0x6, 0x0, 0x1f, 0xe9, &(0x7f0000000500)="373d491c48986c8acc1adb44606a9a8d74b1ab884c3104058075fbb6a82099", &(0x7f0000000600)="e9714853276f0e39bf63d3d5a7905da90e4108113a2daf81ca13a01f2719b0518bc3f626167650472096ba6466820a8164287f019cf8576ba410920fdfd15dc9398a5c4ae8342a3106715bf6a5ae0dea5250a6aed5604ff6101ac5bf02bf12fd59445e87e6e7817b967adf125b52373b9bd987f3536c6ae0b9e321b2f034f8b8a9441c1902348cbdc3e1d26572e62867a78c152da797efe50abf9eba2c889fa2e3af8e8bfabee115f72aa5a3fac6218dcaaa23a398ffe46d4c360a448ef7389457f78afe63e59b7b00eded6fc0996d0f20d7442f4fcadd7bb628eaf06c01940b0c14f571907aa46c5d", 0x5, 0x0, 0x70}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r5, 0x2f, 0x2020, 0x4, @void, @void, @value=r6}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000066f696680000000000000061104f00000000009500000000007100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60}, 0x20) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfff9}, 0x8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000200)=@ethtool_stats={0x1d, 0x37}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r11, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) 15.497594523s ago: executing program 2 (id=2899): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0xa}, {0x5, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x31, r7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket(0x23, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r8, 0x61d8, 0x0) (async) socket(0x28, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r9, &(0x7f0000000640), 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x4000010) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket(0xa, 0x3, 0x3a) 15.462333792s ago: executing program 2 (id=2900): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4080) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x2001) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) 15.425339928s ago: executing program 2 (id=2901): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x400}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@loopback, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@private1, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [], {0x56, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}, 0x1, 0x0, 0x0, 0x40080}, 0x55) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f0000000240)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xca}, 0x94) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0007000042009103", @ANYRES16=r4, @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRES64=r4, @ANYRES8=r3, @ANYRES64=r4, @ANYRES16=r4], 0xfe33) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='mm_vmscan_lru_isolate\x00', r4, 0x0, 0x4}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2e0201, 0x0) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003c0007010000000000000000010900001c1b355d7f6f4621cb7876f2dc554beeb1a9215bdb357bde305fa6f7f717edddff028289b1e1022a1916ae727245adaecb14e9e75b"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, &(0x7f0000000740)={0x77359400}) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000540)=@sack_info={r8, 0x7fffffff, 0x4}, 0xc) (async) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000040)={'xfrm0\x00', 0x6c}) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f00000000c0)) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000027c0)=""/4102, 0x1006}, {&(0x7f0000005540)=""/4093, 0xffd}, {&(0x7f0000000440)=""/207, 0xcf}], 0x3}, 0x0) (async) close(r4) 15.354567823s ago: executing program 1 (id=2902): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e40000002e00010000000000fcdbdf25d4fef1800c00180008ac0f00000000001400010000000000000000000000ffffac141416ac002400b0d5f8e087cd04008ed7adc215a0652a13d5001f49da4a6070ef39315931525cc37ec2c1baa7c969ba7387e9818516043d0be58f2cbccf0b881e0b415064bd4b897352ba1364636ee4698cf86dd3730c691f68d412042af6f0354d11614c06e824f46466666b74180725a9215e2a98f71f713371666688c51b36b974d4d03ce12d3504b638ef9797b160c2d900a1dda92a550563ff681905a6fc9008e04ca5068d39d1278bf037e72bfad3fb5cf9e141dc8d0400e900"], 0xe4}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.352172553s ago: executing program 2 (id=2903): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000406e"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.334202585s ago: executing program 1 (id=2904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4090, 0xffa}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4083, 0xff3}, {&(0x7f0000002740)=""/4092, 0xffc}], 0x2}, 0x8}], 0x3, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendto$inet(r2, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) (async) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/4090, 0xffa}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4083, 0xff3}, {&(0x7f0000002740)=""/4092, 0xffc}], 0x2}, 0x8}], 0x3, 0x2, 0x0) (async) socket$inet(0x2, 0x4000000805, 0x0) (async) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) (async) sendto$inet(r2, &(0x7f0000000280)='V', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x0, @private=0xa010101}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) 15.255177251s ago: executing program 1 (id=2905): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x4e, 0x5}) (async, rerun: 64) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) (rerun: 64) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x6, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000080)={{r1}, "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"}) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan3\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x4000004) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) write$nci(r7, &(0x7f00000012c0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x3, "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"}, 0xff) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x5c, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x68, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x84040}, 0xc001) shutdown(r6, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000017c0)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001880)={'ip6gre0\x00', &(0x7f0000001800)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x5, 0xc, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x8, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0x6, 0x1000, 0x33, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x700, 0x7, 0x3ff, 0x10}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001980)={'wg2\x00', 0x0}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a00)=0x14) (rerun: 32) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000001c00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x144, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x4880) bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40)={0x0, r6}, 0x8) (async, rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000001c80)={0x1, 0x3, 0x10000}) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d00)=@mpls_delroute={0x200, 0x19, 0x2, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x0, 0x14, 0x72, 0xfc, 0x3, 0xfe, 0x8}, [@RTA_VIA={0x14, 0x12, {0x29, "0eaa77b129adb1cedb8d28f525cd"}}, @RTA_OIF={0x8, 0x4, r12}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xe}, {0x200}, {0x8}, {0x2c974, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x1ff}, {0x8, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x48ff}, {0x3718, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3}, {0xfffff}, {0x100, 0x0, 0x1}, {0x8000}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}]}, @RTA_MULTIPATH={0xc, 0x9, {0x709, 0x22, 0x0, r12}}, @RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7fff}, {0x100, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x691d}, {0x80}, {0x400}, {0xa36}, {0x3, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x8}, {0x5, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x4}, {0x1, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9}, {0x2}, {0x401}, {0xa2, 0x0, 0x1}, {0x40}, {0x200, 0x0, 0x1}, {0x276f}, {0x200}, {0x6}]}, @RTA_DST={0x8, 0x1, {0x7f, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x2c, "9f014978c311c7995974ca3e242c"}}, @RTA_NEWDST={0x84, 0x13, [{0x1000, 0x0, 0x1}, {0x7}, {0xffb5f}, {0x9}, {0xffffe}, {0x5, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0xad3, 0x0, 0x1}, {0xffff4, 0x0, 0x1}, {0x9}, {0x7}, {0x3}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1}, {0x200, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x7}, {0xcfa}, {0x3}, {0x2, 0x0, 0x1}, {0x72}, {0x9, 0x0, 0x1}, {0x4b40, 0x0, 0x1}, {0x6}, {0x1, 0x0, 0x1}, {0x7fff}, {0x3, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0x9, r12}}]}, 0x200}, 0x1, 0x0, 0x0, 0x40050}, 0x40) socket$inet_icmp(0x2, 0x2, 0x1) 15.142477769s ago: executing program 2 (id=2906): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) 15.141828227s ago: executing program 2 (id=2907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r14, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="414601", @ANYRES16], 0x4) r15 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r15, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 5.114213177s ago: executing program 32 (id=2802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x813, 0x6e}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008801}, 0x40) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@null, @null, @rose, @bcast, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x48, 0x81000) connect$netrom(r4, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @default]}, 0x48) r5 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r5, &(0x7f0000000300), 0x0, 0x80, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) poll(&(0x7f0000000400)=[{r4, 0x4000}, {r6, 0xa4}], 0x2, 0x10000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x100, 0x2, 0x8, 0x3, 0x1, 0x101, 0x1000, {0x0, @in={{0x2, 0x2, @remote}}, 0x1, 0xe, 0xd, 0x3, 0x4}}, &(0x7f0000000500)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000540)={r8, 0xc7, 0xb5, 0x0, 0x127d, 0x1}, &(0x7f0000000580)=0x14) ioctl$PPPIOCSFLAGS(r7, 0x40047459, &(0x7f00000005c0)=0x20100) r10 = socket$kcm(0x29, 0x0, 0x0) writev(r10, &(0x7f0000001940)=[{&(0x7f0000000600)="2c9062a0e594230f953abb6dbc45665d1a455fd1c7692cfff8b93fec0b38acdb1f945a92312c076d3657283e0d", 0x2d}, {&(0x7f0000000640)="7610eecf16b853d8c9b4d8d281eeba39f589153fdd977e28e41fc6a39436b99cf2dbe3b7da28f11d63d3745b8ce2048c71428322d96595e1296d1c275b12d62282e0db0f24ee3d4810768cf6134cc2d49b33f1a8b340947b34139fc893a782254be8199c4786d9428a922cede28a45f508777dc13d706cd0f6becb9ac27ca6cf579364cb51ded5523d4e", 0x8a}, {&(0x7f0000000700)="f6f968b86ad9564f0c05f0e206a093edac04be78604e2f25c4f2cb5c066201b8d9e07720fb1952d25909caaa1829ea2e61ca64f9f009f3e129152993eb536526f47b767df09752c2d6278f9192603f781e46df02cb74e9cd2eabc398c7ee56d00b3ae5c97bd4b16e919fc21ba777f5282ff6a8733a87b58655edc68dbb8c76b225c0ed65bd8578c43a2bd72d25ae467a7ae77c49a56bf88d24a923264685394eccef479dc8dd09949dd4aeb78ad0ec5c71b8ac1157ceca6e3ddde4a36f5178e6632e43c3f4f997063cfcfd58545c24fc35b699e4a739476c484f25eb84f8901575aa1005cbfc2d60dd26af58397b69", 0xef}, {&(0x7f0000000800)="ac34ce8daee8f80436484bdb932595db1fa8fe51ad0ebea02903927cfbd9930f85942d71955111701f3fb8be2b6221b0fbde0eac84fdf09e20", 0x39}, {&(0x7f0000000840)="6888a4126d1d31330e9ab62cc2bf3f8d9ae79cf24dee32cb73719769e44f232d9b483aaf0713edc05181c054515d788904c98855eab7277f900f5c10064f52a87dc8f1a1ae7a358c8a559bae88e8e3bcaa81f039f47e5a23188eb50c38f0a9d60358a560dabd7781de20586474b012755750aba7130dac45508db0333e5ee2b3427fb529098cfd99a572c09ccc68f676db25094cd8416bea00f6", 0x9a}, {&(0x7f0000000900)="3cccae5fa586eea554b1c40f4f5915c5b13027", 0x13}, {&(0x7f0000000940)="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", 0x1000}], 0x7) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r11, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x190, r12, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24148de6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa987da4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a381288}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5453b85a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f77dd3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5654bc0}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x80, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f000d81b4878b24c6898c163d67a19f6852ebf0ab2023a34"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044800}, 0xc801) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x40, r13, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x53}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}}, 0xc000) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000001f00)={r9, 0x7fff}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, &(0x7f0000001f80)={r15, 0x8}, &(0x7f0000001fc0)=0x8) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000002000)=0x7, &(0x7f0000002040)=0x4) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f00000020c0)={r8, 0x3c, &(0x7f0000002080)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e22, 0x8, @local, 0xffffbb98}]}, &(0x7f0000002100)=0x10) 87.766133ms ago: executing program 33 (id=2905): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x4e, 0x5}) (async, rerun: 64) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) (rerun: 64) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x6, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000080)={{r1}, "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"}) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan3\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x4000004) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) write$nci(r7, &(0x7f00000012c0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x3, "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"}, 0xff) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x5c, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x68, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x84040}, 0xc001) shutdown(r6, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000017c0)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001880)={'ip6gre0\x00', &(0x7f0000001800)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x5, 0xc, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x8, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001940)={'syztnl2\x00', &(0x7f00000018c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0x6, 0x1000, 0x33, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x700, 0x7, 0x3ff, 0x10}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001980)={'wg2\x00', 0x0}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a00)=0x14) (rerun: 32) sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000001c00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x144, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40}, 0x4880) bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40)={0x0, r6}, 0x8) (async, rerun: 64) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000001c80)={0x1, 0x3, 0x10000}) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d00)=@mpls_delroute={0x200, 0x19, 0x2, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x0, 0x14, 0x72, 0xfc, 0x3, 0xfe, 0x8}, [@RTA_VIA={0x14, 0x12, {0x29, "0eaa77b129adb1cedb8d28f525cd"}}, @RTA_OIF={0x8, 0x4, r12}, @RTA_DST={0x8, 0x1, {0x2}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xe}, {0x200}, {0x8}, {0x2c974, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x1ff}, {0x8, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x48ff}, {0x3718, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3}, {0xfffff}, {0x100, 0x0, 0x1}, {0x8000}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x2}]}, @RTA_MULTIPATH={0xc, 0x9, {0x709, 0x22, 0x0, r12}}, @RTA_NEWDST={0x84, 0x13, [{0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7fff}, {0x100, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x691d}, {0x80}, {0x400}, {0xa36}, {0x3, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x8}, {0x5, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x4}, {0x1, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x9}, {0x2}, {0x401}, {0xa2, 0x0, 0x1}, {0x40}, {0x200, 0x0, 0x1}, {0x276f}, {0x200}, {0x6}]}, @RTA_DST={0x8, 0x1, {0x7f, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x2c, "9f014978c311c7995974ca3e242c"}}, @RTA_NEWDST={0x84, 0x13, [{0x1000, 0x0, 0x1}, {0x7}, {0xffb5f}, {0x9}, {0xffffe}, {0x5, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0xad3, 0x0, 0x1}, {0xffff4, 0x0, 0x1}, {0x9}, {0x7}, {0x3}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1}, {0x200, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x9, 0x0, 0x1}, {0x9}, {0x7}, {0xcfa}, {0x3}, {0x2, 0x0, 0x1}, {0x72}, {0x9, 0x0, 0x1}, {0x4b40, 0x0, 0x1}, {0x6}, {0x1, 0x0, 0x1}, {0x7fff}, {0x3, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0x9, r12}}]}, 0x200}, 0x1, 0x0, 0x0, 0x40050}, 0x40) socket$inet_icmp(0x2, 0x2, 0x1) 61.623603ms ago: executing program 34 (id=2907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r14, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="414601", @ANYRES16], 0x4) r15 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r15, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 0s ago: executing program 35 (id=2895): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffff8, 0xfff, 0xd}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) kernel console output (not intermixed with test programs): in process `syz.1.709'. [ 124.708398][ T8543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.715985][ T8543] IPv6: NLM_F_CREATE should be set when creating new route [ 124.723276][ T8543] IPv6: NLM_F_CREATE should be set when creating new route [ 124.730532][ T8543] IPv6: NLM_F_CREATE should be set when creating new route [ 124.749199][ T8540] : renamed from bridge_slave_0 (while UP) [ 124.763624][ T8543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.994490][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.720'. [ 