last executing test programs: 3m3.446542024s ago: executing program 4 (id=4436): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4}, 0x20) 3m3.242176603s ago: executing program 4 (id=4439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket(0x40000000015, 0x5, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 3m3.036477264s ago: executing program 4 (id=4440): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000008000000000000007f30da0081208001000000000000000014000100fe88132c00a0f4d684c6dd901582662627120000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x24044040}, 0x2000c800) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) 3m2.761584155s ago: executing program 4 (id=4442): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfff9, @random="5ca2b96ddf78", 'macvlan1\x00'}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x0, 0x8, 0xc17, 0x7d5, 0x1, 0x8, 0x10000000, [0x1, 0x3]}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xd4, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfebe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xd92}, @TIPC_NLA_PROP_WIN={0x2, 0x3, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3m2.416890285s ago: executing program 4 (id=4448): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x7, 0x1, 0x8, 0x0, 0x0, [{{r1}}, {{r2}, 0x7d50}, {{r3}, 0x6}, {{r4}, 0x5}, {{r5}, 0xff}, {{r6}, 0x21}, {{r7}, 0x6}, {{r8}, 0xad12}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x408c4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x7, 0x1, 0x8, 0x0, 0x0, [{{r1}}, {{r2}, 0x7d50}, {{r3}, 0x6}, {{r4}, 0x5}, {{r5}, 0xff}, {{r6}, 0x21}, {{r7}, 0x6}, {{r8}, 0xad12}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x408c4) (async) 3m2.010616747s ago: executing program 4 (id=4451): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x10, 0x6bd8, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000980}, 0x4000080) 2m46.939445053s ago: executing program 32 (id=4451): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e1, &(0x7f0000000000)={0x0, 0x0, "957008"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x10, 0x6bd8, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000980}, 0x4000080) 10.51024606s ago: executing program 3 (id=5916): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4f}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xda}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0xe20, 0x9, 0x9}) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newrule={0x38, 0x20, 0x442b271ab5cadccc, 0x70bd2d, 0x25dfdbff, {0x2, 0x80, 0x10, 0x3, 0x5, 0x0, 0x0, 0xb, 0xa}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4eaa}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x118417211784d137, r5}, 0x18) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000005c0)=""/12, &(0x7f0000000600)=0xc) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000640)=r6, 0x4) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000680), 0x4) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f00000006c0)) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000700)={0x0, 0xff7f, 0x10, 0xfffffffffffffffa, 0x8}, &(0x7f0000000740)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000780)={r7, 0x3}, 0x8) (async) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000007c0)) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000000800)={{r8}, "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"}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x160, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x54, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x160}}, 0x400088d) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xa8, r12, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.302068183s ago: executing program 3 (id=5921): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000060a01080000000000000000030000090900010073797a300000000008000a4000000003b8000000060a01030000000000000000020000080c000340000000000000000108000940000000009000074008107883588a854c0efbcf55f32c92376e4bbcfdbf4d7638d09631bb92ae9c59d4f2f57a9f4dea483b6ac848039f553224fe417fa089c66c89db64f45c445a4768cfe7085b8c68bbb0e8b6a15a1fe5a44321653a600a591d7b04f92c3334eca5f615ec2c67803e5180f95e2777bbe663dbb3c9699cbd366b76ec4037730a2cf836f96bd07c7076edc1569f7a140000000b0a0108000000000000000003000001140000001100010000000000000000000300000a2639c96e98ba37538e0c97e8a5af616dadb210e1b428d42613b0526e0ad8ac79465d6c85e96b44d53be49f17dff8c9ce0a84f769fc8c78548faebf4be4d2b569be22346f1fa50c18c43590916c31cd6256564b0a97140f5cdf8ce2cf8e0aa00c78ae198922228b42dc8f65bd66d6f8f8ace6882d2209e5164dc43b44624f6050f1abb2f127e07e34"], 0x11c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400405c) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000050000000c000100bd4811435de3859acc8c00000000800000000c0001000300", @ANYRES32=r5, @ANYBLOB], 0x6c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4048800}, 0x400405c) (async) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000050000000c000100bd4811435de3859acc8c00000000800000000c0001000300", @ANYRES32=r5, @ANYBLOB], 0x6c}}, 0x0) (async) 9.870549035s ago: executing program 3 (id=5925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) 9.638135466s ago: executing program 3 (id=5928): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x4c}}, 0x2000000c) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2600004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2600004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r7 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0)={0x27, 0x0}, &(0x7f0000000640)=0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002540)=0x0) sendmmsg$nfc_llcp(r7, &(0x7f00000028c0)=[{&(0x7f0000000680)={0x27, r4, 0xffffffffffffffff, 0x5, 0x7, 0x1, "b17ad286afffcc50e8d040f67d65742eff6a33098908e0915fcf42eb6c4e0c80265f456b9badaa8ff4f38e28fe42d7b873459cea76609d573b03ce8b143451", 0x38}, 0x60, &(0x7f0000001d40)=[{&(0x7f0000000700)="8b03a01c4cdb911abffd5b1615d94834fa84999aebbcd06724cce6b828a1add612494de886c973f6fb822632f4c046826289c686809750843a893b1b70410e729e87515117e59a469276c81d579c4879d53939681366ba1562bf24d0baf64efc9f791462fa62d1f145b64c461b8ea5f5738dd09475448892ca0b266686e53b6fd379286a42333c8eff990c09d2185f04ad1b9375a3df7945e6f4ae0cd8d83584d2d679d08f236dd6ee0bf316cb72329f07abe2b704cb6a2b82c400f67ccfb19608a4", 0xc2}, {&(0x7f0000000800)="5f3d8bd458eb13b0c19bfda66c6a14ae8e013b0a31b2d3da54791c5474f3aa3eed302aeaa05d98f379b7fe35097a4339177d18f1725ee5f301a81c1ae466636cc09e006cc53fd39332e89a5b571a4fac5f8c26c0dd6e1d62d1492fc60b6419593131628c9bba20366828755cb98de73a72f1855ba36137c07f0842ce27f0d497404457416c514323684f2eb2efa86cc2546ed324", 0x94}, {&(0x7f00000008c0)="51607c32f9e3a3191be37c05572865c55f115359208216c4766b5a9de76f30d5378d7c74e8ce38b78586fd32b0e37a862e4fd4cbba6e7be2841689", 0x3b}, {&(0x7f0000000900)="2cb3714bc33c38ba9915aa8a57af976a6334dddbf5baba05ce75f8ad4bab4e632f7c2929b1d61f8babe612622a6574ef81b951e1cc3e1737cbdb2d0e813d1b97e7e0c7dd936fea647b1a746b05a60ceafb9e92689f1f4cfdb8edb49a6f23a3529ee44135bf1e20a708f0", 0x6a}, {&(0x7f0000000980)="0f8c4ea10f4ff6524c8f7eae17de3e464dff391527a4d42965ffd08519b9e069162ea16fceeda5bdb57dd38c8a799f9dcd10372baf13c49026b83371012cd75d68e5f9fa9c3a8e0b1c762001f896abbd8030bd0244d4592adb32520cf448546f2ed08005c4149a9577b6927d8fd6ec4ba0d13ee08d660ce866a36d6a9c8de961561f0da225957d10dffeaf54b94ed50b38bcecfeeac83cc173520bbf93c81e5d1c7d07878350b9c598757223ad7c649fba6ebb3b1d2b2cd895", 0xb9}, {&(0x7f0000000a40)="c9d7c99f90629ba94a0ace1f2463f01f212b9bf4f4719b56089f8c50a0b740a20e0f6a9d80d628a0baf926e2408a7dda1ff9eeb1ec9abaf6d377c7ed71f5c5cd481121705e2f9668695774d5c7ca025f0cbca9c83bd48d451dde008d5bf1e9d842771bca1ba6ea", 0x67}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="9c0cfd52ad8d4d8df909a04c3534b9f7a76d35989c1c56e9ee1ebab78d68f4fe8177e8e6ee9ffcddf912242d045e37a35c39723adebb0ebec6b33428bdbf550bf20979c0336046b09da5a5e5c5d553b047e42a5a664d5729603e2c951602817f45813c37a4446bc5c9a16be77494b44970ed36681406ef04ff5a2eda5bb783cf61bbcb42ab1587308eca731900", 0x8d}, {&(0x7f0000001b80)="53b41e3132cc7b6573ce01419a18a409347552c92102cea98ac54b60bbb6bc94d03521982a3bd2539089a0b0889c995c119b9207e1d98ec58f0e63b96a26a3d303ff6287600801130ebf06b8fe9ea8f3b2d3c869bebd271c6f1d25f19b0ea2a6170ea7a0a05064f2e776fd8e9694c61b8296b6507b01610e05738b0b3df57539b020c523af4da853d204200779744de6d6793ef5334f2a3103e114d96cf2d3f9b86476e83489abca8e44270eb12b68065909590cf12b36", 0xb7}, {&(0x7f0000001c40)="c79f315d10344689461deca213d0fa9930c4d196d70dd4fd49f5b21eebb0fb405208873b81c747018e0e62578ace0206770476cd7ddb46e646fe2b18857a101fcf1c40b59e1a7023f639aa53b5ab30518315dcf242575bff2acda892192a03d8359ac9989ecc1df00f5e87320624d2e9b02067fcfbc4fbb79dbed9c13b89b685dc0f70bc94e594432afdaa859875b2e09fe0ed9848ff070b82d9decb93508eeda5055f7e16c959bbb50d830de4373bd6df00feede135577a0689f15d80da4c0260b3eee900b5b851289a76ed5fb01242713b7067cdf8fc8402c41272d2ca698cb5037ae00a898abfb15945e2227156115f9f9f1185ffabb2", 0xf8}], 0xa, &(0x7f0000001e00)={0x60, 0x84, 0x8, "140e76e6cf3d51096f7c81278d5ad177ebac4044dbf4ab392f0dda9be666f98b8d7f7a0a95e6110807dacfb5f8df707c3a033f2fe77dae5f3484e126347b62ae70d914b82024b93ad74c"}, 0x60, 0x20000801}, {&(0x7f0000001e80)={0x27, r5, 0x0, 0x3, 0x3, 0x7, "5a27b3a2f2f7d0c63dd024b51c456bb1311fb2c5c8c53ae3e55f37c7f48bf6a06086d51231b6264026fa9f2082509cb3263db4a65a31061e902e401d04874b", 0x2c}, 0x60, &(0x7f0000002000)=[{&(0x7f0000001f00)="b16b781231c4c3b11164ecb3e94f874611504a580a7305b2efbe76fbdb62133ad0f85e0c63cc1385e08a7044b4a222d4bc5c522970166cfe928e7c03faae42b89d0e53530310fa8ffe8cba750b0f306697a52d374b3fb31775f00d33cb5046b19bcd06688b41538d0211faa35fdb467164f8b800c8353b3a0bbbe48f64d24475f367", 0x82}, {&(0x7f0000001fc0)="075a2ac2c90835e5a7cbb4cae36ec51250f0e3aa44f5e479eaecca07", 0x1c}], 0x2, &(0x7f0000002040)={0xf0, 0x116, 0xfffffffb, "c23c7786867a0cae07b0b7babb38f6871e125fe6dc69890a2dc1fad73d4146f232f78c52f72f4bca4b42d55ab301a0ec660ffc1a979a3029c8dde678c33cd69162d9ab9bdef3e647c08435df532bf8d9bcd1a53b4e090c0915768958aea89e97b27e7d680837ebf2ff4c679640fc24a5e46ddb547a48028f0c7b65cf5d56e874aa1242dc7a37ea2f606414ce3075a432b8ec2e78125fad7efaa43a696e7c01e88f770f1814dc456191d4db00ed6e64f510e51ee8cdc7ae389e632ab76149a4321d3fad20d0cb7afd141ef78ec7fe1e40e5d0fb24aa1145ab58ad911d1b832e"}, 0xf0, 0x10}, {&(0x7f0000002140)={0x27, r6, 0x1, 0x2, 0x6, 0x5, "b6e1806db39ba972c121528fce5917e83fb2a2210bb9a4f5630b0c45731ce985a197711ba23fdd35adf733e6fec134222d1b2dbdb00c270534ec1531f56f0e", 0x3c}, 0x60, &(0x7f0000002400)=[{&(0x7f00000021c0)="1fff6202acff01e53dc628d35dbadd1e30af88bbfdb4b83a304cf678c41831da0d3bda505a344533bb8bcafd776ac446c6691a2fdd45606683a4fd7093a9b9032bdafde96eff366aa2c1a00933bb6b40e2882a45a10912a239c8b3d6bdeb3b22366940d73bb3eb8e21a1b23dabb76dee380b2c33988e83f5a968d37ba04114a22c4e4d1a28b2aaeb3b0d201632702df65274f9ce87a8491cfca21f4a94d09652", 0xa0}, {&(0x7f0000002280)="fdebca32355c72059da0fda2716611b581a00697fecc953e33c2db05d1396e82e5a2c84fc19d64fc176eeee8b48908a6ea607112027bab56f0616fa92eef7a0a856dd9694bdb66ff1c29c900b5129deece8de1e32d09ae58b9ece941ab729bac021d1597b9f5aa9e4426e6565186fb69eb0dd9c0fbbc7b086fc590b2697128ded38548f68e95e34d96642a272df4a4d60b7a23112cab7ec7a08eda4370e2a45c01769ec99545d7cff5494f7b5e3e79e409f38475c0c2506a3fa1e63ae9a9ebc01638a156793879c5d77ca2591677b0b14267472e505e7ff89bb155cab0cab3431763f8f397c3d9de78", 0xe9}, {&(0x7f0000002380)="431a3faefb992356e554aa8a21fec2e83d0e67503f2f187c251ce910833fa4b6b43b4c1f97368a2d5decbdbba9", 0x2d}, {&(0x7f00000023c0)="509136dd307fb4248f8d93935d73a8ab01f5e380c790fb75e0deb8e82b8cc632085a547f54a47ee1faacba30f6211c49d4dfa22721a02d45ce1daeb7b6", 0x3d}], 0x4, &(0x7f0000002440)={0xd8, 0x115, 0xffffffff, "dc96ec4d592bf82d8e083917d4f71827a84547b7e708a8e0545580d44c8b631cc835ac64299cbeaee445c85927df68a937232bcc12225a14f3660a2da83f3ee95b8befa6c3c659a2d8136be879d8b8fb937697393bf09a5ea17c9009f56ab386eb23c7f97f056b9831a6bdcaf0db86c52ef189efae7c665251000c76ad7aeadb287c6f05769c9019e4e2215cc35f763cc04a7121675c581d17291dfad08df8a6f4b4bedd6a02cbc539adf14842bab5edd0c0ce6f7ac6ec1e7b245a4b21184ffe9ffa67613dac755c"}, 0xd8, 0x20048004}, {&(0x7f0000002580)={0x27, r9, 0x0, 0x0, 0x9, 0x81, "ebd362a240234b58b3b070c91db78a9ca770886814060f59c8522a6467af73aa016795947c23bfb4359f9b92b1863fb5f2e74f070f73b9961c0e578b38b96a", 0x29}, 0x60, &(0x7f0000002780)=[{&(0x7f0000002600)="f702c1f4ec11d548ed421478d8e76e39f54fda31818033cd6299d89c7e908c7795c78d896ac9f0272f8f5be957abe8769377042c", 0x34}, {&(0x7f0000002640)="706a13c556b416dc710b285d7b3087da2568a3c80b4a49e67f3576e559bf2659a54d0bb693c19cc69bd201211ca170904f48113355a51854acb7864fe5929ebbf32fb3a83d70c8913d9dd0be8ca27a7277cff63aacbc2bed76289fd5cd6fb19a6ca7d5d8bd8ccccb6517fd3e98cbd0203b5b7820ccdc84f8cbeccd92531f", 0x7e}, {&(0x7f00000026c0)="c8ae4e44687d6caa154d61d69d19304f5ffccc1b16f00001fffae70a50ccff15fca864830174542048e77704a67747744c644e4c7a68a8f5e730dae434d4e2fbc23f6adab265e2372d60da0bdfe8909069865f624c57d7c93df3a4997e89909d24832f62d104e09cc7fd88f10579985a75a7e08f8487396ccbeb4861d6f62d0def643bc012f46a975ad9405d53e62927a88e3e9169d671f06472338b236fc6c481f4926ecf11a3895748e2ced297de5439c4a3efceb237", 0xb7}], 0x3, &(0x7f00000027c0)={0xe8, 0x11, 0x100, "aa83eddd5e441ad66e258122213d98eced2ee38f9edc343a1c644e9f4c66402359bc075b0bc13191ce28d62df147fa25e825e87d411b386859c8c72f1037fd37df50bd0499bfdb95da2f0188897cbdbe2f6a8a2639a7acf8b6682eee5a632d59c3665dbf6a71a60dfa9bf7750bdc020b4c4da3644790f03f8c2836731a7fea0637ee25490b37d7d2cfb37fc7c6033191222d1000cd73c6de418ad1b4b5de1213bd21f480c88f4b0a06f1a4a434dcf7b4fc68474c3ba88a589b0d147d345c162e201aeaf30ba03b4925fd3d80a8fa57ce697fa351"}, 0xe8, 0x20000000}], 0x4, 0x40050) r10 = accept(r7, &(0x7f0000002a00)=@generic, &(0x7f0000002a80)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f00000029c0), r10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000029c0), r10) ioctl$INCFS_IOC_CREATE_FILE(r10, 0xc058671e, &(0x7f0000002cc0)={{}, {0xffffffffffffffff}, 0x80, 0x0, 0x0, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)="57b08909d9f17d41648057ea7375e1e3850997eb83f8ea9e5dbca8f8a811d86365dc158b8c0744547f527951cd5eb530c7ed864f6c075ae4c64a266a2d38252907205946398ffd9437e057a76742cd4ec868cfd7b265a1a3df5cc15fc784af93e75c6ffe03daf2dc5e5650e6877b2d150a6caefdcd435d61a310e00f91e9ce80d1f50314be20ef67d2e018091c", 0x8d, 0x0, &(0x7f0000002c00)={0x2, 0x6e, {0x0, 0xc, 0x8, "1cb12ec33f4e01a0", 0x59, "78cc81d67fd616011bceefd50f2b21bf7cea82adbdb1a0ad032cd06acab0570b7f2f5f288c35f9485c97bfe4a92c95dc3735f83e6f36da129560237fdde660dae8cea0e5a9b9c7f4b8342baef2220f23b6e157672443557bf0"}, 