125.622935][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'. [ 125.677394][ T3029] net_ratelimit: 32 callbacks suppressed [ 125.677413][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 125.713403][ T8598] syzkaller1: entered promiscuous mode [ 125.729628][ T8598] syzkaller1: entered allmulticast mode [ 125.733486][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 125.859353][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 125.989079][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 126.106501][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 126.218048][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 126.327492][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 126.438382][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 126.548146][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 126.621329][ T8648] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 126.628172][ T8650] netlink: 'syz.3.745': attribute type 1 has an invalid length. [ 126.639442][ T8648] __nla_validate_parse: 2 callbacks suppressed [ 126.639458][ T8648] netlink: 224 bytes leftover after parsing attributes in process `syz.1.744'. [ 126.667135][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 126.759749][ T8650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.983988][ T8656] bond1: (slave veth5): Enslaving as an active interface with a down link [ 127.136168][ T8650] veth7: entered promiscuous mode [ 127.152351][ T8650] bond1: (slave veth7): Enslaving as an active interface with a down link [ 127.176099][ T8664] vlan2: entered allmulticast mode [ 127.183594][ T8664] bond1: entered allmulticast mode [ 127.200951][ T8664] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 127.403325][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 127.554531][ T8682] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 127.564983][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.750'. [ 127.576703][ T8682] netlink: 'syz.0.748': attribute type 4 has an invalid length. [ 127.603877][ T8682] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.748'. [ 127.775435][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 127.833894][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 127.910525][ T8704] sctp: [Deprecated]: syz.0.756 (pid 8704) Use of int in maxseg socket option. [ 127.910525][ T8704] Use struct sctp_assoc_value instead [ 128.000863][ T8718] tipc: Enabling of bearer rejected, already enabled [ 128.012366][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.762'. [ 128.018056][ T8718] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 128.082711][ T8718] netlink: 'syz.2.760': attribute type 3 has an invalid length. [ 128.115173][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 128.158360][ T8734] netlink: 144 bytes leftover after parsing attributes in process `syz.3.765'. [ 128.170220][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 128.209017][ T8734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 128.327723][ T8732] hsr0 speed is unknown, defaulting to 1000 [ 128.335258][ T8738] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 128.565836][ T8738] bond4: entered promiscuous mode [ 128.581639][ T8738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.590711][ T8732] lo speed is unknown, defaulting to 1000 [ 128.641772][ T8752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.665667][ T8752] bond4: (slave bond5): making interface the new active one [ 128.696829][ T8752] bond5: entered promiscuous mode [ 128.741036][ T8752] bond4: (slave bond5): Enslaving as an active interface with an up link [ 129.622191][ T8776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.649311][ T8776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.669298][ T8776] bond0 (unregistering): Released all slaves [ 129.783649][ T8794] syzkaller1: entered promiscuous mode [ 129.790253][ T8794] syzkaller1: entered allmulticast mode [ 130.248784][ T8819] dvmrp9: entered allmulticast mode [ 130.355249][ T8822] hsr0 speed is unknown, defaulting to 1000 [ 130.378946][ T8822] lo speed is unknown, defaulting to 1000 [ 130.379974][ T8827] tipc: Can't bind to reserved service type 2 [ 130.841714][ T8852] netlink: 'syz.3.800': attribute type 3 has an invalid length. [ 130.898872][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.911019][ T8852] bond0: (slave rose0): Enslaving as an active interface with an up link [ 131.057062][ T36] net_ratelimit: 19 callbacks suppressed [ 131.057081][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 131.369805][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 131.414531][ T8885] IPVS: Error connecting to the multicast addr [ 131.457249][ T8894] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 131.497764][ T8896] bridge0: port 3(syz_tun) entered blocking state [ 131.536772][ T8896] bridge0: port 3(syz_tun) entered disabled state [ 131.560437][ T8896] syz_tun: entered allmulticast mode [ 131.581535][ T8903] netlink: 'syz.3.810': attribute type 10 has an invalid length. [ 131.605445][ T8896] syz_tun: entered promiscuous mode [ 131.644404][ T8896] bridge0: port 3(syz_tun) entered blocking state [ 131.651047][ T8896] bridge0: port 3(syz_tun) entered forwarding state [ 131.701763][ T8914] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 131.733597][ T8903] bridge0: port 3(syz_tun) entered disabled state [ 131.740269][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.748077][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.766866][ T8914] netlink: 'syz.1.813': attribute type 4 has an invalid length. [ 131.775242][ T8914] __nla_validate_parse: 11 callbacks suppressed [ 131.775258][ T8914] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.813'. [ 131.846711][ T8902] tipc: Started in network mode [ 131.867289][ T8902] tipc: Node identity 164b48bc78a2, cluster identity 4711 [ 131.880430][ T8902] tipc: Enabled bearer , priority 0 [ 131.893855][ T8911] syzkaller0: entered promiscuous mode [ 131.899686][ T8911] syzkaller0: entered allmulticast mode [ 131.915742][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 131.934299][ T8902] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.936703][ T8917] netlink: 'syz.0.815': attribute type 2 has an invalid length. [ 131.977317][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 132.242668][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.817'. [ 132.543391][ T8926] v: renamed from veth0_macvtap [ 132.591097][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 132.636475][ T8911] tipc: Resetting bearer [ 132.672252][ T8901] tipc: Resetting bearer [ 132.711266][ T8901] tipc: Disabling bearer [ 132.774578][ T8944] veth5: entered promiscuous mode [ 132.792455][ T8944] veth5: entered allmulticast mode [ 132.807197][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 132.931282][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 132.981357][ T8962] team0: Device gtp0 is up. Set it down before adding it as a team port [ 133.196986][ T8969] veth3: entered allmulticast mode [ 133.222554][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 133.272798][ T8983] netlink: 'syz.1.827': attribute type 17 has an invalid length. [ 133.316599][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 133.351053][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 133.420777][ T8983] erspan0: entered promiscuous mode [ 133.469243][ T8983] erspan0: left promiscuous mode [ 133.538519][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 133.669131][ T12] bond1: (slave wlan0): failed to get link speed/duplex [ 133.818268][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 134.035803][ T9018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.836'. [ 134.069060][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.838'. [ 134.143571][ T9025] bridge: RTM_NEWNEIGH with invalid ether address [ 134.176448][ T9030] bridge: RTM_NEWNEIGH with invalid ether address [ 134.411169][ T9040] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 134.417783][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 134.472660][ T9038] netlink: 104 bytes leftover after parsing attributes in process `syz.3.840'. [ 134.519245][ T9040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.559877][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 134.690483][ T9048] netlink: 'syz.0.844': attribute type 142 has an invalid length. [ 135.459076][ T9103] netlink: 'syz.2.861': attribute type 24 has an invalid length. [ 135.703740][ T9124] hsr0 speed is unknown, defaulting to 1000 [ 135.725911][ T9124] lo speed is unknown, defaulting to 1000 [ 135.748213][ T9123] hsr0 speed is unknown, defaulting to 1000 [ 135.756474][ T9119] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 135.814362][ T9123] lo speed is unknown, defaulting to 1000 [ 136.038250][ T9134] netlink: 'syz.4.868': attribute type 12 has an invalid length. [ 136.177965][ T1341] net_ratelimit: 17 callbacks suppressed [ 136.177982][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 136.239838][ T9139] Bluetooth: MGMT ver 1.23 [ 136.245531][ T9139] netlink: set zone limit has 8 unknown bytes [ 136.337311][ T59] bond1: (slave wlan0): failed to get link speed/duplex [ 136.447380][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 136.570376][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 136.727781][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 136.808828][ T9180] bond0: option mode: unable to set because the bond device has slaves [ 136.844880][ T9181] pimreg: entered allmulticast mode [ 136.877285][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 136.913436][ T9184] __nla_validate_parse: 9 callbacks suppressed [ 136.913453][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.882'. [ 137.011980][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 137.034888][ T9187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.884'. [ 137.053866][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 137.144554][ T9202] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 137.167973][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 137.287222][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 137.354041][ T9214] batadv1: entered allmulticast mode [ 137.488535][ T979] IPVS: starting estimator thread 0... [ 137.515641][ T9223] netlink: 256 bytes leftover after parsing attributes in process `syz.4.894'. [ 137.576703][ T9225] IPVS: using max 27 ests per chain, 64800 per kthread [ 137.671192][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 137.806963][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.813141][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 138.029560][ T9260] netlink: 'syz.0.906': attribute type 10 has an invalid length. [ 138.050595][ T9260] veth1_macvtap: left promiscuous mode [ 138.179383][ T9266] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 138.228883][ T9266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 138.244361][ T9269] bridge0: port 3(syz_tun) entered blocking state [ 138.250959][ T9269] bridge0: port 3(syz_tun) entered forwarding state [ 138.258652][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.265798][ T9269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.273184][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.280347][ T9269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.310955][ T9266] bond6: (slave geneve2): making interface the new active one [ 138.331295][ T9266] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 138.361742][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 138.482476][ T9282] netlink: 'syz.3.914': attribute type 33 has an invalid length. [ 138.508493][ T9284] netlink: 'syz.3.914': attribute type 33 has an invalid length. [ 138.541674][ T9279] hsr0 speed is unknown, defaulting to 1000 [ 138.550624][ T9279] lo speed is unknown, defaulting to 1000 [ 138.889811][ T9298] netlink: 'syz.2.919': attribute type 21 has an invalid length. [ 139.009988][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 139.217328][ T9327] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 139.243999][ T9328] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 139.271179][ T9327] netlink: 244 bytes leftover after parsing attributes in process `syz.1.927'. [ 139.591716][ T9340] tipc: Enabled bearer , priority 0 [ 139.621714][ T9340] syzkaller0: entered promiscuous mode [ 139.642452][ T9340] syzkaller0: entered allmulticast mode [ 139.670590][ T9340] tipc: Resetting bearer [ 139.717012][ T30] audit: type=1800 audit(1757856271.182:3): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.934" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1000 res=0 errno=0 [ 140.086879][ T9339] tipc: Resetting bearer [ 140.145303][ T9339] tipc: Disabling bearer [ 140.292197][ T9369] netlink: 176 bytes leftover after parsing attributes in process `syz.1.942'. [ 140.785727][ T9391] tipc: Enabled bearer , priority 0 [ 140.804723][ T9391] syzkaller0: entered promiscuous mode [ 140.815425][ T9391] syzkaller0: entered allmulticast mode [ 140.864535][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.951'. [ 140.915212][ T9391] tipc: Resetting bearer [ 140.937013][ T9390] tipc: Resetting bearer [ 141.000192][ T9390] tipc: Disabling bearer [ 141.238683][ T9413] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 141.256830][ T9413] netlink: 224 bytes leftover after parsing attributes in process `syz.1.955'. [ 141.267202][ T1341] net_ratelimit: 30 callbacks suppressed [ 141.267220][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 141.410772][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 141.536785][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 141.839805][ T9440] gretap1: entered promiscuous mode [ 141.865612][ T9440] gretap1: entered allmulticast mode [ 141.918871][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 142.018686][ T9458] __nla_validate_parse: 4 callbacks suppressed [ 142.018705][ T9458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.964'. [ 142.052916][ T9448] netlink: 'syz.4.965': attribute type 11 has an invalid length. [ 142.067308][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 142.089608][ T9448] netlink: 224 bytes leftover after parsing attributes in process `syz.4.965'. [ 142.106135][ T9448] netlink: 224 bytes leftover after parsing attributes in process `syz.4.965'. [ 142.297274][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 142.437561][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 142.550552][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 142.687694][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 142.698595][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 142.701427][ T9492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.977'. [ 142.787706][ T9498] syzkaller0: entered promiscuous mode [ 142.805115][ T9498] syzkaller0: entered allmulticast mode [ 142.840432][ T9498] netlink: 14 bytes leftover after parsing attributes in process `syz.1.977'. [ 142.968054][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 143.121180][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 143.560329][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 143.616948][ T9549] : renamed from veth1_vlan (while UP) [ 143.877464][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1000'. [ 144.069269][ T9561] syzkaller1: entered promiscuous mode [ 144.078437][ T9561] syzkaller1: entered allmulticast mode [ 144.332648][ T9585] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1004'. [ 146.336613][ T36] net_ratelimit: 23 callbacks suppressed [ 146.336631][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 146.457398][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 146.620609][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 146.948286][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 147.035361][ T9759] __nla_validate_parse: 11 callbacks suppressed [ 147.035379][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 147.065111][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 147.092464][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 147.120818][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 147.149544][ T9763] tipc: Enabled bearer , priority 0 [ 147.171579][ T9759] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 147.182087][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 147.191202][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 147.201589][ T9763] syzkaller0: entered promiscuous mode [ 147.216474][ T9763] syzkaller0: entered allmulticast mode [ 147.268733][ T9763] tipc: Resetting bearer [ 147.277791][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 147.297919][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 147.299613][ T9767] netlink: 'syz.4.1055': attribute type 21 has an invalid length. [ 147.332497][ T9767] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1055'. [ 147.351465][ T9772] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 147.369111][ T9767] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 147.389627][ T9772] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1057'. [ 147.411935][ T9779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1059'. [ 147.438916][ T9762] tipc: Resetting bearer [ 147.484723][ T9762] tipc: Disabling bearer [ 147.542669][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 147.577722][ T9786] netlink: 'syz.1.1061': attribute type 2 has an invalid length. [ 147.607255][ T9786] netlink: 'syz.1.1061': attribute type 2 has an invalid length. [ 147.767953][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 147.904357][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 148.013322][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1067'. [ 148.812643][ T10] lo speed is unknown, defaulting to 1000 [ 149.673532][ T9922] tunl0: entered promiscuous mode [ 149.682628][ T9922] netlink: 'syz.2.1097': attribute type 3 has an invalid length. [ 149.755169][ T9926] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 