0x40, "de30057c881dd379e1c71fb8c3ac3f783c7c82d9c4c184d727c12c93303960103718353eac3985d353bbce10c0477cc96fc9cc0fe47db191398699796965886f"}, 0xba}) recvmmsg(r7, &(0x7f0000006a80)=[{{&(0x7f0000002d40)=@isdn, 0x80, &(0x7f0000004e80)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/139, 0x8b}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x3, &(0x7f0000004ec0)=""/154, 0x9a}, 0x9f}, {{&(0x7f0000004f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005000)=""/166, 0xa6}, {&(0x7f00000050c0)=""/71, 0x47}, {&(0x7f0000005140)=""/38, 0x26}, {&(0x7f0000005180)=""/230, 0xe6}], 0x4, &(0x7f00000052c0)=""/191, 0xbf}, 0x4ac}, {{&(0x7f0000005380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005400)=""/136, 0x88}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/199, 0xc7}, {&(0x7f00000065c0)=""/127, 0x7f}, {&(0x7f0000006640)=""/174, 0xae}, {&(0x7f0000006700)=""/105, 0x69}, {&(0x7f0000006780)=""/138, 0x8a}, {&(0x7f0000006840)=""/223, 0xdf}, {&(0x7f0000006940)}], 0x9, &(0x7f0000006a40)=""/11, 0xb}, 0x6}], 0x3, 0x20, 0x0) (async) recvmmsg(r7, &(0x7f0000006a80)=[{{&(0x7f0000002d40)=@isdn, 0x80, &(0x7f0000004e80)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/139, 0x8b}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x3, &(0x7f0000004ec0)=""/154, 0x9a}, 0x9f}, {{&(0x7f0000004f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005000)=""/166, 0xa6}, {&(0x7f00000050c0)=""/71, 0x47}, {&(0x7f0000005140)=""/38, 0x26}, {&(0x7f0000005180)=""/230, 0xe6}], 0x4, &(0x7f00000052c0)=""/191, 0xbf}, 0x4ac}, {{&(0x7f0000005380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005400)=""/136, 0x88}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/199, 0xc7}, {&(0x7f00000065c0)=""/127, 0x7f}, {&(0x7f0000006640)=""/174, 0xae}, {&(0x7f0000006700)=""/105, 0x69}, {&(0x7f0000006780)=""/138, 0x8a}, {&(0x7f0000006840)=""/223, 0xdf}, {&(0x7f0000006940)}], 0x9, &(0x7f0000006a40)=""/11, 0xb}, 0x6}], 0x3, 0x20, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000006b40), 0x2, 0x0) read$nci(r13, &(0x7f0000006b80)=""/128, 0x80) (async) read$nci(r13, &(0x7f0000006b80)=""/128, 0x80) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006c40), r11) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000006e00)={&(0x7f0000006c00), 0xc, &(0x7f0000006dc0)={&(0x7f0000006c80)={0x110, r14, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x28}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe77}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff5c7c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x110}}, 0x20000840) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000006f00)={&(0x7f0000006e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004040) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000006f80)=0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000007140)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007100)={&(0x7f0000006fc0)={0x138, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x80000001}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_DATA={0xf2, 0x1f, "1276cd1ebf88932cd88befe604d62be229b0e3ce5b0cc50b001fd0ff059a436ba77a8fe44319bca0f45fda75923b4383d25b87e49a91ab2310b94f1bfdbd83823bbd0caff822587bf0c2a7afd49a83464d8d1c5362d8826c9d0c6716f3aeb86c611829d1a07bd2132eb2d3424bdd365b96632ee19811cc60c5c093a79308a0dcbf57064137862ad12573e2a4130322814300a738e2666c99b6014d8c407d68a2df2d8514b030d9aca22aa25a3f11ec87d0f70bab95f3631e0bed73d65074ad454327eb7c20dfe8afde782ef58fcec7481f3c6809e533e6f4f04675d6c81d8dca8c9dbcbd49e81f539e55e43f7004"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x138}}, 0x4000) (async) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000007140)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007100)={&(0x7f0000006fc0)={0x138, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x80000001}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_VENDOR_DATA={0xf2, 0x1f, "1276cd1ebf88932cd88befe604d62be229b0e3ce5b0cc50b001fd0ff059a436ba77a8fe44319bca0f45fda75923b4383d25b87e49a91ab2310b94f1bfdbd83823bbd0caff822587bf0c2a7afd49a83464d8d1c5362d8826c9d0c6716f3aeb86c611829d1a07bd2132eb2d3424bdd365b96632ee19811cc60c5c093a79308a0dcbf57064137862ad12573e2a4130322814300a738e2666c99b6014d8c407d68a2df2d8514b030d9aca22aa25a3f11ec87d0f70bab95f3631e0bed73d65074ad454327eb7c20dfe8afde782ef58fcec7481f3c6809e533e6f4f04675d6c81d8dca8c9dbcbd49e81f539e55e43f7004"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x138}}, 0x4000) accept4$vsock_stream(r11, &(0x7f0000007180), 0x10, 0x81000) (async) accept4$vsock_stream(r11, &(0x7f0000007180), 0x10, 0x81000) sendmsg$nl_route(r12, &(0x7f00000072c0)={&(0x7f00000071c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007280)={&(0x7f0000007200)=@ipv4_delrule={0x58, 0x21, 0x400, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x80, 0x9, 0x10, 0x0, 0x0, 0x8, 0x10009}, [@FRA_DST={0x8, 0x1, @private=0xa010101}, @FRA_FLOW={0x8, 0xb, 0x5}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x2}, @FRA_FLOW={0x8, 0xb, 0x81}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r16 = accept4$rose(r11, &(0x7f0000007300)=@short={0xb, @remote, @null, 0x1, @bcast}, &(0x7f0000007340)=0x1c, 0x80000) ioctl$SIOCRSGCAUSE(r16, 0x89e0, &(0x7f0000007380)) (async) ioctl$SIOCRSGCAUSE(r16, 0x89e0, &(0x7f0000007380)) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000007740)={&(0x7f0000007480)={0x10, 0x0, 0x0, 0x85000000}, 0xc, &(0x7f0000007700)={&(0x7f0000007500)={0x1c8, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x6efc}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x90000}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3ec1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0xd5d}, {0x8, 0x13, 0x7fff}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff8e5a}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xa9b}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5fc}, {0x8, 0x13, 0x7b2}, {0x5, 0x14, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000880}, 0x800) 9.221239565s ago: executing program 3 (id=5935): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00060211000000120012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="812a000000000000000009000000050013000000000028ca276b21f8ce7636c22065ec4803ae82efdc7844c251a8d6b28f1b76ff8653a45a706661e9f1ab8c3e46c0530d08bc94f0355bee4a4e42d2627bb0a43ffc3fb2e0cbb428ba40208b42eb0c20aba86a"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x4, 0x500, 0x6, 0x180107}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910920000000000630ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) 9.164790954s ago: executing program 3 (id=5938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61f0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x47c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x6, 0x81, 0xfffc, 0x9}, {0x1b, 0x0, 0x3, 0x2, 0x7, 0x9}, 0x1, 0x8, 0x21b7}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PBURST={0x8, 0x7, 0xa64}, @TCA_TBF_PBURST={0x8, 0x7, 0x1253}, @TCA_TBF_RTAB={0x404, 0x2, [0x200, 0x6, 0x5, 0x8, 0x5, 0x6fae, 0x3, 0x5, 0x7, 0x8448, 0x8000, 0xff, 0x2, 0x8, 0xe5d3, 0x1, 0x401, 0x2, 0x69f5b359, 0x8, 0xffffffff, 0x5, 0x4, 0x7a, 0xd, 0x8, 0x5, 0x5a0, 0x4, 0x3, 0x8, 0xfff, 0x3, 0xfffffc00, 0x9, 0x2, 0x7112013b, 0x3, 0x5, 0x26e, 0x6, 0x1, 0x0, 0x2, 0x29f, 0x5, 0x7f, 0x80, 0x6, 0x3, 0x80, 0x1, 0x10000, 0x8, 0x283ca300, 0x5, 0x4, 0x400000, 0x200, 0x9, 0x100, 0x80000001, 0x5, 0x2, 0xffffffff, 0x2, 0x7, 0x0, 0x2, 0x8, 0x7, 0x3, 0x5, 0x6, 0x6, 0x7, 0x2, 0x0, 0x5, 0xe, 0xfffffff7, 0x2, 0x8, 0x2, 0x2, 0xa, 0x9, 0x3, 0x5b, 0x63eb, 0x5, 0xffffffff, 0x726d, 0x8, 0x3, 0x9, 0x50000, 0xfc3, 0x800, 0x4, 0x9, 0x8, 0x2, 0xfff, 0x9, 0x3, 0x10000, 0x7, 0x401, 0x739, 0x4, 0x5, 0x2, 0x8, 0x3, 0x7, 0x1ff, 0xff, 0xaf0d, 0x3, 0x44b, 0x4, 0x7, 0xb1, 0x6, 0x2, 0x3, 0x8, 0x8a, 0x5, 0x7, 0x6, 0x9, 0xea, 0xfffffff7, 0x0, 0x1, 0x5, 0x8001, 0x200, 0xdb7, 0xd, 0x1, 0xffffff32, 0x0, 0xd, 0x6, 0xc0d9, 0x6, 0xe01, 0x59f0, 0x7ff, 0x9, 0x88, 0xd0f0, 0x3, 0x5, 0x2fb, 0x2, 0x2b22, 0x80000001, 0x83d7, 0x8, 0xa, 0x0, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x4b, 0xe, 0x4, 0xfffffffa, 0x7, 0x800, 0xcc1, 0xf, 0x2, 0x200, 0xe8, 0x8, 0xd695, 0x4, 0x6, 0x6, 0x8, 0x1, 0xa996, 0x3, 0xfffff134, 0x6, 0x3, 0x8, 0xe74, 0x3, 0x8, 0x8001, 0x9, 0xda86, 0x80000000, 0x51ba, 0xed, 0x1, 0x8, 0x7, 0xfffffff9, 0x0, 0x1000, 0x7, 0xd2, 0xffffffff, 0x5, 0x3, 0x5, 0x2, 0xa36, 0x5, 0x8, 0x23, 0x2, 0x6, 0xb3, 0xe9f5, 0x2, 0x800, 0x99b, 0x6, 0x1, 0x20c5, 0x9, 0x1, 0x9, 0xffff9d10, 0x6, 0x39c, 0xfffffffa, 0xffff, 0x4, 0x3093800, 0x1, 0x6, 0xff, 0x8000, 0x9, 0x2, 0x60, 0x7fffffff, 0x75d4a5fa, 0x4, 0xe8, 0x740b, 0xfe8, 0x5, 0x8, 0x9]}, @TCA_TBF_PBURST={0x8, 0x7, 0xdfd}]}}]}, 0x47c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.334688671s ago: executing program 1 (id=5983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket(0x1f, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 3.929504s ago: executing program 1 (id=5986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x8, 0x0, 0x2, @vifc_lcl_ifindex, @multicast1}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x7}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0xf14}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) 3.705035136s ago: executing program 1 (id=5989): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000bdda63ff17841dda303c9ba2e14c210076008d0b000000080000000003c00e0000000000130001100100000008000a0000000000080005a7878046267d6b24d08e763abf274e9f7b8007c7908ffd8e38b2474d03"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) 3.517643913s ago: executing program 1 (id=5991): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x0, 0xfcb, {{0x1e, 0x4, 0x3, 0x2e, 0x78, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x7, 0x6, "6ea9fa65"}, @noop, @timestamp_prespec={0x44, 0x24, 0x7e, 0x3, 0x5, [{@multicast2, 0x1000}, {@loopback, 0x2f0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbaca}]}, @cipso={0x86, 0xb, 0xfffffffffffffffd, [{0x2, 0x5, "6d833d"}]}, @timestamp_prespec={0x44, 0x2c, 0xdf, 0x3, 0x7, [{@rand_addr=0x64010102, 0xf}, {@remote, 0x716800}, {@empty, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x7b21}]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}]}]}, 0x28}}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x2000000000000108, &(0x7f0000000740)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x20000004}, @exit, @func], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x1b) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x7b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x34, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x34, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 3.19585755s ago: executing program 1 (id=5992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x422c, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x4055, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket(0x2c, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.801418659s ago: executing program 1 (id=5998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x80}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in6=@private0, 0x4e21, 0x7ff, 0x4e22, 0x3, 0xa, 0xe0, 0xc0, 0x89, 0x0, r3}, {0x800, 0x4, 0x2, 0x7fff, 0x9, 0x6, 0x0, 0x9}, {0x7, 0x5, 0x7ff, 0x5}, 0x0, 0x6e6bbe, 0x2, 0x0, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x3503, 0x2, 0x2, 0x6, 0x1, 0x1, 0x83}}, 0xe8) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000600)="b1c0c9797c845af367b84fa6737ea24f5b5ae0333250142376620be99da9ca1fe4439d9f17a5e017170203645d3abc475ed10cdf82112aea28de02eaad9007a92a92f55b6fc8344d8f73433b284168539c66776f24e241d3c384554fc5a2585c14880869d06c7b9f8597ece161c1b8d71480074e70e4ac320476e804f187ef50d5352f5c188e53f673e8a856993ddc06ad5a1cc611bf4b0856b388435795b093f3d05f41b3b1fdf45d8ed804ad71c4de8cd3b7fcb9a49d", 0xb7}], 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x117, 0x8}], 0x10}}], 0x1, 0x8001) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a000000000000000000000000000020000000000a010800000000000000000a00008f1400010073797a310000000048000000030a010100000000000000000a000000080007006e61740014000480080002400000000008000140000000010900010073797a31000000000900030073797a3200000000140000001100010000000000000000000000000a559df443ada90023f89d238acda9"], 0xa4}}, 0x0) 2.30241156s ago: executing program 5 (id=6003): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.10644084s ago: executing program 5 (id=6006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) sendmsg$nl_route_sched(r2, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0x2}, {0x9, 0xf}, {0x1, 0xfff3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x404c001}, 0x4000000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000b80)={0x40, 0x1, 0x44f2ade573ff9a8a}, 0x10) recvmmsg(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)}, {&(0x7f0000000240)=""/212, 0xd4}], 0x2, &(0x7f0000000400)=""/149, 0x95}, 0x2}, {{&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f0000000540)=""/83, 0x53}], 0x2, &(0x7f00000005c0)=""/199, 0xc7}, 0xbde9}, {{&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/135, 0x87}, {&(0x7f0000000800)=""/91, 0x5b}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000880)=""/55, 0x37}, {&(0x7f00000008c0)=""/20, 0x14}, {&(0x7f0000000900)=""/204, 0xcc}], 0x6, &(0x7f0000000a80)=""/47, 0x2f}, 0x9}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/134, 0x86}], 0x2, &(0x7f0000000c40)=""/69, 0x45}, 0xea}], 0x4, 0x22, &(0x7f0000000dc0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) 1.554295778s ago: executing program 2 (id=6012): r0 = socket(0x22, 0x2, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0xffff, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0xfffffffffffffe5c, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7800, 0x700, 0x2, 0x0, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x66, 0x0, 0x54, 0x3d, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xe7, 0x3, 0x1, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x80000001}, {@multicast2, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@broadcast, 0xa4}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0xfffffffffffffcb3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x7, 0x40000, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x67, 0x0, 0x9, 0x29, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4}]}}}}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r11) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="05a300000000ffffffff0d00000008000300", @ANYRES32=r13], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000980)={'gre0\x00', 