149.848066][ T9921] hsr0 speed is unknown, defaulting to 1000 [ 149.874070][ T9921] lo speed is unknown, defaulting to 1000 [ 150.011379][ T9939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.082214][ T9934] hsr0 speed is unknown, defaulting to 1000 [ 150.116171][ T9934] lo speed is unknown, defaulting to 1000 [ 150.187369][ T9947] IPVS: length: 8 != 1152 [ 150.670207][ T9965] netlink: 'syz.2.1107': attribute type 2 has an invalid length. [ 150.686263][ T9921] netlink: 'syz.0.1099': attribute type 13 has an invalid length. [ 150.702273][ T9921] netlink: 'syz.0.1099': attribute type 17 has an invalid length. [ 150.758786][ T9928] pim6reg1: entered promiscuous mode [ 150.771766][ T9928] pim6reg1: entered allmulticast mode [ 151.115063][ T49] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 151.152221][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880742a4800: rx timeout, send abort [ 151.629385][ T36] net_ratelimit: 24 callbacks suppressed [ 151.629405][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 151.653676][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880742a7400: rx timeout, send abort [ 151.662139][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880742a4800: abort rx timeout. Force session deactivation [ 151.828708][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 151.853679][ T30] audit: type=1800 audit(1757856283.312:4): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1117" name="memory.events" dev="tmpfs" ino=1122 res=0 errno=0 [ 151.938061][ T30] audit: type=1804 audit(1757856283.372:5): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1117" name="/newroot/217/memory.events" dev="tmpfs" ino=1122 res=1 errno=0 [ 152.036521][ T1098] bond1: (slave wlan0): failed to get link speed/duplex [ 152.036770][T10030] __nla_validate_parse: 16 callbacks suppressed [ 152.036785][T10030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1120'. [ 152.154288][T10042] sctp: [Deprecated]: syz.0.1121 (pid 10042) Use of int in maxseg socket option. [ 152.154288][T10042] Use struct sctp_assoc_value instead [ 152.162006][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880742a7400: abort rx timeout. Force session deactivation [ 152.179775][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 152.388455][ T1098] bond1: (slave wlan0): failed to get link speed/duplex [ 152.459274][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.479298][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.499078][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.508569][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.518051][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.527007][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.542243][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.550339][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.559020][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.568028][T10060] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 152.609972][ T1098] bond1: (slave wlan0): failed to get link speed/duplex [ 152.726438][ T1098] bond1: (slave wlan0): failed to get link speed/duplex [ 152.856687][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 152.977721][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 153.096494][ T1098] bond1: (slave wlan0): failed to get link speed/duplex [ 153.416967][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 153.470543][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1142'. [ 153.498427][T10119] xfrm1: entered promiscuous mode [ 153.503499][T10119] xfrm1: entered allmulticast mode [ 153.530858][T10113] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1142'. [ 153.564527][T10113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.586114][T10113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.599544][T10113] bond0 (unregistering): Released all slaves [ 153.630458][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'. [ 153.638340][T10133] netlink: 'syz.1.1148': attribute type 11 has an invalid length. [ 153.649550][T10133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1148'. [ 153.917774][T10141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 153.933831][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 153.975516][T10149] bond7: (slave veth3): Enslaving as an active interface with a down link [ 154.048885][T10141] veth5: entered promiscuous mode [ 154.075444][T10141] bond7: (slave veth5): Enslaving as an active interface with a down link [ 154.114596][T10149] vlan3: entered allmulticast mode [ 154.119919][T10149] bond7: entered allmulticast mode [ 154.148208][T10149] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 154.804307][T10201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1170'. [ 154.810415][T10200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 154.820617][T10201] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 155.118274][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 155.146568][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.403837][T10216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.421309][ T9] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 155.609056][T10239] nbd: couldn't find a device at index -373156329 [ 155.713933][T10242] Bluetooth: MGMT ver 1.23 [ 156.577892][T10295] bridge0: port 3(team0) entered blocking state [ 156.585464][T10295] bridge0: port 3(team0) entered disabled state [ 156.594333][T10295] team0: entered allmulticast mode [ 156.599675][T10295] team_slave_0: entered allmulticast mode [ 156.610459][T10295] team0: entered promiscuous mode [ 156.615597][T10295] team_slave_0: entered promiscuous mode [ 156.647649][T10295] bridge0: port 3(team0) entered blocking state [ 156.654088][T10295] bridge0: port 3(team0) entered forwarding state [ 156.716713][ T59] net_ratelimit: 20 callbacks suppressed [ 156.716730][ T59] bond1: (slave wlan0): failed to get link speed/duplex [ 156.839243][ T59] bond1: (slave wlan0): failed to get link speed/duplex [ 156.979216][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 157.117278][T10327] __nla_validate_parse: 5 callbacks suppressed [ 157.117297][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 157.169521][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 157.176196][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 157.220494][T10339] IPv4: Oversized IP packet from 127.202.26.0 [ 157.327818][ T59] bond1: (slave wlan0): failed to get link speed/duplex [ 157.394186][T10347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.446615][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 157.567938][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 157.628315][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'. [ 157.638901][T10362] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1222'. [ 157.664013][T10361] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1222'. [ 157.679330][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1222'. [ 157.699466][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 157.769928][T10373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1225'. [ 157.791969][T10373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1225'. [ 157.911710][T10379] IPVS: set_ctl: invalid protocol: 137 172.20.20.25:20001 [ 157.940643][T10379] validate_nla: 51 callbacks suppressed [ 157.940663][T10379] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 158.070716][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 158.086270][T10391] tipc: Enabled bearer , priority 0 [ 158.158687][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 158.176045][T10391] syzkaller0: entered promiscuous mode [ 158.187310][T10391] syzkaller0: entered allmulticast mode [ 158.193926][T10391] tipc: Resetting bearer [ 158.244879][ T1115] tipc: Resetting bearer [ 158.252865][T10392] wg2: left promiscuous mode [ 158.259239][T10392] wg2: left allmulticast mode [ 158.283134][T10389] tipc: Resetting bearer [ 159.089123][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 159.126830][ T5950] tipc: Node number set to 3897632832 [ 159.469692][T10389] tipc: Disabling bearer [ 159.481316][T10405] wg2: entered promiscuous mode [ 159.486413][T10405] wg2: entered allmulticast mode [ 159.506687][T10412] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 159.843380][T10434] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 159.993749][T10450] netlink: 'syz.0.1250': attribute type 23 has an invalid length. [ 160.302719][T10471] block nbd4: not configured, cannot reconfigure [ 160.606010][T10480] team0: Port device team_slave_1 removed [ 160.684616][T10488] netlink: 'syz.3.1262': attribute type 12 has an invalid length. [ 160.881289][T10506] netlink: 'syz.2.1265': attribute type 20 has an invalid length. [ 160.925629][T10506] netlink: 'syz.2.1265': attribute type 20 has an invalid length. [ 161.334699][T10532] netlink: 'syz.4.1274': attribute type 2 has an invalid length. [ 161.784155][T10550] netlink: 'syz.2.1281': attribute type 17 has an invalid length. [ 161.816012][ T3029] net_ratelimit: 23 callbacks suppressed [ 161.816030][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 161.967917][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 162.107223][ T13] bond1: (slave wlan0): failed to get link speed/duplex [ 162.137898][T10572] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 162.189472][T10575] __nla_validate_parse: 28 callbacks suppressed [ 162.189491][T10575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1285'. [ 162.227288][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 162.310446][T10572] veth7: entered promiscuous mode [ 162.348608][ T59] bond1: (slave wlan0): failed to get link speed/duplex [ 162.492400][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 162.620651][ T3001] bond1: (slave wlan0): failed to get link speed/duplex [ 162.704463][T10600] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1292'. [ 162.756478][ T1098] bond1: (slave wlan0): failed to get link speed/duplex [ 162.865573][T10615] netlink: 'syz.2.1297': attribute type 39 has an invalid length. [ 163.213809][T10619] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 163.267712][ T1115] bond1: (slave wlan0): failed to get link speed/duplex [ 163.291031][T10624] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1298'. [ 163.478439][ T59] bond1: (slave wlan0): failed to get link speed/duplex [ 163.759166][T10664] validate_nla: 1 callbacks suppressed [ 163.759184][T10664] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 163.778494][T10664] netlink: 'syz.1.1303': attribute type 3 has an invalid length. [ 163.796111][T10664] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1303'. [ 163.863999][T10672] netlink: 'syz.0.1306': attribute type 1 has an invalid length. [ 163.992417][T10673] bond5: (slave bridge3): making interface the new active one [ 164.000757][T10673] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 164.025750][T10675] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 164.146098][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1310'. [ 164.159246][T10681] netlink: 'syz.4.1310': attribute type 7 has an invalid length. [ 164.167408][T10681] netlink: 'syz.4.1310': attribute type 8 has an invalid length. [ 164.173599][T10683] netlink: 'syz.1.1309': attribute type 39 has an invalid length. [ 164.186428][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 164.257554][T10688] xt_limit: Overflow, try lower: 604147548/4200216962 [ 164.362383][T10693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1315'. [ 164.381920][T10693] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 164.416626][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1315'. [ 164.497234][T10702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1317'. [ 164.507266][T10693] team0: Port device geneve0 added [ 164.825020][T10721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1323'. [ 165.582891][T10767] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 165.605126][T10775] sctp: [Deprecated]: syz.1.1337 (pid 10775) Use of int in maxseg socket option. [ 165.605126][T10775] Use struct sctp_assoc_value instead [ 166.274524][T10815] Driver unsupported XDP return value 0 on prog (id 281) dev N/A, expect packet loss! [ 166.647514][T10838] bond4: entered promiscuous mode [ 166.652582][T10838] bond4: entered allmulticast mode [ 166.659598][T10838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.890127][T10866] net_ratelimit: 28 callbacks suppressed [ 166.890147][T10866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.897870][T10873] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.952948][T10874] netem: incorrect ge model size [ 166.961582][T10874] netem: change failed [ 166.997403][T10818] bond1: (slave wlan0): failed to get link speed/duplex [ 167.146529][T10819] bond1: (slave wlan0): failed to get link speed/duplex [ 167.203996][T10887] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 167.224976][T10887] netlink: 'syz.1.1372': attribute type 10 has an invalid length. [ 167.234556][T10887] __nla_validate_parse: 6 callbacks suppressed [ 167.234574][T10887] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1372'. [ 167.271029][T10819] bond1: (slave wlan0): failed to get link speed/duplex [ 167.299559][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'. [ 167.355629][T10896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.397313][T10896] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 167.444077][T10896] vlan2: entered allmulticast mode [ 167.473069][T10896] veth1: entered allmulticast mode [ 167.488889][T10896] veth1: entered promiscuous mode [ 167.495639][T10896] veth1: left promiscuous mode [ 167.503078][T10896] bond3: (slave vlan2): making interface the new active one [ 167.510898][T10896] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 167.529320][T10896] veth1: entered promiscuous mode [ 167.535283][T10896] vlan2: entered promiscuous mode [ 167.552678][T10896] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 167.589747][T10819] bond1: (slave wlan0): failed to get link speed/duplex [ 167.730436][ T3029] bond1: (slave wlan0): failed to get link speed/duplex [ 167.792467][T10911] syzkaller1: entered promiscuous mode [ 167.813271][T10911] syzkaller1: entered allmulticast mode [ 167.938653][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 167.957120][T10936] tipc: Enabled bearer , priority 0 [ 167.958299][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 167.964751][T10819] bond1: (slave wlan0): failed to get link speed/duplex [ 167.990114][T10936] syzkaller0: entered promiscuous mode [ 167.995620][T10936] syzkaller0: entered allmulticast mode [ 168.075150][T10936] tipc: Resetting bearer [ 168.100146][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 168.116611][ T36] bond1: (slave wlan0): failed to get link speed/duplex [ 168.247919][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 168.366716][ T1341] bond1: (slave wlan0): failed to get link speed/duplex [ 168.384077][T10971] trusted_key: syz.2.1396 sent an empty control message without MSG_MORE. [ 168.720522][T10934] tipc: Resetting bearer [ 168.773345][T10934] tipc: Disabling bearer [ 169.252801][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 169.321021][T10975] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.340761][T10975] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 169.355285][T11035] validate_nla: 2 callbacks suppressed [ 169.355303][T11035] netlink: 'syz.3.1417': attribute type 26 has an invalid length. [ 169.404725][T10975] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.414491][T10975] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 169.433650][T10975] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.457910][T10975] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 169.480574][T10975] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.522025][T10975] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 169.554411][T10975] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.569933][T10975] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 169.612769][T11052] netlink: 'syz.3.1421': attribute type 12 has an invalid length. [ 169.724510][T11055] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1422'. [ 170.068470][T11083] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1429'. [ 170.172101][T11087] !: renamed from bond_slave_0 [ 170.216256][T11090] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 170.225308][T11090] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1432'. [ 170.538394][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 170.718757][T11129] tipc: Enabled bearer , priority 0 [ 170.728642][T11129] syzkaller0: entered promiscuous mode [ 170.734128][T11129] syzkaller0: entered allmulticast mode [ 170.744760][T11129] netem: change failed [ 170.777253][T11129] tipc: Resetting bearer [ 170.808071][T11128] tipc: Resetting bearer [ 170.900423][T11128] tipc: Disabling bearer [ 170.925002][T11139] netlink: 'syz.4.1446': attribute type 27 has an invalid length. [ 170.933029][T11139] netlink: 'syz.4.1446': attribute type 4 has an invalid length. [ 171.234010][T11160] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 171.539192][T11181] 8021q: VLANs not supported on xfrm0 [ 172.232350][T11234] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 172.329561][T11234] __nla_validate_parse: 11 callbacks suppressed [ 172.329581][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 172.665375][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 172.674785][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 172.760820][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1480'. [ 172.784950][T11268] sctp: [Deprecated]: syz.2.1483 (pid 11268) Use of int in maxseg socket option. [ 172.784950][T11268] Use struct sctp_assoc_value instead [ 172.922761][T11274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1486'. [ 172.955340][T11276] netlink: 'syz.0.1485': attribute type 