0x0, 0x7, 0x80, 0x1ff, 0xee, {{0xc, 0x4, 0x3, 0x2, 0x30, 0x66, 0x0, 0xff, 0x29, 0x0, @broadcast, @local, {[@lsrr={0x83, 0x1b, 0x39, [@local, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101, @local]}]}}}}}) getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x188, r5, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x20040054) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) close(r1) 1.351263972s ago: executing program 2 (id=6014): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000001c0)="7f3909b1776e3a87aa1d4400f259bc944a38f623f4cbc5cb967df4bdd3811d3b00680c6534078882504934c757cc8698b605f040e8b004568135157863fbd7f741c33dd14e71ba4066a82fe7bff7f99ac071021f4d326ed5eeccd9a55b21b59c213735e0e4322cd6c00406c6facb67876bf4326c0e4cac185987a848d5680ab83329e2304fdbed70b3b4a61bb0593b6deae8e13d764da22ff5a994e54afcd2e13da6df1adff8658f2aad538aa0e046171d5a3a7fbce65b358fec3e91d5dfa12580c72af50c179688ce56754cdf7634c76ac9", 0xd2, 0x4000840, &(0x7f0000000340)={0x11, 0x10, 0x0, 0x1, 0xf9, 0x6, @random="51bd3bb6987a"}, 0x14) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x0, 0x80000001, @vifc_lcl_ifindex, @multicast2}, 0x10) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x0, 0x80000001, @vifc_lcl_ifindex, @multicast2}, 0x10) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xffffffffffffff04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xffffffffffffff04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendto$inet6(r4, &(0x7f0000000440)="df6d5f", 0x3, 0x10, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in6=@private2}}, {{@in=@multicast1}}}, &(0x7f0000000480)=0xe8) 1.137693211s ago: executing program 2 (id=6016): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0xfff2, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}]}}]}, 0x74}}, 0x4841) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.014686336s ago: executing program 5 (id=6017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002c00128008000100687372002000028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 936.321429ms ago: executing program 0 (id=6018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1bb66137458ed569ce44b732880000b8ef090131d300e09e000000000000000111a515b975adea10086107045d7f59b7da2ebbab6e31c5b3693d6d14141a3bff3f5cf375cc6fd2400c88548c1eec53c620f9b8527e4cd3f28fbcda2523d9e1670384ff1bb8b695b5499ab8911465aec5b28b4b9cf1b239a0d4bf17b1cd2c5798b1562e93866cb7b710ea57416c2d483f5bf947", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket(0xa, 0x2400000001, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14}], 0x1}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) (async) getsockopt$inet6_buf(r1, 0x29, 0x9306572e28e5720c, &(0x7f0000000780)=""/129, &(0x7f0000002280)=0x81) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) (async) r8 = gettid() (async) r9 = socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) unshare(0x28000600) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r7, @ANYBLOB="049c01000750050008001300", @ANYRES32=r8, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 918.660813ms ago: executing program 2 (id=6019): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRESDEC=r2, @ANYBLOB="080003001900080008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) 678.574391ms ago: executing program 2 (id=6020): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="2c0000000000000000000000070000f9061be364010101ffffffffe00000027f0000017f000001e00000020000000000"], 0x30}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@remote, @loopback}, 0xc) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000980)=ANY=[@ANYRES8=r6, @ANYBLOB="4b082433b7c9d44d611f5ed7ab2b62a32b55a5103c44a8b5e35a58671e74b7a2281835", @ANYRES8=r3, @ANYRESOCT=r4, @ANYBLOB="92164fa3561619d7357c97e9a90362b304197cb28adf92d0396aa26e9d25b67ccbb5136a6e6ba831480021c8ac3425a21ea5c31f2c84468e75f2c25b3ac767516f16868a8c4551b41e0897f1fb14e84c6300316d2615723b0fbd225a59aa0b6886adcacdaa", @ANYRES32=r7], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000094010500ac1414bb000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000035000001000000000000000000000000000000fc000000000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) 655.664895ms ago: executing program 5 (id=6021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 640.135471ms ago: executing program 0 (id=6022): syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x40, 0x10001}}}}}, 0x0) 496.470666ms ago: executing program 0 (id=6023): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000240)=0xfffffffc, 0x4) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff02000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000000000000000000201703b744dc5c600"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r5, &(0x7f00000003c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) getsockopt$netlink(r4, 0x10e, 0xb, &(0x7f0000000240)=""/110, &(0x7f00000000c0)=0x6e) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000940)={r7, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000040)=0xaa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000300)=0x90) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f00000008c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xf4c, @remote}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="54e4f49b4d15c807d7d9bac82a1e72d8f1adfb50aa5851618cbbf0426907ca8c318dc70de03c2cc99c3c08fd0f8e773ea56d71c96501ad3cdba66721ac65a242d2da7ab0863e0e7a45d99a7e7b2f87b14e4245f1a5dca9ff83461f3a2cbcf3543301aae824f7bd5455948c19550bf21be712e92ee8dc72575effc9168b957b32abd8fe01f06423d3495f12b1abad12ab08347b", 0x93}, {&(0x7f0000000740)="9ebbc9b889840e2da1969ec0dcc21b00d5bd7578f05469f398f6f581f59e66f93ebc00c3071eb043c51c857439d854513c2f661967be6aef45efb3636c32bd5d128e995c9d729b0a85aa23bc5129f8c94dda08da6127144177f1615b0d1a24ce97c44e17d7bf422bdb034316c578c24f5f5d24c52013b6a78001ea614de29ba7cd418d1de31e774e489b6f65640941f1682e5a0bccedf15c0bdef8f8f7e26bb12e8c31e9e524089388637512458d5d50317d9a3a62a3823f65e2d6ae6c1e3a70bb5a1352b5d15d7b6e91c017caabef55ff4a1200882b390154136d5849da0689ba845fc949029c865b74880656f1cc267225", 0xf2}], 0x2}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000004c0)="feb2ec00593b8ddf872e7731406acdf697a11e84df487a90bdeac1480407d25fd1b47847fcb8ad1a06ee015dad92f0cbde8f144ee81fb0eb30be0273991065336bcabad0984b257469ac236b93e73a5f422c27afc79ffaf4bbd9039ed7d245c3e7f8b50f72c6318c10d187604c019a48ce86662f43dedcbae07821d1c0dc73d99ec7fe8256ea9c", 0x87}, {&(0x7f0000000300)="2be8580becb9b263d2bb910a02a3c496739d1e8e29eb9c1130334f39b9aa62a75531dbc0fcf7aef0a035a99ae9fcd2bac7ca", 0x32}, {&(0x7f0000000840)="03789233cd1adff0d054603ebb68740441b68c060243f133048d85a034652916325357c067c7589014c401e2facfbcf379634e", 0x33}], 0x3}}], 0x2, 0x48010) setsockopt$inet6_udp_int(r9, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r9, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES64=r8, @ANYRES32=r8, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) 353.266851ms ago: executing program 0 (id=6024): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf1}]}, 0x40}}, 0x8c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x154, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x50, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x50}, 0x1, 0x620b}, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x0, 0x20000000) 310.57679ms ago: executing program 5 (id=6025): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002400128009000100766c616e00000000140002800600050088a80000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="153b1f1bcf1cbb1b0eb969ede1e012b6c45c09c88ecc74fbb18aae9e37dda06848b65b72a2ebbf5252ad67c94915da0f2c9bdc292b01c613f4f7fc8b6201cc06e75838a2301c1f031623d88657b04cd0b5440b3c69d38a55448f4b590cc4ed116a2cb42a1c5b1657a648ce62ffcc2226d1d9bfe557e35901e7c7c4949622d59e5262c14b6022d26ed369ed2f00"/152], 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022, r2}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3, 0x0, 0x2, 0x2000}, [@RTA_OIF={0x8, 0x4, r11}]}, 0x24}}, 0x0) 210.244567ms ago: executing program 0 (id=6026): ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={'ip6gretap0\x00', 0xffffffffffffffff, 0x9}) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) bind(r0, &(0x7f0000000140)=@nfc_llcp={0x27, r1, 0x0, 0x5, 0x6, 0x7, "26509dcc22dd9d113fb6d3a6d72140a4afbc56cfcf1f5fb1d143e84daba975b7d94c5433d01d673f8e7286f3f6665294e5a57229cab51af90a7ad1f34fb67a", 0x3a}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20088004) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r2) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xae}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r6 = accept4(r0, &(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000740)=0x80, 0x1800) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0xc, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008055}, 0x200008c0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x7f, 0x7, 0x6, 0xa4, 0x5, 0x6}, &(0x7f0000000980)=0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000009c0)=@sack_info={r7, 0xffffffff, 0x2}, &(0x7f0000000a00)=0xc) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x951}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x200080c0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r9, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x40008000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10000c00) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r8, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x24040) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000fc0)={0x0, @hci={0x1f, 0x0, 0x1}, @can={0x1d, r11}, @isdn={0x22, 0x6, 0x80, 0x0, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f80)='hsr0\x00', 0x8438, 0x5, 0x40}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r8, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000001140)=0x2, 0x4) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0xc, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffa0b8, 0xa}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x36}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000890}, 0x40890) 128.785086ms ago: executing program 0 (id=6027): bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x100800) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"e9c0002dfd5ba2151451b8c14e96ca1f", r2, r3, {0x3, 0x8}, {0x4}, 0x4, [0x10000000000, 0xfffffffffffffff7, 0xc8, 0x7, 0x6, 0x7, 0xfffffffffffffbfd, 0x8, 0x4, 0x7, 0x8001, 0x7, 0x7, 0xff, 0xffffffffffffc25c, 0x1]}) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) bpf$BPF_LINK_UPDATE(0x21, &(0x7f0000000080), 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x100800) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"e9c0002dfd5ba2151451b8c14e96ca1f", r2, r3, {0x3, 0x8}, {0x4}, 0x4, [0x10000000000, 0xfffffffffffffff7, 0xc8, 0x7, 0x6, 0x7, 0xfffffffffffffbfd, 0x8, 0x4, 0x7, 0x8001, 0x7, 0x7, 0xff, 0xffffffffffffc25c, 0x1]}) (async) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) (async) 156.42µs ago: executing program 2 (id=6028): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f00000019c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e22, 0xd3e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}], 0x18}}], 0x2, 0x2604002c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x2, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x2b, 0x9d, 0x29}, 0x2c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, r3, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4008000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4b3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x10}}}}, [""]}, 0x28}}, 0x16045801) 0s ago: executing program 5 (id=6029): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x6f, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) kernel console output (not intermixed with test programs): d length. [ 426.831823][T18750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.937394][T18750] bond4: (slave gretap2): making interface the new active one [ 426.950467][T18767] netlink: 'syz.3.3858': attribute type 1 has an invalid length. [ 426.974187][T18750] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 427.015236][T18771] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 427.248676][T18780] netlink: 'syz.1.3865': attribute type 4 has an invalid length. [ 427.317724][T18782] netlink: 'syz.1.3865': attribute type 4 has an invalid length. [ 427.383936][T18783] team_slave_0: left allmulticast mode [ 427.430405][ T30] audit: type=1107 audit(1754032009.733:6): pid=18784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ñ·ïÉ Ò÷ÖëÙcaQ›Ynõ”=§ªÙôèÑ®¤?Tyé|7±ý"ÿ1’XžäF¯Œãô|÷Y4¨-„4ÏiÔÔ/[Näðÿ•t¸‹ÖƒŽØŽ´ê|Eä5ÍiÜ(þ'„K¨ÿx^Ô„äüxÐÁ¹Æ' [ 427.617059][T18798] __nla_validate_parse: 24 callbacks suppressed [ 427.617079][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 427.621076][T18796] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3870'. [ 427.665712][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3871'. [ 427.688612][T18798] vlan2: entered allmulticast mode [ 427.701187][T18798] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 427.717916][T18800] tipc: MTU too low for tipc bearer [ 427.870883][T18809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3876'. [ 428.003482][T18822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3876'. [ 428.034018][T18822] netlink: 'syz.3.3876': attribute type 7 has an invalid length. [ 428.121380][T18822] netlink: 'syz.3.3876': attribute type 8 has an invalid length. [ 428.160569][T18822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3876'. [ 428.362121][T18814] syzkaller1: entered promiscuous mode [ 428.367755][T18814] syzkaller1: entered allmulticast mode [ 428.498200][T18835] bridge2: entered promiscuous mode [ 428.505690][T18835] bridge2: entered allmulticast mode [ 428.518144][T18839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3885'. [ 428.550901][T18840] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 428.725676][T18845] netlink: 'syz.3.3887': attribute type 21 has an invalid length. [ 428.754747][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3888'. [ 428.766227][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 429.000644][ T1037] wlan0: Trigger new scan to find an IBSS to join [ 429.268246][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3889'. [ 