21 has an invalid length. [ 172.965526][T11276] netlink: 'syz.0.1485': attribute type 8 has an invalid length. [ 173.018404][T11280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1488'. [ 173.031034][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 173.079445][T11278] netlink: 'syz.1.1487': attribute type 29 has an invalid length. [ 173.089918][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 173.113914][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 173.351581][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 173.523665][T11302] tipc: Enabling of bearer rejected, failed to enable media [ 173.685914][T11313] tc_dump_action: action bad kind [ 173.923628][T11331] unsupported nla_type 52263 [ 174.025289][T11335] netlink: 'syz.0.1509': attribute type 15 has an invalid length. [ 174.453489][T11362] netlink: 'syz.0.1519': attribute type 7 has an invalid length. [ 174.707194][T11379] raw_sendmsg: syz.4.1525 forgot to set AF_INET. Fix it! [ 175.010201][T11389] syzkaller0: entered promiscuous mode [ 175.015788][T11389] syzkaller0: entered allmulticast mode [ 175.023190][T11388] lo: entered promiscuous mode [ 175.055210][T11388] lo: entered allmulticast mode [ 175.064354][T11388] tunl0: entered promiscuous mode [ 175.076559][T11388] tunl0: entered allmulticast mode [ 175.082862][T11388] gre0: entered promiscuous mode [ 175.090666][T11388] gre0: entered allmulticast mode [ 175.097813][T11388] gretap0: entered promiscuous mode [ 175.122766][T11388] gretap0: entered allmulticast mode [ 175.139792][T11388] erspan0: entered promiscuous mode [ 175.164588][T11388] ip_vti0: entered promiscuous mode [ 175.182836][T11388] ip_vti0: entered allmulticast mode [ 175.193465][T11388] ip6_vti0: entered promiscuous mode [ 175.199026][T11388] ip6_vti0: entered allmulticast mode [ 175.205601][T11388] sit0: entered promiscuous mode [ 175.211284][T11388] sit0: entered allmulticast mode [ 175.219761][T11388] ip6tnl0: entered promiscuous mode [ 175.231706][T11388] ip6tnl0: entered allmulticast mode [ 175.248034][T11388] ip6gre0: entered promiscuous mode [ 175.258891][T11388] ip6gre0: entered allmulticast mode [ 175.271987][T11388] syz_tun: entered promiscuous mode [ 175.285432][T11388] syz_tun: entered allmulticast mode [ 175.308799][T11388] ip6gretap0: entered promiscuous mode [ 175.321482][T11388] ip6gretap0: entered allmulticast mode [ 175.340244][T11388] bridge0: entered promiscuous mode [ 175.351136][T11388] bridge0: entered allmulticast mode [ 175.362016][T11388] vcan0: entered promiscuous mode [ 175.370985][T11388] vcan0: entered allmulticast mode [ 175.379636][T11388] bond0: entered promiscuous mode [ 175.384846][T11388] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 175.392279][T11388] bond0: entered allmulticast mode [ 175.397486][T11388] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 175.405533][T11388] team0: entered promiscuous mode [ 175.411043][T11388] team0: entered allmulticast mode [ 175.419383][T11388] dummy0: entered promiscuous mode [ 175.426123][T11388] dummy0: entered allmulticast mode [ 175.433438][T11388] nlmon0: entered promiscuous mode [ 175.439788][T11388] nlmon0: entered allmulticast mode [ 175.445907][T11388] caif0: entered promiscuous mode [ 175.452753][T11388] caif0: entered allmulticast mode [ 175.458118][T11388] net_ratelimit: 11 callbacks suppressed [ 175.458132][T11388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.088410][T11451] bridge3: entered promiscuous mode [ 177.093762][T11451] bridge3: entered allmulticast mode [ 177.452497][T11484] Dead loop on virtual device ip6_vti0, fix it urgently! [ 177.456556][T11475] __nla_validate_parse: 13 callbacks suppressed [ 177.456573][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 177.623888][T11489] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 177.637292][T11489] netlink: 'syz.3.1557': attribute type 11 has an invalid length. [ 177.645155][T11489] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1557'. [ 177.656750][T11490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1557'. [ 177.676622][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 177.821823][T11507] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1564'. [ 177.882138][T11507] 0{X: renamed from gretap0 (while UP) [ 177.895421][T11507] 0{X: entered allmulticast mode [ 177.901492][T11507] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 178.153167][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 178.343111][T11537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1575'. [ 178.346877][T11534] netlink: 'syz.4.1574': attribute type 2 has an invalid length. [ 178.388713][T11540] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1572'. [ 178.409710][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1574'. [ 178.462358][T11539] hsr0 speed is unknown, defaulting to 1000 [ 178.498878][T11539] lo speed is unknown, defaulting to 1000 [ 178.647568][ T3029] vlan2: left promiscuous mode [ 178.774375][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1582'. [ 178.842563][T11567] netlink: 'syz.2.1579': attribute type 4 has an invalid length. [ 178.842563][T11568] netlink: 'syz.2.1579': attribute type 4 has an invalid length. [ 179.672359][T11619] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 179.687493][T11619] dummy0: left promiscuous mode [ 179.692381][T11619] dummy0: left allmulticast mode [ 179.773258][T11619] dummy0: entered promiscuous mode [ 179.805868][T11619] dummy0: entered allmulticast mode [ 179.820900][T11619] team0: Port device dummy0 added [ 179.943035][T11629] 8021q: VLANs not supported on caif0 [ 180.211990][T11641] team0 (unregistering): Port device team_slave_0 removed [ 180.234163][T11641] team0 (unregistering): Port device team_slave_1 removed [ 180.274475][T11641] team0 (unregistering): Port device geneve0 removed [ 180.797648][T11696] bond4: entered promiscuous mode [ 180.803193][T11696] bond4: entered allmulticast mode [ 180.809289][T11696] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.943190][T11711] netlink: 'syz.1.1621': attribute type 75 has an invalid length. [ 181.163146][T11723] bond8: entered promiscuous mode [ 181.169618][T11723] bond8: entered allmulticast mode [ 181.176071][T11723] 8021q: adding VLAN 0 to HW filter on device bond8 [ 181.262417][T11735] NCSI netlink: No device for ifindex 0 [ 181.302859][T11723] bond8 (unregistering): Released all slaves [ 181.337311][T11733] openvswitch: netlink: ufid size 72 bytes exceeds the range (1, 16) [ 181.349636][T11733] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 181.550358][T11751] sctp: [Deprecated]: syz.4.1637 (pid 11751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.550358][T11751] Use struct sctp_sack_info instead [ 181.863946][T11771] bridge6: entered promiscuous mode [ 181.874984][T11771] bridge6: entered allmulticast mode [ 181.950242][T11776] IPv6: Can't replace route, no match found [ 182.251599][T11806] netlink: 'syz.1.1648': attribute type 13 has an invalid length. [ 182.261424][T11806] netlink: 'syz.1.1648': attribute type 58 has an invalid length. [ 182.425735][T11808] tipc: Enabled bearer , priority 0 [ 182.448269][T11808] syzkaller0: entered promiscuous mode [ 182.453809][T11808] syzkaller0: entered allmulticast mode [ 182.466031][T11816] sctp: [Deprecated]: syz.4.1653 (pid 11816) Use of int in max_burst socket option. [ 182.466031][T11816] Use struct sctp_assoc_value instead [ 182.469292][T11808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 182.571927][T11808] tipc: Resetting bearer [ 182.581793][T11808] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.610949][T11807] tipc: Resetting bearer [ 182.640255][T11807] tipc: Disabling bearer [ 182.654503][T11824] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.736537][T11825] openvswitch: netlink: Key type 9488 is out of range max 32 [ 182.874739][T11834] netlink: 'syz.4.1657': attribute type 6 has an invalid length. [ 182.960203][T11838] netlink: 'syz.4.1657': attribute type 16 has an invalid length. [ 182.968652][T11838] netlink: 'syz.4.1657': attribute type 3 has an invalid length. [ 182.976986][T11838] __nla_validate_parse: 12 callbacks suppressed [ 182.977002][T11838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1657'. [ 182.995198][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1658'. [ 183.027975][T11838] openvswitch: netlink: IPv6 tunnel dst address is zero [ 183.469331][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'. [ 183.551963][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 183.561037][T11862] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 183.577196][T11862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 183.614986][T11862] ipvlan2: entered promiscuous mode [ 184.159576][T11912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1677'. [ 184.230478][T11912] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 184.291590][T11912] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 184.291679][T11904] "syz.0.1675" (11904) uses obsolete ecb(arc4) skcipher [ 184.702425][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1687'. [ 184.723473][T11943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.779428][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 184.800391][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 184.934367][T11964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 185.020044][T11965] can: request_module (can-proto-0) failed. [ 185.025702][T11966] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 185.038719][T11966] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 185.434359][T12003] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 185.461100][T12000] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 185.525834][T12000] bond8: entered allmulticast mode [ 185.881587][T12031] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.273157][T12059] netlink: 'syz.3.1721': attribute type 24 has an invalid length. [ 186.309558][T12063] netlink: 'syz.1.1722': attribute type 4 has an invalid length. [ 186.495640][T12074] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.724258][T12095] syz_tun: left allmulticast mode [ 186.735476][T12095] syz_tun: left promiscuous mode [ 186.740786][T12095] bridge0: port 3(syz_tun) entered disabled state [ 186.792065][T12095] bridge_slave_0: left allmulticast mode [ 186.800788][T12095] bridge_slave_0: left promiscuous mode [ 186.825289][T12095] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.841256][T12095] bridge_slave_1: left allmulticast mode [ 186.842394][T12100] netlink: 'syz.0.1734': attribute type 11 has an invalid length. [ 186.849983][T12095] bridge_slave_1: left promiscuous mode [ 186.864466][T12095] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.875713][T12095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.883352][T12095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.896103][T12095] bond3: (slave wlan0): Releasing active interface [ 186.903169][T12095] bond3: (slave wlan0): the permanent HWaddr of slave - 02:00:00:00:0c:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 186.923276][T12095] vlan2: entered promiscuous mode [ 186.937503][T12095] bond1: (slave veth5): Releasing active interface [ 186.944293][T12095] bond1: (slave veth5): the permanent HWaddr of slave - 72:5e:cf:2c:5c:2a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 186.972657][T12095] bond1: (slave veth7): Releasing active interface [ 186.987124][T12095] bond3: (slave vlan2): Releasing active interface [ 186.993942][T12095] vlan2: left promiscuous mode [ 187.003868][T12095] veth1: left promiscuous mode [ 187.186028][T12112] netlink: 'syz.0.1735': attribute type 4 has an invalid length. [ 188.276174][T12167] bridge_slave_0: entered allmulticast mode [ 188.400361][T12174] openvswitch: netlink: Message has 24 unknown bytes. [ 188.414342][T12174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.526178][T12176] __nla_validate_parse: 11 callbacks suppressed [ 188.526198][T12176] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1753'. [ 189.188272][T12226] delete_channel: no stack [ 189.226624][T12226] netlink: 'syz.4.1766': attribute type 8 has an invalid length. [ 189.265850][T12222] netlink: 'syz.0.1767': attribute type 83 has an invalid length. [ 190.149211][T12288] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 190.458139][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1787'. [ 190.467603][T12312] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 190.699479][T12327] sctp: [Deprecated]: syz.1.1793 (pid 12327) Use of int in max_burst socket option deprecated. [ 190.699479][T12327] Use struct sctp_assoc_value instead [ 190.842176][T12338] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 190.923877][T12346] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1797'. [ 191.103939][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 191.124680][T12362] netlink: 6052 bytes leftover after parsing attributes in process `syz.0.1802'. [ 191.518614][T12385] netlink: 'syz.4.1810': attribute type 12 has an invalid length. [ 191.571556][T12393] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 191.683466][T12402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1812'. [ 191.828466][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1815'. [ 191.840726][T12414] sctp: [Deprecated]: syz.4.1817 (pid 12414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.840726][T12414] Use struct sctp_sack_info instead [ 191.861284][T12416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1816'. [ 191.941038][T12414] team0: Port device team_slave_1 removed [ 191.973050][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 192.289989][T12437] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 192.478454][T12444] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 192.619450][T12451] netlink: 'syz.2.1828': attribute type 21 has an invalid length. [ 192.662590][T12451] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 192.679424][T12456] xt_limit: Overflow, try lower: 604147548/4200216962 [ 192.891495][T12465] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.921002][T12472] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.004491][T12480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.022544][T12482] netlink: 'syz.3.1835': attribute type 10 has an invalid length. [ 193.123624][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 193.140294][T12487] netlink: 'syz.2.1837': attribute type 3 has an invalid length. [ 193.515364][T12506] netlink: 'syz.4.1841': attribute type 1 has an invalid length. [ 193.648325][ T51] Bluetooth: hci0: command tx timeout [ 193.922293][T12539] netlink: 'syz.1.1849': attribute type 9 has an invalid length. [ 193.998647][T12545] __nla_validate_parse: 17 callbacks suppressed [ 193.998666][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'. [ 194.101885][T12548] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 194.263733][T12563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1856'. [ 194.292970][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.327245][T12566] openvswitch: netlink: IPv6 tunnel dst address is zero [ 194.428653][T12570] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 194.539342][T12577] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1862'. [ 194.611448][T12581] vlan0: entered promiscuous mode [ 194.616936][T12581] bridge0: entered promiscuous mode [ 194.648859][T12583] dvmrp0: entered allmulticast mode [ 194.678312][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 194.891775][T12600] syzkaller0: entered promiscuous mode [ 194.899399][T12600] syzkaller0: entered allmulticast mode [ 194.933081][T12600] tipc: Enabled bearer , priority 0 [ 194.951608][T12600] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.998298][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 195.022011][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 195.040166][T12600] tipc: Resetting bearer [ 195.059072][T12599] tipc: Resetting bearer [ 195.129342][T12599] tipc: Disabling bearer [ 195.266614][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1873'. [ 195.298071][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 195.342156][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 195.363204][T12624] tipc: Enabled bearer , priority 0 [ 195.422901][T12624] syzkaller0: entered promiscuous mode [ 195.430837][T12624] syzkaller0: entered allmulticast mode [ 195.524777][T12624] tipc: Resetting bearer [ 195.550261][T12622] tipc: Resetting bearer [ 195.584332][T12622] tipc: Disabling bearer [ 196.064923][T12674] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1891'. [ 196.075888][T12674] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 196.087777][T12674] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 196.170468][T12680] nbd: couldn't find a device at index 0 [ 196.386262][T12689] validate_nla: 5 callbacks suppressed [ 196.386280][T12689] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 196.429573][T12689] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 196.491416][T12692] bond0: entered promiscuous mode [ 196.507416][T12692] bond0: entered allmulticast mode [ 196.519752][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.549944][T12692] !: renamed from bond_slave_0 [ 196.555142][ T30] audit: type=1107 audit(1757856328.012:6): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 196.717918][T12702] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 196.725910][T12702] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 196.736377][T12702] netlink: 'syz.1.1896': attribute type 2 has an invalid length. [ 196.744307][T12702] netlink: 'syz.1.1896': attribute type 2 has an invalid length. [ 196.754498][T12702] netlink: 'syz.1.1896': attribute type 2 has an invalid length. [ 196.762968][T12702] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 197.580332][T12747] dvmrp0: entered allmulticast mode [ 197.588861][T12747] dvmrp0: left allmulticast mode [ 