429.283794][ T1037] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.318971][ T1037] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.413058][ T1037] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.461000][ T1037] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.860704][T18882] netlink: 'syz.1.3896': attribute type 29 has an invalid length. [ 429.894632][T18885] netlink: 'syz.1.3896': attribute type 29 has an invalid length. [ 430.262884][T18901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.323574][ T5839] Bluetooth: hci0: link tx timeout [ 430.329221][ T5839] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.287801][T18936] batadv0: Device is already in use. [ 431.512206][T18948] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 431.541146][T18948] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 431.758393][T18963] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.936114][T18971] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 431.963038][T18971] netlink: 'syz.0.3926': attribute type 29 has an invalid length. [ 431.973318][T12631] wlan0: Trigger new scan to find an IBSS to join [ 432.230942][T18981] tipc: Started in network mode [ 432.235870][T18981] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 432.258945][T18981] tipc: Enabled bearer , priority 10 [ 432.278993][T18986] netlink: 'syz.4.3931': attribute type 1 has an invalid length. [ 432.351004][T18991] netlink: 'syz.3.3932': attribute type 4 has an invalid length. [ 432.360414][ T5158] Bluetooth: hci0: command 0x0405 tx timeout [ 432.498776][T18994] veth3: entered allmulticast mode [ 432.612063][T19004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.803854][T19021] netlink: 'syz.1.3940': attribute type 1 has an invalid length. [ 432.877531][T19028] __nla_validate_parse: 12 callbacks suppressed [ 432.877554][T19028] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3941'. [ 432.894676][T12631] wlan0: Creating new IBSS network, BSSID a6:8d:46:68:0d:0e [ 433.196759][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3944'. [ 433.349786][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 433.370348][T15232] tipc: Node number set to 10136234 [ 433.592098][T19058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3950'. [ 433.754005][T19066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3955'. [ 433.860715][T19074] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3957'. [ 434.324797][T19093] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 434.334748][T19093] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 434.521557][T19104] validate_nla: 1 callbacks suppressed [ 434.521578][T19104] netlink: 'syz.1.3968': attribute type 8 has an invalid length. [ 434.717336][T19110] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 434.921410][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'. [ 434.974471][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'. [ 435.236629][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 435.507220][T19151] team0: mtu less than device minimum [ 435.807989][T19168] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3988'. [ 436.032064][T19177] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 436.314613][T19201] netlink: 'syz.4.3998': attribute type 21 has an invalid length. [ 436.326718][T19202] netlink: 'syz.0.3999': attribute type 1 has an invalid length. [ 436.478037][T19209] netlink: 'syz.0.4002': attribute type 9 has an invalid length. [ 436.905366][T19228] netlink: 'syz.0.4006': attribute type 2 has an invalid length. [ 436.952644][T19235] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 436.958579][T19228] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 437.936158][T19277] bridge6: entered allmulticast mode [ 438.024529][T19289] __nla_validate_parse: 5 callbacks suppressed [ 438.024550][T19289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4025'. [ 438.054812][T19290] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4024'. [ 438.082732][T19289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4025'. [ 438.483582][T19313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.775935][T19331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.131704][T19348] tipc: Enabling of bearer rejected, failed to enable media [ 439.181088][T19354] FAULT_INJECTION: forcing a failure. [ 439.181088][T19354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.216589][T19354] CPU: 1 UID: 0 PID: 19354 Comm: syz.0.4045 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 439.216621][T19354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.216633][T19354] Call Trace: [ 439.216642][T19354] [ 439.216650][T19354] dump_stack_lvl+0x189/0x250 [ 439.216676][T19354] ? __pfx____ratelimit+0x10/0x10 [ 439.216704][T19354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.216725][T19354] ? __pfx__printk+0x10/0x10 [ 439.216751][T19354] ? __might_fault+0xb0/0x130 [ 439.216793][T19354] should_fail_ex+0x414/0x560 [ 439.216830][T19354] _copy_from_user+0x2d/0xb0 [ 439.216858][T19354] wext_handle_ioctl+0xba/0x1c0 [ 439.216893][T19354] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 439.216921][T19354] ? __lock_acquire+0xab9/0xd20 [ 439.216967][T19354] sock_ioctl+0x15f/0x790 [ 439.216995][T19354] ? __pfx_sock_ioctl+0x10/0x10 [ 439.217020][T19354] ? __fget_files+0x2a/0x420 [ 439.217037][T19354] ? __fget_files+0x3a0/0x420 [ 439.217055][T19354] ? __fget_files+0x2a/0x420 [ 439.217079][T19354] ? bpf_lsm_file_ioctl+0x9/0x20 [ 439.217105][T19354] ? __pfx_sock_ioctl+0x10/0x10 [ 439.217128][T19354] __se_sys_ioctl+0xf9/0x170 [ 439.217166][T19354] do_syscall_64+0xfa/0x3b0 [ 439.217194][T19354] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.217219][T19354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.217239][T19354] ? clear_bhb_loop+0x60/0xb0 [ 439.217263][T19354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.217283][T19354] RIP: 0033:0x7f33c978eb69 [ 439.217301][T19354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.217319][T19354] RSP: 002b:00007f33ca6c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.217342][T19354] RAX: ffffffffffffffda RBX: 00007f33c99b5fa0 RCX: 00007f33c978eb69 [ 439.217357][T19354] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 439.217370][T19354] RBP: 00007f33ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.217383][T19354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.217395][T19354] R13: 0000000000000000 R14: 00007f33c99b5fa0 R15: 00007fff0e95a818 [ 439.217428][T19354] [ 439.250272][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'. [ 439.659246][T19369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.819104][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4053'. [ 440.124565][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.135630][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.142067][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.506983][T19376] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 441.669046][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4056'. [ 441.742568][T19394] FAULT_INJECTION: forcing a failure. [ 441.742568][T19394] name failslab, interval 1, probability 0, space 