197.847126][T12764] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 198.165074][T12776] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 198.181161][T12776] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 198.702048][T12799] sctp: [Deprecated]: syz.3.1930 (pid 12799) Use of int in max_burst socket option. [ 198.702048][T12799] Use struct sctp_assoc_value instead [ 199.063212][T12813] __nla_validate_parse: 8 callbacks suppressed [ 199.063229][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1934'. [ 199.341995][T12832] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1938'. [ 199.353726][T12832] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1938'. [ 199.363707][T12832] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1938'. [ 199.501033][T12835] syz.1.1939: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 199.582466][T12835] CPU: 0 UID: 0 PID: 12835 Comm: syz.1.1939 Not tainted syzkaller #0 PREEMPT(full) [ 199.582514][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.582535][T12835] Call Trace: [ 199.582542][T12835] [ 199.582551][T12835] dump_stack_lvl+0x189/0x250 [ 199.582583][T12835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.582606][T12835] ? __pfx__printk+0x10/0x10 [ 199.582633][T12835] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.582657][T12835] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 199.582682][T12835] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 199.582707][T12835] warn_alloc+0x214/0x310 [ 199.582743][T12835] ? __pfx_warn_alloc+0x10/0x10 [ 199.582782][T12835] ? __get_vm_area_node+0x28f/0x300 [ 199.582809][T12835] ? nf_tables_newset+0x132b/0x2530 [ 199.582838][T12835] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 199.582893][T12835] ? alloc_pages_mpol+0x3cd/0x4a0 [ 199.582922][T12835] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 199.582955][T12835] ? rcu_is_watching+0x15/0xb0 [ 199.582975][T12835] ? nf_tables_newset+0x132b/0x2530 [ 199.582999][T12835] ? nf_tables_newset+0x132b/0x2530 [ 199.583020][T12835] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 199.583046][T12835] ? nf_tables_newset+0x132b/0x2530 [ 199.583070][T12835] ? nft_table_lookup+0x211/0x230 [ 199.583093][T12835] ? nft_set_lookup+0x128/0x150 [ 199.583117][T12835] ? nft_hash_privsize+0xaf/0xf0 [ 199.583139][T12835] nf_tables_newset+0x132b/0x2530 [ 199.583177][T12835] ? __pfx_nf_tables_newset+0x10/0x10 [ 199.583225][T12835] ? __nla_parse+0x40/0x60 [ 199.583249][T12835] nfnetlink_rcv+0x112f/0x2520 [ 199.583322][T12835] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 199.583368][T12835] ? ref_tracker_free+0x63a/0x7d0 [ 199.583416][T12835] ? __netlink_deliver_tap+0x807/0x850 [ 199.583437][T12835] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.583474][T12835] netlink_unicast+0x82f/0x9e0 [ 199.583514][T12835] ? __pfx_netlink_unicast+0x10/0x10 [ 199.583544][T12835] ? netlink_sendmsg+0x642/0xb30 [ 199.583563][T12835] ? skb_put+0x11b/0x210 [ 199.583589][T12835] netlink_sendmsg+0x805/0xb30 [ 199.583620][T12835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.583645][T12835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.583668][T12835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.583688][T12835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.583709][T12835] __sock_sendmsg+0x21c/0x270 [ 199.583741][T12835] ____sys_sendmsg+0x505/0x830 [ 199.583771][T12835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.583806][T12835] ? import_iovec+0x74/0xa0 [ 199.583834][T12835] ___sys_sendmsg+0x21f/0x2a0 [ 199.583860][T12835] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.583923][T12835] ? __fget_files+0x2a/0x420 [ 199.583940][T12835] ? __fget_files+0x3a0/0x420 [ 199.583968][T12835] __x64_sys_sendmsg+0x19b/0x260 [ 199.583996][T12835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.584032][T12835] ? rcu_is_watching+0x15/0xb0 [ 199.584057][T12835] ? do_syscall_64+0xbe/0x3b0 [ 199.584083][T12835] do_syscall_64+0xfa/0x3b0 [ 199.584102][T12835] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.584120][T12835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.584138][T12835] ? clear_bhb_loop+0x60/0xb0 [ 199.584159][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.584177][T12835] RIP: 0033:0x7fcc5a18eba9 [ 199.584195][T12835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.584212][T12835] RSP: 002b:00007fcc5b094038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.584231][T12835] RAX: ffffffffffffffda RBX: 00007fcc5a3d6090 RCX: 00007fcc5a18eba9 [ 199.584245][T12835] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 199.584258][T12835] RBP: 00007fcc5a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 199.584270][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.584288][T12835] R13: 00007fcc5a3d6128 R14: 00007fcc5a3d6090 R15: 00007ffd3988c0b8 [ 199.584320][T12835] [ 199.584336][T12835] Mem-Info: [ 199.977262][T12835] active_anon:7474 inactive_anon:0 isolated_anon:0 [ 199.977262][T12835] active_file:2440 inactive_file:39907 isolated_file:0 [ 199.977262][T12835] unevictable:768 dirty:70 writeback:0 [ 199.977262][T12835] slab_reclaimable:11515 slab_unreclaimable:101911 [ 199.977262][T12835] mapped:29802 shmem:1357 pagetables:989 [ 199.977262][T12835] sec_pagetables:0 bounce:0 [ 199.977262][T12835] kernel_misc_reclaimable:0 [ 199.977262][T12835] free:1321987 free_pcp:13403 free_cma:0 [ 200.022825][T12835] Node 0 active_anon:29896kB inactive_anon:0kB active_file:9760kB inactive_file:159424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119208kB dirty:280kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12784kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.056766][T12835] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.087052][T12835] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.116019][T12835] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 200.122102][T12835] Node 0 DMA32 free:1384824kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29848kB inactive_anon:0kB active_file:9760kB inactive_file:157848kB unevictable:1536kB writepending:280kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:32420kB local_pcp:14416kB free_cma:0kB [ 200.182461][T12835] lowmem_reserve[]: 0 0 1 1 1 [ 200.205108][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 200.210147][T12835] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 200.222129][T12853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 200.302693][T12835] lowmem_reserve[]: 0 0 0 0 0 [ 200.321005][T12835] Node 1 Normal free:3887496kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21532kB local_pcp:9980kB free_cma:0kB [ 200.359284][T12855] vlan0: entered allmulticast mode [ 200.380592][T12855] bridge0: entered allmulticast mode [ 200.391368][T12835] lowmem_reserve[]: 0 0 0 0 0 [ 200.401687][T12835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.444977][T12835] Node 0 DMA32: 251*4kB (UME) 232*8kB (UM) 189*16kB (UME) 141*32kB (UME) 70*64kB (UME) 75*128kB (UME) 66*256kB (UM) 34*512kB (UME) 20*1024kB (UM) 9*2048kB (UM) 314*4096kB (UM) = 1383836kB [ 200.572430][T12835] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 200.605490][T12835] Node 1 Normal: 202*4kB (UE) 40*8kB (UME) 38*16kB (UME) 52*32kB (UME) 19*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3887496kB [ 200.636977][T12835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.646925][T12835] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.656651][T12835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.680013][T12835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 200.711763][T12879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1948'. [ 200.744351][T12835] 43701 total pagecache pages [ 200.750974][T12835] 0 pages in swap cache [ 200.755222][T12835] Free swap = 124996kB [ 200.796547][T12835] Total swap = 124996kB [ 200.800736][T12835] 2097051 pages RAM [ 200.819116][T12835] 0 pages HighMem/MovableOnly [ 200.823908][T12835] 425671 pages reserved [ 200.849634][T12835] 0 pages cma reserved [ 200.900092][T12890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.938069][T12890] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1953'. [ 201.119008][T12899] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1956'. [ 201.301632][T12913] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 201.309625][T12913] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1960'. [ 201.887068][T12946] syzkaller0: entered promiscuous mode [ 201.914526][T12946] syzkaller0: entered allmulticast mode [ 201.969061][T12954] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 202.817716][T10818] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.840135][T10818] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.857716][T11645] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.875280][T11645] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.402999][T13035] validate_nla: 2 callbacks suppressed [ 203.403018][T13035] netlink: 'syz.4.1996': attribute type 1 has an invalid length. [ 203.472420][T13035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.529381][T13035] vlan0: entered promiscuous mode [ 203.534710][T13035] bond6: entered promiscuous mode [ 203.540078][T13035] vlan0: entered allmulticast mode [ 203.545447][T13035] bond6: entered allmulticast mode [ 203.568848][T13035] bond6: (slave gretap0): making interface the new active one [ 203.576672][T13035] gretap0: entered promiscuous mode [ 203.582116][T13035] gretap0: entered allmulticast mode [ 203.590834][T13035] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 203.898307][T13063] sctp: [Deprecated]: syz.0.2002 (pid 13063) Use of int in max_burst socket option. [ 203.898307][T13063] Use struct sctp_assoc_value instead [ 204.041770][T13080] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3975070269/3975070271 [ 204.058185][T13080] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3975070269/3975070271 [ 204.281792][T13096] dummy0: left promiscuous mode [ 204.287718][T13098] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 204.311376][T13096] team0: Port device dummy0 removed [ 204.339170][T13096] : left allmulticast mode [ 204.344357][T13096] bridge0: port 1() entered disabled state [ 204.358695][T13096] bond0: (slave bridge_slave_1): Releasing backup interface [ 204.384319][T13096] bond0: (slave bond_slave_0): Releasing backup interface [ 204.399065][T13096] bond0: (slave bond_slave_1): Releasing backup interface [ 204.411584][T13096] team_slave_0: left promiscuous mode [ 204.419882][T13096] team0: Port device team_slave_0 removed [ 204.427206][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.432561][T13109] sctp: [Deprecated]: syz.2.2016 (pid 13109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.432561][T13109] Use struct sctp_sack_info instead [ 204.434656][T13096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.461766][T13107] __nla_validate_parse: 4 callbacks suppressed [ 204.461783][T13107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2011'. [ 204.462260][T13096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.484822][T13096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.501734][T13096] bond1: (slave wlan0): Releasing active interface [ 204.516041][T13096] bond6: (slave gretap0): Releasing active interface [ 204.522981][T13096] gretap0: left promiscuous mode [ 204.551459][T13096] gretap0: left allmulticast mode [ 204.611208][T13108] netlink: 'syz.0.2015': attribute type 2 has an invalid length. [ 204.694106][T13113] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2017'. [ 204.719972][T13113] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2017'. [ 204.810935][T13118] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20003 [ 204.886169][T13122] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 205.363844][T13148] netlink: 'syz.4.2030': attribute type 29 has an invalid length. [ 205.512386][T13157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.800124][T13184] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2042'. [ 205.930754][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2044'. [ 206.120176][T13199] openvswitch: netlink: Invalid VLAN frame [ 206.193933][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'. [ 206.312154][T13213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2051'. [ 206.513499][T13228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2053'. [ 206.632248][T13233] netlink: 'syz.1.2056': attribute type 1 has an invalid length. [ 206.701483][T13235] bond9: (slave gretap2): making interface the new active one [ 206.721465][T13235] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 206.789106][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.843995][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 206.901437][T13246] dvmrp0: entered allmulticast mode [ 207.177035][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 207.257493][T11648] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.272931][T11645] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.300515][T11645] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.323509][T10818] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.407387][T13274] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 207.465480][T13274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.595415][T13283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.842324][T13294] bond8: entered promiscuous mode [ 207.847875][T13294] bond8: entered allmulticast mode [ 207.853515][T13294] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.463353][T13329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.659408][T13339] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 208.676048][T13339] dummy0: entered promiscuous mode [ 208.697097][T13339] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 208.762843][T13345] netlink: 'syz.2.2092': attribute type 29 has an invalid length. [ 209.222645][T13361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.234587][T13361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.381925][T13361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.428013][T13361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.503694][T13388] syzkaller1: entered promiscuous mode [ 209.520635][T13388] syzkaller1: entered allmulticast mode [ 209.589707][T13361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.610310][T13361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.641384][T13388] __nla_validate_parse: 15 callbacks suppressed [ 209.641403][T13388] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2104'. [ 209.712224][T13400] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.2109'. [ 209.782453][T13361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.804002][T13361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.830898][T13400] tipc: Enabling of bearer rejected, media not registered [ 209.973007][T10818] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.998974][T10818] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.055172][T13417] ipvlan0: entered promiscuous mode [ 210.069605][T13417] ipvlan0: entered allmulticast mode [ 210.080158][T11648] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.090659][T11648] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.137835][T11648] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.154194][T11648] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.183242][T10818] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.194830][T10818] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.492945][T13441] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2119'. [ 210.593841][T13441] gretap0: entered promiscuous mode [ 210.702907][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 210.969803][T13464] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 211.053490][T13469] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2126'. [ 211.055716][T13470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.069757][T13470] IPv6: NLM_F_CREATE should be set when creating new route [ 211.324116][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 211.361554][T13488] dummy0 (unregistering): left promiscuous mode [ 211.370910][T13488] dummy0 (unregistering): left allmulticast mode [ 211.382895][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 211.384682][T13488] team0: Port device dummy0 removed [ 211.514297][ T59] syzkaller0: tun_net_xmit 76 [ 211.526701][ T59] syzkaller0: tun_net_xmit 48 [ 211.537180][ T5868] syzkaller0: tun_net_xmit 76 [ 211.552474][T13498] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 211.561865][T13498] syzkaller0: Linktype set failed because interface is up [ 211.576699][ T24] syzkaller0: tun_net_xmit 76 [ 211.625001][T13498] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 211.701851][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 211.713916][T13506] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2136'. [ 211.759474][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2136'. [ 212.661392][T13518] netlink: 'syz.1.2139': attribute type 10 has an invalid length. [ 213.156459][T13515] sch_fq: defrate 0 ignored. [ 213.326724][T13537] tipc: Enabled bearer , priority 13 [ 213.336021][T13533] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 213.344351][T13533] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 213.354602][T13533] netlink: 'syz.3.2142': attribute type 2 has an invalid length. [ 213.429160][T13539] syzkaller1: entered promiscuous mode [ 213.456191][T13539] syzkaller1: entered allmulticast mode [ 213.552886][T13549] tipc: Enabling of bearer rejected, already enabled [ 213.807990][T13561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.874488][T13568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.122197][T13582] IPVS: set_ctl: invalid protocol: 9 172.20.20.20:20003 [ 214.171035][T13582] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 214.326008][T13600] xfrm1: entered promiscuous mode [ 214.368308][T13600] xfrm1: entered allmulticast mode [ 214.481185][T13609] veth0: entered promiscuous mode [ 214.649872][T13604] veth0: left promiscuous mode [ 214.744805][T13627] __nla_validate_parse: 12 callbacks suppressed [ 214.744823][T13627] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2170'. [ 214.784612][T13629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2171'. [ 214.796917][T13626] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2170'. [ 215.110362][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2177'. [ 215.246029][T13653] tipc: Enabled bearer , priority 0 [ 215.288324][T13653] syzkaller0: entered promiscuous mode [ 215.308980][T13653] syzkaller0: entered allmulticast mode [ 215.371646][T13653] tipc: Resetting bearer [ 215.460748][T13653] tipc: Resetting bearer [ 215.507923][T13653] tipc: Disabling bearer [ 216.008653][T13696] netlink: 'syz.4.2195': attribute type 11 has an invalid length. [ 216.031657][T13696] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2195'. [ 216.131657][T13702] netlink: 'syz.3.2198': attribute type 1 has an invalid length. [ 216.333592][T13702] bond5 (unregistering): Released all slaves [ 216.593410][T13720] netlink: 'syz.0.2200': attribute type 1 has an invalid length. [ 216.605219][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 216.660857][T13720] 8021q: adding VLAN 0 to HW filter on device bond8 [ 216.686026][T13731] sctp: [Deprecated]: syz.4.2201 (pid 13731) Use of int in maxseg socket option. [ 216.686026][T13731] Use struct sctp_assoc_value instead [ 216.803074][T13711] can: request_module (can-proto-0) failed. [ 216.921809][T13743] delete_channel: no stack [ 216.950651][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 217.067477][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 217.098476][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'. [ 217.123546][T13764] netlink: 'syz.2.2216': attribute type 4 has an invalid length. [ 217.178939][T13764] netlink: 'syz.2.2216': attribute type 4 has an invalid length. [ 217.295181][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 217.410990][T13779] tipc: Enabled bearer , priority 0 [ 217.502819][T13779] syzkaller0: entered promiscuous mode [ 217.510010][T13779] syzkaller0: entered allmulticast mode [ 217.548087][T13779] tipc: Resetting bearer [ 217.657757][T13785] tipc: Resetting bearer [ 217.700199][T13785] tipc: Disabling bearer [ 217.768706][T13789] syzkaller0: refused to change device tx_queue_len [ 217.811776][T13792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.820591][T13792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.969558][T13798] xt_policy: too many policy elements [ 218.060489][T13800] nbd: couldn't find a device at index 0 [ 218.106184][T13800] syzkaller1: entered promiscuous mode [ 218.122061][T13800] syzkaller1: entered allmulticast mode [ 218.328550][T13817] pim6reg527: entered allmulticast mode [ 219.102427][T13864] hsr0 speed is unknown, defaulting to 1000 [ 219.153171][T13868] netlink: 'syz.2.2249': attribute type 1 has an invalid length. [ 219.271135][T13874] netlink: 'syz.2.2252': attribute type 1 has an invalid length. [ 219.310144][T13874] netlink: 'syz.2.2252': attribute type 4 has an invalid length. [ 219.348021][T13876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.679657][T13896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.721751][T13902] lo: Caught tx_queue_len zero misconfig [ 219.730983][T13902] netem: change failed [ 219.743209][T13903] netem: change failed [ 220.152299][T13928] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 220.165904][T13930] __nla_validate_parse: 11 callbacks suppressed [ 220.165921][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2269'. [ 220.557534][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2275'. [ 220.583145][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2275'. [ 220.638736][T13956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2277'. [ 221.044591][T13983] netlink: 'syz.1.2285': attribute type 11 has an invalid length. [ 221.091385][T13982] netlink: 'syz.1.2285': attribute type 11 has an invalid length. [ 221.375156][T14013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2290'. [ 221.375183][T14015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2290'. [ 221.448922][T14009] can: request_module (can-proto-0) failed. [ 221.471785][T14018] syz.3.2293 uses old SIOCAX25GETINFO [ 221.541555][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 221.595522][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'. [ 221.622121][T14028] openvswitch: netlink: Unknown key attributes 2 [ 221.685451][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 221.802454][T14047] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2301'. [ 221.888979][T14047] 1{X: renamed from 30{X (while UP) [ 221.915384][T14047] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 222.129438][T14073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.601686][T14111] netlink: 'syz.0.2317': attribute type 39 has an invalid length. [ 222.663000][T14113] netlink: 'syz.1.2318': attribute type 3 has an invalid length. [ 223.043710][T14140] netlink: 'syz.2.2324': attribute type 1 has an invalid length. [ 223.142251][T11649] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.154211][T11649] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.172546][T11649] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.194014][T11649] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.195892][T14150] nbd: must specify a device to reconfigure [ 223.443678][ T30] audit: type=1800 audit(1757856354.892:7): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2330" name="memory.events" dev="tmpfs" ino=2475 res=0 errno=0 [ 223.507899][ T30] audit: type=1804 audit(1757856354.892:8): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2330" name="/newroot/481/memory.events" dev="tmpfs" ino=2475 res=1 errno=0 [ 223.572133][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.608834][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.640796][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.680428][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.695022][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.711146][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.721996][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.733052][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.743580][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.754149][T14173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 223.769653][T14186] tipc: Enabling of bearer rejected, media not registered [ 223.791095][T14185] tipc: Enabling of bearer rejected, media not registered [ 223.830054][T14179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.317587][T14222] openvswitch: netlink: Message has 4 unknown bytes. [ 224.503553][T14234] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 224.624909][T14244] netlink: 'syz.3.2356': attribute type 4 has an invalid length. [ 225.219546][T14289] __nla_validate_parse: 11 callbacks suppressed [ 225.219566][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'. [ 225.240949][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 225.241498][T14290] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2370'. [ 225.250456][T14289] netlink: 'syz.1.2371': attribute type 11 has an invalid length. [ 225.380609][T14298] lo: left promiscuous mode [ 225.386048][T14298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.403887][T14300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.519868][T14307] netlink: 'syz.4.2376': attribute type 1 has an invalid length. [ 225.592161][T14307] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.749753][T14320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2382'. [ 225.834234][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 225.925368][T14335] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2385'. [ 225.946877][T14336] netlink: 'syz.0.2386': attribute type 2 has an invalid length. [ 225.992724][T14340] IPVS: length: 157 != 24 [ 226.092022][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2388'. [ 226.122113][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'. [ 226.136052][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2390'. [ 226.151598][T14349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2390'. [ 226.281757][T14361] netlink: 'syz.3.2391': attribute type 1 has an invalid length. [ 226.297829][T14361] netlink: 'syz.3.2391': attribute type 4 has an invalid length. [ 226.462359][T14369] netlink: 'syz.3.2395': attribute type 21 has an invalid length. [ 226.731375][T14379] 8021q: adding VLAN 0 to HW filter on device bond10 [ 226.844256][T14393] batadv_slave_1: entered promiscuous mode [ 226.853139][T14393] batman_adv: batadv0: Adding interface: macsec2 [ 226.860211][T14393] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.888033][T14393] batman_adv: batadv0: Interface activated: macsec2 [ 226.977793][T14397] 8021q: adding VLAN 0 to HW filter on device bond11 [ 227.018244][T14398] 8021q: adding VLAN 0 to HW filter on device bond11 [ 227.033604][T14398] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 227.048978][T14398] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 227.167068][T14407] nbd1: detected capacity change from 0 to 127 [ 227.204765][ T51] block nbd1: Receive control failed (result -32) [ 227.470826][T14440] openvswitch: netlink: IP tunnel dst address not specified [ 227.689333][T14447] ksmbd: Unknown IPC event: 3, ignore. [ 227.812003][T14455] openvswitch: netlink: IPv6 tunnel dst address is zero [ 227.968540][T14477] bond0: entered promiscuous mode [ 227.975957][T14477] bond0: entered allmulticast mode [ 227.981959][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.002787][T14524] validate_nla: 5 callbacks suppressed [ 229.002807][T14524] netlink: 'syz.4.2444': attribute type 7 has an invalid length. [ 229.043633][T14520] nbd: must specify at least one socket [ 229.057984][T14524] netlink: 'syz.4.2444': attribute type 8 has an invalid length. [ 229.486245][T14543] openvswitch: netlink: IPv4 tun info is not correct [ 229.724201][T14560] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 229.950208][T14574] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 229.981501][T14576] dummy0: mtu less than device minimum [ 229.998116][T14576] syzkaller0: entered allmulticast mode [ 230.036719][T14580] netlink: 'syz.1.2464': attribute type 6 has an invalid length. [ 230.126529][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 230.159570][T14584] tunl0: left promiscuous mode [ 230.174146][T14584] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 230.186778][T14584] veth3: left allmulticast mode [ 230.192407][T14584] veth5: left promiscuous mode [ 230.199997][T14584] veth5: left allmulticast mode [ 230.205777][T14584] xfrm1: left promiscuous mode [ 230.210495][T14588] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 230.210908][T14584] xfrm1: left allmulticast mode [ 230.230417][T14584] bond0: left promiscuous mode [ 230.235283][T14584] bond0: left allmulticast mode [ 230.242826][T14584] vlan0: left promiscuous mode [ 230.247692][T14584] bridge0: left promiscuous mode [ 230.252833][T14584] vlan0: left allmulticast mode [ 230.257966][T14584] bridge0: left allmulticast mode [ 230.295305][T14584] __nla_validate_parse: 16 callbacks suppressed [ 230.295323][T14584] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2466'. [ 230.494841][ T30] audit: type=1107 audit(1757856361.952:9): pid=14604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 230.560898][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'. [ 230.725081][T14618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'. [ 230.775307][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'. [ 230.794604][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2481'. [ 230.832590][T14635] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2483'. [ 230.846955][T14635] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2483'. [ 230.961006][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'. [ 230.979783][T14639] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2484'. [ 231.122575][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 231.142549][T14655] netlink: 'syz.2.2489': attribute type 2 has an invalid length. [ 231.245860][T14665] netlink: 'syz.4.2493': attribute type 1 has an invalid length. [ 231.309231][T14671] netlink: 'syz.1.2492': attribute type 4 has an invalid length. [ 231.343375][T14665] 8021q: adding VLAN 0 to HW filter on device bond12 [ 231.344806][T14670] netlink: 'syz.2.2494': attribute type 11 has an invalid length. [ 231.596020][T14687] syzkaller0: entered promiscuous mode [ 231.602470][T14687] syzkaller0: entered allmulticast mode [ 231.611725][T14695] tipc: Enabled bearer , priority 0 [ 231.644096][T14687] tipc: Resetting bearer [ 231.713083][T14685] tipc: Resetting bearer [ 231.766252][T14699] nbd: nbd1 already in use [ 231.776198][T14699] nbd: must specify an index to disconnect [ 233.207323][T14685] tipc: Disabling bearer [ 233.429581][T14730] bond0: (slave wlan1): Releasing backup interface [ 233.450318][T14730] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 233.459097][T14730] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 233.472281][T14730] bond3: (slave gretap1): Releasing active interface [ 233.483700][T14730] bond4: (slave bond5): Releasing backup interface [ 233.492694][T14730] bond5: left promiscuous mode [ 233.501868][T14730] bond6: (slave geneve2): Releasing active interface [ 233.518070][T14730] bond7: (slave veth3): Releasing active interface [ 233.524680][T14730] bond7: (slave veth3): the permanent HWaddr of slave - ce:86:58:89:f7:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 233.544256][T14730] bond7: (slave veth5): Releasing active interface [ 233.556042][T14730] bond9: (slave gretap2): Releasing active interface [ 233.568074][T14730] batman_adv: batadv0: Interface deactivated: macsec2 [ 233.574896][T14730] batman_adv: batadv0: Removing interface: macsec2 [ 233.674968][T14741] syzkaller0: entered promiscuous mode [ 233.708683][T14741] syzkaller0: entered allmulticast mode [ 234.003302][T14786] netlink: 'syz.2.2525': attribute type 1 has an invalid length. [ 234.433570][T14811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.516049][T14818] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 234.927872][T14841] syzkaller1: entered promiscuous mode [ 234.933377][T14841] syzkaller1: entered allmulticast mode [ 235.108278][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ed0f800: rx timeout, send abort [ 235.117000][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ed0f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 235.426889][T14867] team0: Port device team_slave_0 removed [ 235.464491][T14860] veth9: entered promiscuous mode [ 235.481197][T14866] hsr0 speed is unknown, defaulting to 1000 [ 235.641269][T14883] __nla_validate_parse: 19 callbacks suppressed [ 235.641286][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2554'. [ 235.691501][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 235.704381][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2554'. [ 235.724201][T14888] netlink: 'syz.1.2556': attribute type 21 has an invalid length. [ 235.735868][T14888] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.745016][T14888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.752309][T14888] IPv6: NLM_F_CREATE should be set when creating new route [ 235.759686][T14888] IPv6: NLM_F_CREATE should be set when creating new route [ 235.766944][T14888] IPv6: NLM_F_CREATE should be set when creating new route [ 235.890968][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2557'. [ 235.944734][T14895] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2557'. [ 235.975532][T14895] 0{X: renamed from gretap0 (while UP) [ 235.994610][T14895] 0{X: entered allmulticast mode [ 236.009834][T14895] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 236.028159][T14906] veth0: entered promiscuous mode [ 236.136707][T14919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2561'. [ 236.192458][T14922] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2562'. [ 236.322136][T14930] netlink: 'syz.3.2566': attribute type 4 has an invalid length. [ 236.335405][T14932] netlink: 'syz.3.2566': attribute type 4 has an invalid length. [ 236.543474][T14944] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2571'. [ 236.806159][T14962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2576'. [ 236.817209][T14905] veth0: left promiscuous mode [ 236.855247][T14964] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 236.870154][T14964] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2577'. [ 236.883922][T14964] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 236.926081][T14973] netlink: 'syz.1.2579': attribute type 8 has an invalid length. [ 237.033866][T14976] syz_tun: left promiscuous mode [ 237.066601][T14976] syz_tun: left allmulticast mode [ 237.216751][T14989] netlink: 'syz.2.2587': attribute type 3 has an invalid length. [ 237.231533][T14989] netlink: 'syz.2.2587': attribute type 2 has an invalid length. [ 237.609790][T15017] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 237.708132][T15023] tipc: Enabled bearer , priority 0 [ 237.716154][T15023] syzkaller0: entered promiscuous mode [ 237.721743][T15023] syzkaller0: entered allmulticast mode [ 237.755108][T15023] tipc: Resetting bearer [ 237.776197][T15023] openvswitch: netlink: Invalid VLAN frame [ 237.804782][T15022] tipc: Resetting bearer [ 237.835068][T15022] tipc: Disabling bearer [ 238.000242][T15037] netlink: 'syz.3.2601': attribute type 3 has an invalid length. [ 238.474348][T15057] tipc: Enabled bearer , priority 0 [ 238.497445][T15057] syzkaller0: entered promiscuous mode [ 238.502952][T15057] syzkaller0: entered allmulticast mode [ 238.592826][T15064] tipc: Enabled bearer , priority 10 [ 238.652517][T15061] syzkaller0: mtu greater than device maximum [ 238.695411][T15065] syzkaller1: entered promiscuous mode [ 238.703240][T15065] syzkaller1: entered allmulticast mode [ 238.801886][T15078] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 238.907595][T15056] tipc: Resetting bearer [ 238.923731][T15056] tipc: Disabling bearer [ 239.308566][T15110] netlink: 'syz.3.2623': attribute type 4 has an invalid length. [ 239.499434][T15120] sock: sock_timestamping_bind_phc: sock not bind to device [ 239.708089][ T2154] tipc: Node number set to 3894107091 [ 240.030817][T15156] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 240.844603][T15211] __nla_validate_parse: 24 callbacks suppressed [ 240.844624][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2653'. [ 240.947809][T15218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2654'. [ 240.948766][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2655'. [ 240.965895][T15219] validate_nla: 3 callbacks suppressed [ 240.965912][T15219] netlink: 'syz.3.2655': attribute type 7 has an invalid length. [ 241.004237][T15219] netlink: 'syz.3.2655': attribute type 8 has an invalid length. [ 241.035088][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 241.146717][T15229] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 241.162593][T15229] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 241.314006][T15240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2661'. [ 241.331735][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'. [ 241.361301][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2661'. [ 241.657252][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 241.678358][T15264] team0: left allmulticast mode [ 241.683775][T15264] team_slave_0: left allmulticast mode [ 241.694982][T15264] team0: left promiscuous mode [ 241.700810][T15264] team_slave_0: left promiscuous mode [ 241.708845][T15264] bridge0: port 3(team0) entered disabled state [ 241.719534][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 241.728899][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2670'. [ 241.729870][T15264] bridge_slave_1: left allmulticast mode [ 241.745939][T15264] bridge_slave_1: left promiscuous mode [ 241.751888][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.762776][T15264] bridge_slave_0: left allmulticast mode [ 241.768774][T15264] bridge_slave_0: left promiscuous mode [ 241.774550][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.983169][T15279] syzkaller0: entered promiscuous mode [ 241.997939][T15279] syzkaller0: entered allmulticast mode [ 242.239866][T15297] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 242.302540][T15304] siw: device registration error -23 [ 243.203398][T15338] warn_alloc: 1 callbacks suppressed [ 243.203417][T15338] syz.4.2695: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 243.270433][T15338] CPU: 0 UID: 0 PID: 15338 Comm: syz.4.2695 Not tainted syzkaller #0 PREEMPT(full) [ 243.270462][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.270487][T15338] Call Trace: [ 243.270495][T15338] [ 243.270504][T15338] dump_stack_lvl+0x189/0x250 [ 243.270535][T15338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.270559][T15338] ? __pfx__printk+0x10/0x10 [ 243.270586][T15338] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.270610][T15338] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.270635][T15338] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 243.270661][T15338] warn_alloc+0x214/0x310 [ 243.270697][T15338] ? __pfx_warn_alloc+0x10/0x10 [ 243.270737][T15338] ? __get_vm_area_node+0x28f/0x300 [ 243.270764][T15338] ? hash_net_create+0x358/0xfe0 [ 243.270789][T15338] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 243.270817][T15338] ? do_syscall_64+0xfa/0x3b0 [ 243.270869][T15338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.270904][T15338] ? rcu_is_watching+0x15/0xb0 [ 243.270926][T15338] ? hash_net_create+0x358/0xfe0 [ 243.270944][T15338] ? hash_net_create+0x358/0xfe0 [ 243.270962][T15338] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 243.270995][T15338] ? hash_net_create+0x358/0xfe0 [ 243.271014][T15338] ? hash_net_create+0x2fe/0xfe0 [ 243.271039][T15338] hash_net_create+0x358/0xfe0 [ 243.271067][T15338] ? __nla_parse+0x40/0x60 [ 243.271089][T15338] ? __pfx_hash_net_create+0x10/0x10 [ 243.271111][T15338] ip_set_create+0xa94/0x1940 [ 243.271140][T15338] ? ip_set_create+0x4a2/0x1940 [ 243.271181][T15338] ? __pfx_ip_set_create+0x10/0x10 [ 243.271246][T15338] nfnetlink_rcv_msg+0xb4d/0x1130 [ 243.271277][T15338] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 243.271326][T15338] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.271353][T15338] ? kasan_save_free_info+0x46/0x50 [ 243.271429][T15338] netlink_rcv_skb+0x208/0x470 [ 243.271452][T15338] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.271482][T15338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.271516][T15338] ? bpf_lsm_capable+0x9/0x20 [ 243.271541][T15338] ? security_capable+0x7e/0x2e0 [ 243.271579][T15338] nfnetlink_rcv+0x26a/0x2520 [ 243.271612][T15338] ? __dev_queue_xmit+0x1d79/0x3b50 [ 243.271651][T15338] ? __dev_queue_xmit+0x27b/0x3b50 [ 243.271690][T15338] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 243.271718][T15338] ? __pfx___dev_queue_xmit+0x10/0x10 [ 243.271761][T15338] ? ref_tracker_free+0x63a/0x7d0 [ 243.271781][T15338] ? __asan_memcpy+0x40/0x70 [ 243.271804][T15338] ? __pfx_ref_tracker_free+0x10/0x10 [ 243.271842][T15338] ? skb_clone+0x246/0x3a0 [ 243.271872][T15338] ? __netlink_deliver_tap+0x807/0x850 [ 243.271893][T15338] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.271922][T15338] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.271951][T15338] netlink_unicast+0x82f/0x9e0 [ 243.271998][T15338] ? __pfx_netlink_unicast+0x10/0x10 [ 243.272030][T15338] ? netlink_sendmsg+0x642/0xb30 [ 243.272048][T15338] ? skb_put+0x11b/0x210 [ 243.272075][T15338] netlink_sendmsg+0x805/0xb30 [ 243.272107][T15338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.272133][T15338] ? aa_sock_msg_perm+0xf1/0x1d0 [ 243.272155][T15338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.272177][T15338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.272200][T15338] __sock_sendmsg+0x21c/0x270 [ 243.272239][T15338] ____sys_sendmsg+0x505/0x830 [ 243.272271][T15338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.272307][T15338] ? import_iovec+0x74/0xa0 [ 243.272337][T15338] ___sys_sendmsg+0x21f/0x2a0 [ 243.272365][T15338] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.272430][T15338] ? __fget_files+0x2a/0x420 [ 243.272447][T15338] ? __fget_files+0x3a0/0x420 [ 243.272476][T15338] __x64_sys_sendmsg+0x19b/0x260 [ 243.272503][T15338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.272540][T15338] ? rcu_is_watching+0x15/0xb0 [ 243.272566][T15338] ? do_syscall_64+0xbe/0x3b0 [ 243.272592][T15338] do_syscall_64+0xfa/0x3b0 [ 243.272611][T15338] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.272631][T15338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.272650][T15338] ? clear_bhb_loop+0x60/0xb0 [ 243.272675][T15338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.272693][T15338] RIP: 0033:0x7f0a2ab8eba9 [ 243.272716][T15338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.272734][T15338] RSP: 002b:00007f0a2ba3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.272754][T15338] RAX: ffffffffffffffda RBX: 00007f0a2add6090 RCX: 00007f0a2ab8eba9 [ 243.272773][T15338] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 243.272785][T15338] RBP: 00007f0a2ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 243.272798][T15338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.272810][T15338] R13: 00007f0a2add6128 R14: 00007f0a2add6090 R15: 00007fff5ba522b8 [ 243.272861][T15338] [ 243.272869][T15338] Mem-Info: [ 243.763248][T15338] active_anon:7434 inactive_anon:0 isolated_anon:0 [ 243.763248][T15338] active_file:2568 inactive_file:39925 isolated_file:0 [ 243.763248][T15338] unevictable:768 dirty:52 writeback:0 [ 243.763248][T15338] slab_reclaimable:11908 slab_unreclaimable:104099 [ 243.763248][T15338] mapped:28834 shmem:1356 pagetables:1188 [ 243.763248][T15338] sec_pagetables:0 bounce:0 [ 243.763248][T15338] kernel_misc_reclaimable:0 [ 243.763248][T15338] free:1315631 free_pcp:15417 free_cma:0 [ 243.831822][T15338] Node 0 active_anon:29736kB inactive_anon:0kB active_file:10272kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115336kB dirty:208kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12804kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 243.970675][T15338] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.032414][T15338] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.095921][T15338] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 244.133239][T15338] Node 0 DMA32 free:1362644kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29844kB inactive_anon:0kB active_file:10272kB inactive_file:157920kB unevictable:1536kB writepending:208kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:38640kB local_pcp:16540kB free_cma:0kB [ 244.187369][T15338] lowmem_reserve[]: 0 0 1 1 1 [ 244.192637][T15338] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 244.226097][T15338] lowmem_reserve[]: 0 0 0 0 0 [ 244.231010][T15338] Node 1 Normal free:3887496kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21580kB local_pcp:11600kB free_cma:0kB [ 244.264355][T15338] lowmem_reserve[]: 0 0 0 0 0 [ 244.269603][T15338] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.284044][T15388] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 244.285919][T15338] Node 0 DMA32: 1063*4kB (UME) 683*8kB (UM) 480*16kB (UM) 304*32kB (UME) 177*64kB (UM) 121*128kB (UME) 84*256kB (UM) 52*512kB (UM) 23*1024kB (UM) 10*2048kB (UM) 297*4096kB (UM) = 1362612kB [ 244.383685][T15338] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 244.436546][T15338] Node 1 Normal: 202*4kB (UE) 40*8kB (UME) 38*16kB (UME) 52*32kB (UME) 19*64kB (UME) 7*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3887496kB [ 244.475166][T15338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.526580][T15338] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.546217][T15338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.566472][T15338] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.585986][T15338] 44196 total pagecache pages [ 244.590897][T15338] 0 pages in swap cache [ 244.595064][T15338] Free swap = 124996kB [ 244.609654][T15338] Total swap = 124996kB [ 244.613828][T15338] 2097051 pages RAM [ 244.629878][T15338] 0 pages HighMem/MovableOnly [ 244.634573][T15338] 425671 pages reserved [ 244.656341][T15338] 0 pages cma reserved [ 245.277331][T15409] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 245.451894][T15416] gretap3: entered promiscuous mode [ 245.504057][T15416] bond12: (slave gretap3): making interface the new active one [ 245.523925][T15416] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 245.568101][T15409] macvlan4: entered promiscuous mode [ 245.574996][T15409] macvlan4: entered allmulticast mode [ 245.586753][T15409] bond12: entered promiscuous mode [ 245.606615][T15409] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 245.628208][T15409] bond12: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 245.676796][T15409] bond12: left promiscuous mode [ 245.953481][T15428] netlink: 'syz.4.2717': attribute type 4 has an invalid length. [ 245.983506][T15440] macvtap1: entered allmulticast mode [ 245.999578][T15440] veth0_macvtap: entered allmulticast mode [ 246.125266][T15449] __nla_validate_parse: 14 callbacks suppressed [ 246.125286][T15449] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2722'. [ 246.174843][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.200662][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.203890][T15457] netlink: 'syz.0.2725': attribute type 1 has an invalid length. [ 246.227359][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.257164][T15457] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2725'. [ 246.259566][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.372121][T15463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 246.382605][T15475] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 246.390917][T15475] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2726'. [ 246.623410][T15494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2732'. [ 246.644136][T15496] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 246.670308][T15496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2736'. [ 246.680702][T15496] bond13: entered promiscuous mode [ 246.685934][T15496] bond13: entered allmulticast mode [ 246.692104][T15496] 8021q: adding VLAN 0 to HW filter on device bond13 [ 246.824450][T15508] unknown channel width for channel at 909000KHz? [ 246.834272][T15508] unknown channel width for channel at 909000KHz? [ 246.857804][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2740'. [ 247.032915][T15518] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2744'. [ 247.131612][T15526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2746'. [ 247.198137][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2747'. [ 247.242834][T15532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2748'. [ 247.516639][T15555] netlink: 'syz.4.2756': attribute type 2 has an invalid length. [ 247.612683][T15560] geneve4: entered promiscuous mode [ 247.618279][T15560] geneve4: entered allmulticast mode [ 247.631950][T11649] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.642409][T11649] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.661132][T11649] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.671727][T11649] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 247.683291][T15562] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.700604][T15562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.713734][T15562] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 247.784361][T15562] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.837318][T15562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.879847][T15562] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 248.063222][T15562] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.074900][T15562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.085389][T15562] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 248.180116][T15562] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.180361][T15594] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 248.203768][T15594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.213029][T15562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.213376][T15562] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 248.345380][T11653] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.353847][T11653] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.373408][T11653] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.404320][T11653] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.414113][T11653] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.422749][T11653] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.485828][T11653] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.498267][T11653] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.506979][T11653] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.515640][T11653] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.533052][T11653] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 248.542610][T11653] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.555683][T15676] netlink: 'syz.4.2794': attribute type 1 has an invalid length. [ 249.570660][T15672] netlink: 'syz.3.2793': attribute type 64 has an invalid length. [ 251.083566][T15693] syzkaller0: entered promiscuous mode [ 251.105963][T15693] syzkaller0: entered allmulticast mode [ 251.132580][T15698] __nla_validate_parse: 11 callbacks suppressed [ 251.132599][T15698] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2800'. [ 251.365653][T15720] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2805'. [ 251.375264][T15721] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 251.810966][T15747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2813'. [ 252.023974][T15767] netlink: 'syz.4.2820': attribute type 8 has an invalid length. [ 252.035142][T15768] netlink: 'syz.4.2820': attribute type 1 has an invalid length. [ 252.054286][T15768] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2820'. [ 252.081110][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'. [ 252.252457][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2825'. [ 252.355991][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 252.408579][T15794] netlink: 'syz.0.2828': attribute type 1 has an invalid length. [ 252.763999][T15823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2834'. [ 252.927877][T15832] tipc: Enabled bearer , priority 0 [ 252.935408][T15832] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 252.944001][T15832] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 252.954782][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2838'. [ 253.005219][T15832] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.035431][T15832] tipc: Resetting bearer [ 253.446944][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 253.913067][T15872] 1{X: entered promiscuous mode [ 253.921417][T15872] 1{X: left allmulticast mode [ 253.994442][T15879] netlink: 'syz.2.2856': attribute type 1 has an invalid length. [ 254.016453][ T5999] tipc: Node number set to 1860782268 [ 254.029317][T15879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.060170][T15879] bond3: (slave gretap1): making interface the new active one [ 254.069415][T15879] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 254.303033][T15899] lo: entered allmulticast mode [ 254.344410][T15902] netlink: 'syz.1.2863': attribute type 10 has an invalid length. [ 254.403101][T15891] lo: left allmulticast mode [ 254.552915][T15913] netlink: 'syz.4.2867': attribute type 1 has an invalid length. [ 254.626252][T15918] xt_limit: Overflow, try lower: 271964/0 [ 254.785369][T15930] netlink: 'syz.4.2873': attribute type 10 has an invalid length. [ 254.812367][T15930] geneve0: entered promiscuous mode [ 254.820754][T15930] team0: Port device geneve0 added [ 254.844415][T15934] pim6reg1: entered promiscuous mode [ 254.851584][T15934] pim6reg1: entered allmulticast mode [ 255.052088][T15949] IPVS: ip_vs_add_dest(): server weight less than zero [ 255.059136][ T979] IPVS: starting estimator thread 0... [ 255.160947][T15950] IPVS: using max 50 ests per chain, 120000 per kthread [ 255.217460][T15966] netlink: 'syz.1.2884': attribute type 4 has an invalid length. [ 255.731532][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.734199][T16008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.760344][T16009] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 256.262104][T16045] __nla_validate_parse: 18 callbacks suppressed [ 256.262117][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 317.170001][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 373.487604][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.609159][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 395.886704][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 395.894227][ T31] Not tainted syzkaller #0 [ 395.899394][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.909521][ T31] task:kworker/0:0 state:D stack:22936 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 395.923487][ T31] Workqueue: events rfkill_sync_work [ 395.928894][ T31] Call Trace: [ 395.932169][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.935090][ T31] __schedule+0x1798/0x4cc0 [ 395.940121][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.945760][ T31] ? __pfx___schedule+0x10/0x10 [ 395.950935][ T31] ? schedule+0x91/0x360 [ 395.955213][ T31] schedule+0x165/0x360 [ 395.959509][ T31] schedule_preempt_disabled+0x13/0x30 [ 395.964997][ T31] __mutex_lock+0x7e6/0x1350 [ 395.969893][ T31] ? __mutex_lock+0x5bb/0x1350 [ 395.974689][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 395.981469][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 395.987543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.992867][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 396.000379][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 396.008545][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 396.014307][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 396.021080][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 396.028220][ T31] rfkill_set_block+0x1d2/0x440 [ 396.033126][ T31] rfkill_sync_work+0x114/0x200 [ 396.056400][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 396.062185][ T31] process_scheduled_works+0xae1/0x17b0 [ 396.085307][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.097423][ T31] worker_thread+0x8a0/0xda0 [ 396.102110][ T31] kthread+0x70e/0x8a0 [ 396.119639][ T31] ? __pfx_worker_thread+0x10/0x10 [ 396.124802][ T31] ? __pfx_kthread+0x10/0x10 [ 396.130437][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.135684][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.141177][ T31] ? __pfx_kthread+0x10/0x10 [ 396.145796][ T31] ret_from_fork+0x436/0x7d0 [ 396.150469][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 396.155605][ T31] ? __switch_to_asm+0x39/0x70 [ 396.160479][ T31] ? __switch_to_asm+0x33/0x70 [ 396.165689][ T31] ? __pfx_kthread+0x10/0x10 [ 396.170436][ T31] ret_from_fork_asm+0x1a/0x30 [ 396.175222][ T31] [ 396.178302][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 396.185849][ T31] Not tainted syzkaller #0 [ 396.190975][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.199843][ T31] task:kworker/0:1 state:D stack:22744 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 396.211970][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 396.218752][ T31] Call Trace: [ 396.222037][ T31] [ 396.224981][ T31] __schedule+0x1798/0x4cc0 [ 396.229808][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 396.235211][ T31] ? __pfx___schedule+0x10/0x10 [ 396.240172][ T31] ? schedule+0x91/0x360 [ 396.244432][ T31] schedule+0x165/0x360 [ 396.248622][ T31] schedule_preempt_disabled+0x13/0x30 [ 396.254165][ T31] __mutex_lock+0x7e6/0x1350 [ 396.258954][ T31] ? __mutex_lock+0x5bb/0x1350 [ 396.263801][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 396.270110][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 396.275152][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 396.280948][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 396.287676][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 396.293952][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 396.299750][ T31] process_scheduled_works+0xae1/0x17b0 [ 396.305333][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 396.311377][ T31] worker_thread+0x8a0/0xda0 [ 396.315997][ T31] kthread+0x70e/0x8a0 [ 396.320234][ T31] ? __pfx_worker_thread+0x10/0x10 [ 396.325336][ T31] ? __pfx_kthread+0x10/0x10 [ 396.330314][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.335521][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.340764][ T31] ? __pfx_kthread+0x10/0x10 [ 396.345348][ T31] ret_from_fork+0x436/0x7d0 [ 396.350115][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 396.355222][ T31] ? __switch_to_asm+0x39/0x70 [ 396.360032][ T31] ? __switch_to_asm+0x33/0x70 [ 396.364968][ T31] ? __pfx_kthread+0x10/0x10 [ 396.369613][ T31] ret_from_fork_asm+0x1a/0x30 [ 396.374480][ T31] [ 396.377968][ T31] INFO: task syz.3.2802:15699 blocked for more than 143 seconds. [ 396.385701][ T31] Not tainted syzkaller #0 [ 396.390726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 396.399413][ T31] task:syz.3.2802 state:D stack:26920 pid:15699 tgid:15699 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 396.411485][ T31] Call Trace: [ 396.414770][ T31] [ 396.417774][ T31] __schedule+0x1798/0x4cc0 [ 396.422341][ T31] ? validate_chain+0x897/0x2140 [ 396.427334][ T31] ? __lock_acquire+0xab9/0xd20 [ 396.432203][ T31] ? __pfx___schedule+0x10/0x10 [ 396.437228][ T31] ? schedule+0x91/0x360 [ 396.441462][ T31] schedule+0x165/0x360 [ 396.445611][ T31] schedule_timeout+0x9a/0x270 [ 396.450495][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 396.456001][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.461267][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.466804][ T31] ? wait_for_completion+0x267/0x5d0 [ 396.472104][ T31] wait_for_completion+0x2bf/0x5d0 [ 396.477280][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 396.483014][ T31] ? __flush_work+0xd2/0xbc0 [ 396.487664][ T31] ? __flush_work+0xd2/0xbc0 [ 396.492359][ T31] __flush_work+0x9b9/0xbc0 [ 396.497220][ T31] ? __flush_work+0xd2/0xbc0 [ 396.501916][ T31] ? __pfx___flush_work+0x10/0x10 [ 396.507010][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 396.512335][ T31] ? __pfx___cancel_work+0x10/0x10 [ 396.517493][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 396.523313][ T31] __cancel_work_sync+0xbe/0x110 [ 396.528670][ T31] rfkill_unregister+0x92/0x220 [ 396.533550][ T31] nfc_unregister_device+0x96/0x2a0 [ 396.538828][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 396.544667][ T31] virtual_ncidev_close+0x56/0x90 [ 396.549749][ T31] __fput+0x449/0xa70 [ 396.553785][ T31] task_work_run+0x1d1/0x260 [ 396.558532][ T31] ? __pfx_task_work_run+0x10/0x10 [ 396.563659][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 396.569165][ T31] exit_to_user_mode_loop+0xec/0x110 [ 396.574486][ T31] do_syscall_64+0x2bd/0x3b0 [ 396.579140][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.584365][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.590758][ T31] ? clear_bhb_loop+0x60/0xb0 [ 396.595446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.601386][ T31] RIP: 0033:0x7ffa2ef8eba9 [ 396.605797][ T31] RSP: 002b:00007ffc60cfa528 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 396.616465][ T31] RAX: 0000000000000000 RBX: 000000000003d4d4 RCX: 00007ffa2ef8eba9 [ 396.624568][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 396.633512][ T31] RBP: 00007ffa2f1d7da0 R08: 0000000000000001 R09: 0000001e60cfa81f [ 396.641541][ T31] R10: 0000001b32620000 R11: 0000000000000246 R12: 00007ffa2f1d5fac [ 396.649702][ T31] R13: 00007ffa2f1d5fa0 R14: ffffffffffffffff R15: 00007ffc60cfa640 [ 396.657768][ T31] [ 396.660834][ T31] [ 396.660834][ T31] Showing all locks held in the system: [ 396.671712][ T31] 4 locks held by kworker/0:0/9: [ 396.679181][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 396.690281][ T31] #1: ffffc900000e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 396.702726][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 396.713083][ T31] #3: ffff8880289ab100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 396.722813][ T31] 3 locks held by kworker/0:1/10: [ 396.727879][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 396.739197][ T31] #1: ffffc900000f7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 396.752863][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 396.764306][ T31] 1 lock held by khungtaskd/31: [ 396.769339][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 396.779241][ T31] 2 locks held by getty/5632: [ 396.783901][ T31] #0: ffff88803402e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 396.793683][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 396.803989][ T31] 1 lock held by syz-executor/5869: [ 396.809250][ T31] #0: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 396.819514][ T31] 1 lock held by syz.3.2802/15699: [ 396.824608][ T31] #0: ffff8880289ab100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 396.834514][ T31] 2 locks held by syz-executor/15851: [ 396.839920][ T31] #0: ffff888077d18918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 396.850041][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 396.860324][ T31] 3 locks held by syz.4.2895/16000: [ 396.865524][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.874051][ T31] #1: ffff8881456cd100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 396.883706][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 396.893837][ T31] 1 lock held by syz.1.2905/16039: [ 396.898978][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.907476][ T31] 1 lock held by syz.2.2907/16043: [ 396.912581][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.921329][ T31] 1 lock held by syz.2.2907/16045: [ 396.926586][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.935317][ T31] 1 lock held by syz-executor/16048: [ 396.940668][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.949289][ T31] 1 lock held by syz-executor/16052: [ 396.954559][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.963053][ T31] 1 lock held by syz-executor/16053: [ 396.968350][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.977140][ T31] 1 lock held by syz-executor/16054: [ 396.982511][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 396.990994][ T31] 1 lock held by syz-executor/16056: [ 396.996304][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.004777][ T31] 1 lock held by syz-executor/16058: [ 397.010251][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.018879][ T31] 1 lock held by syz-executor/16062: [ 397.024714][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.033196][ T31] 1 lock held by syz-executor/16063: [ 397.038692][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.047179][ T31] 1 lock held by syz-executor/16064: [ 397.052463][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.060983][ T31] 1 lock held by syz-executor/16066: [ 397.066513][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.074983][ T31] 1 lock held by syz-executor/16068: [ 397.080312][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.088773][ T31] 1 lock held by syz-executor/16073: [ 397.094038][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.102628][ T31] 1 lock held by syz-executor/16074: [ 397.107916][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.116414][ T31] 1 lock held by syz-executor/16075: [ 397.121734][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 397.130403][ T31] [ 397.132733][ T31] ============================================= [ 397.132733][ T31] [ 397.141272][ T31] NMI backtrace for cpu 0 [ 397.141292][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 397.141305][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.141311][ T31] Call Trace: [ 397.141316][ T31] [ 397.141322][ T31] dump_stack_lvl+0x189/0x250 [ 397.141340][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.141352][ T31] ? __pfx__printk+0x10/0x10 [ 397.141373][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 397.141389][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 397.141405][ T31] ? __pfx__printk+0x10/0x10 [ 397.141421][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.141438][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 397.141454][ T31] watchdog+0xf93/0xfe0 [ 397.141472][ T31] ? watchdog+0x1de/0xfe0 [ 397.141489][ T31] kthread+0x70e/0x8a0 [ 397.141503][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.141517][ T31] ? __pfx_kthread+0x10/0x10 [ 397.141530][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.141546][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.141555][ T31] ? __pfx_kthread+0x10/0x10 [ 397.141568][ T31] ret_from_fork+0x436/0x7d0 [ 397.141580][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 397.141593][ T31] ? __switch_to_asm+0x39/0x70 [ 397.141605][ T31] ? __switch_to_asm+0x33/0x70 [ 397.141618][ T31] ? __pfx_kthread+0x10/0x10 [ 397.141630][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.141651][ T31] [ 397.141655][ T31] Sending NMI from CPU 0 to CPUs 1: [ 397.287291][ C1] NMI backtrace for cpu 1 [ 397.287310][ C1] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 397.287331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.287343][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 397.287369][ C1] RIP: 0010:chacha_permute+0x47c/0xf00 [ 397.287394][ C1] Code: 01 fe 89 74 24 3c 31 f5 c1 c5 08 44 01 df 89 7c 24 38 31 fb c1 c3 08 45 01 e8 44 89 44 24 30 45 31 c4 41 c1 c4 07 89 44 24 44 <01> c1 89 4c 24 34 41 31 ce 41 c1 c6 07 8b 04 24 01 e8 89 04 24 41 [ 397.287409][ C1] RSP: 0018:ffffc9000210f450 EFLAGS: 00000003 [ 397.287424][ C1] RAX: 00000000ce2b7985 RBX: 00000000073bf259 RCX: 000000000e424f7c [ 397.287436][ C1] RDX: 000000001b991ef9 RSI: 00000000eaa59820 RDI: 0000000072259397 [ 397.287448][ C1] RBP: 000000004242920f R08: 000000003bc23667 R09: 0000000031532733 [ 397.287460][ C1] R10: 00000000434248f8 R11: 00000000a909d97a R12: 000000004888aa05 [ 397.287471][ C1] R13: 00000000a545af2e R14: 0000000035a2a318 R15: 00000000e1bd057e [ 397.287483][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 397.287498][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.287510][ C1] CR2: 000055f79d9d7000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 397.287525][ C1] Call Trace: [ 397.287532][ C1] [ 397.287558][ C1] chacha_block_generic+0x53/0xc80 [ 397.287586][ C1] crng_fast_key_erasure+0x14f/0x240 [ 397.287612][ C1] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 397.287643][ C1] crng_make_state+0x255/0x700 [ 397.287666][ C1] ? crng_make_state+0x13a/0x700 [ 397.287688][ C1] ? __pfx_crng_make_state+0x10/0x10 [ 397.287717][ C1] _get_random_bytes+0xd5/0x210 [ 397.287738][ C1] ? __pfx__get_random_bytes+0x10/0x10 [ 397.287769][ C1] ? skb_put+0x11b/0x210 [ 397.287790][ C1] nsim_dev_trap_report_work+0x35d/0xb80 [ 397.287818][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 397.287836][ C1] process_scheduled_works+0xae1/0x17b0 [ 397.287867][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.287893][ C1] worker_thread+0x8a0/0xda0 [ 397.287923][ C1] kthread+0x70e/0x8a0 [ 397.287954][ C1] ? __pfx_worker_thread+0x10/0x10 [ 397.287970][ C1] ? __pfx_kthread+0x10/0x10 [ 397.287992][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.288017][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.288034][ C1] ? __pfx_kthread+0x10/0x10 [ 397.288054][ C1] ret_from_fork+0x436/0x7d0 [ 397.288073][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 397.288093][ C1] ? __switch_to_asm+0x39/0x70 [ 397.288115][ C1] ? __switch_to_asm+0x33/0x70 [ 397.288136][ C1] ? __pfx_kthread+0x10/0x10 [ 397.288157][ C1] ret_from_fork_asm+0x1a/0x30 [ 397.288187][ C1] [ 397.288298][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 397.560386][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 397.569520][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.579663][ T31] Call Trace: [ 397.582966][ T31] [ 397.585982][ T31] dump_stack_lvl+0x99/0x250 [ 397.590578][ T31] ? __asan_memcpy+0x40/0x70 [ 397.595165][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.600367][ T31] ? __pfx__printk+0x10/0x10 [ 397.604977][ T31] vpanic+0x281/0x750 [ 397.608964][ T31] ? __pfx_vpanic+0x10/0x10 [ 397.613560][ T31] ? preempt_schedule+0xae/0xc0 [ 397.618418][ T31] ? preempt_schedule_common+0x83/0xd0 [ 397.623873][ T31] panic+0xb9/0xc0 [ 397.627591][ T31] ? __pfx_panic+0x10/0x10 [ 397.632008][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 397.637391][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 397.643553][ T31] watchdog+0xfd2/0xfe0 [ 397.647721][ T31] ? watchdog+0x1de/0xfe0 [ 397.652061][ T31] kthread+0x70e/0x8a0 [ 397.656141][ T31] ? __pfx_watchdog+0x10/0x10 [ 397.660828][ T31] ? __pfx_kthread+0x10/0x10 [ 397.665419][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.670618][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.675836][ T31] ? __pfx_kthread+0x10/0x10 [ 397.680434][ T31] ret_from_fork+0x436/0x7d0 [ 397.685028][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 397.690145][ T31] ? __switch_to_asm+0x39/0x70 [ 397.694926][ T31] ? __switch_to_asm+0x33/0x70 [ 397.699695][ T31] ? __pfx_kthread+0x10/0x10 [ 397.704298][ T31] ret_from_fork_asm+0x1a/0x30 [ 397.709072][ T31] [ 397.712363][ T31] Kernel Offset: disabled [ 397.716676][ T31] Rebooting in 86400 seconds..