0, times 0 [ 441.779249][T19394] CPU: 1 UID: 0 PID: 19394 Comm: syz.0.4058 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 441.779280][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.779292][T19394] Call Trace: [ 441.779301][T19394] [ 441.779309][T19394] dump_stack_lvl+0x189/0x250 [ 441.779336][T19394] ? __pfx____ratelimit+0x10/0x10 [ 441.779364][T19394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.779384][T19394] ? __pfx__printk+0x10/0x10 [ 441.779417][T19394] ? __pfx___might_resched+0x10/0x10 [ 441.779444][T19394] ? fs_reclaim_acquire+0x7d/0x100 [ 441.779471][T19394] should_fail_ex+0x414/0x560 [ 441.779507][T19394] should_failslab+0xa8/0x100 [ 441.779528][T19394] __kmalloc_noprof+0xcb/0x4f0 [ 441.779554][T19394] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 441.779572][T19394] ? rcu_is_watching+0x15/0xb0 [ 441.779607][T19394] ioctl_standard_iw_point+0x4d5/0xd40 [ 441.779644][T19394] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 441.779670][T19394] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 441.779690][T19394] ? __pfx___mutex_lock+0x10/0x10 [ 441.779727][T19394] ? full_name_hash+0x92/0xe0 [ 441.779749][T19394] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 441.779774][T19394] ioctl_standard_call+0xaf/0x1b0 [ 441.779814][T19394] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 441.779837][T19394] wext_ioctl_dispatch+0xeb/0x410 [ 441.779864][T19394] ? __pfx_ioctl_standard_call+0x10/0x10 [ 441.779896][T19394] wext_handle_ioctl+0x100/0x1c0 [ 441.779928][T19394] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 441.779953][T19394] ? __lock_acquire+0xab9/0xd20 [ 441.780002][T19394] sock_ioctl+0x15f/0x790 [ 441.780031][T19394] ? __pfx_sock_ioctl+0x10/0x10 [ 441.780056][T19394] ? __fget_files+0x2a/0x420 [ 441.780073][T19394] ? __fget_files+0x3a0/0x420 [ 441.780090][T19394] ? __fget_files+0x2a/0x420 [ 441.780113][T19394] ? bpf_lsm_file_ioctl+0x9/0x20 [ 441.780147][T19394] ? __pfx_sock_ioctl+0x10/0x10 [ 441.780171][T19394] __se_sys_ioctl+0xf9/0x170 [ 441.780201][T19394] do_syscall_64+0xfa/0x3b0 [ 441.780227][T19394] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.780253][T19394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.780272][T19394] ? clear_bhb_loop+0x60/0xb0 [ 441.780297][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.780316][T19394] RIP: 0033:0x7f33c978eb69 [ 441.780334][T19394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.780352][T19394] RSP: 002b:00007f33ca6c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.780374][T19394] RAX: ffffffffffffffda RBX: 00007f33c99b5fa0 RCX: 00007f33c978eb69 [ 441.780389][T19394] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 441.780401][T19394] RBP: 00007f33ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.780414][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.780426][T19394] R13: 0000000000000000 R14: 00007f33c99b5fa0 R15: 00007fff0e95a818 [ 441.780461][T19394] [ 442.374416][T19414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4065'. [ 442.391198][T19414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4065'. [ 442.493535][T19417] tipc: Enabled bearer , priority 0 [ 442.509707][T19417] syzkaller0: entered promiscuous mode [ 442.516022][T19417] syzkaller0: entered allmulticast mode [ 442.615411][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4068'. [ 442.646236][T19428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 442.709440][T19417] tipc: Resetting bearer [ 442.758768][T19415] tipc: Resetting bearer [ 442.815944][T19415] tipc: Disabling bearer [ 443.113234][T19444] FAULT_INJECTION: forcing a failure. [ 443.113234][T19444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.128701][T19444] CPU: 0 UID: 0 PID: 19444 Comm: syz.0.4072 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 443.128733][T19444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.128746][T19444] Call Trace: [ 443.128754][T19444] [ 443.128763][T19444] dump_stack_lvl+0x189/0x250 [ 443.128790][T19444] ? __pfx____ratelimit+0x10/0x10 [ 443.128818][T19444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.128839][T19444] ? __pfx__printk+0x10/0x10 [ 443.128879][T19444] should_fail_ex+0x414/0x560 [ 443.128916][T19444] _copy_to_user+0x31/0xb0 [ 443.128947][T19444] simple_read_from_buffer+0xe1/0x170 [ 443.128983][T19444] proc_fail_nth_read+0x1b3/0x220 [ 443.129011][T19444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.129039][T19444] ? rw_verify_area+0x258/0x650 [ 443.129065][T19444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 443.129091][T19444] vfs_read+0x1fd/0x980 [ 443.129129][T19444] ? fdget_pos+0x247/0x320 [ 443.129154][T19444] ? __pfx___mutex_lock+0x10/0x10 [ 443.129182][T19444] ? __pfx_vfs_read+0x10/0x10 [ 443.129210][T19444] ? __fget_files+0x2a/0x420 [ 443.129235][T19444] ? __fget_files+0x3a0/0x420 [ 443.129253][T19444] ? __fget_files+0x2a/0x420 [ 443.129283][T19444] ksys_read+0x145/0x250 [ 443.129313][T19444] ? __pfx_ksys_read+0x10/0x10 [ 443.129336][T19444] ? rcu_is_watching+0x15/0xb0 [ 443.129373][T19444] ? do_syscall_64+0xbe/0x3b0 [ 443.129405][T19444] do_syscall_64+0xfa/0x3b0 [ 443.129431][T19444] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.129458][T19444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.129477][T19444] ? clear_bhb_loop+0x60/0xb0 [ 443.129502][T19444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.129521][T19444] RIP: 0033:0x7f33c978d57c [ 443.129539][T19444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 443.129556][T19444] RSP: 002b:00007f33ca6c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.129577][T19444] RAX: ffffffffffffffda RBX: 00007f33c99b5fa0 RCX: 00007f33c978d57c [ 443.129592][T19444] RDX: 000000000000000f RSI: 00007f33ca6c60a0 RDI: 0000000000000005 [ 443.129604][T19444] RBP: 00007f33ca6c6090 R08: 0000000000000000 R09: 0000000000000000 [ 443.129616][T19444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.129626][T19444] R13: 0000000000000000 R14: 00007f33c99b5fa0 R15: 00007fff0e95a818 [ 443.129653][T19444] [ 443.417767][T19453] lo speed is unknown, defaulting to 1000 [ 443.569048][T19467] netlink: 'syz.2.4077': attribute type 8 has an invalid length. [ 443.612231][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4078'. [ 443.651146][T19474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.876769][T19453] hsr0 speed is unknown, defaulting to 1000 [ 443.889598][T19453] vxcan1 speed is unknown, defaulting to 1000 [ 444.235063][T19489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4081'. [ 444.620390][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4083'. [ 444.646392][T19496] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4083'. [ 444.660623][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 444.766817][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4083'. [ 444.787414][T19501] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4083'. [ 444.833166][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4083'. [ 444.982490][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4088'. [ 445.187032][T19518] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 445.221248][T19518] netlink: 'syz.1.4091': attribute type 29 has an invalid length. [ 445.565283][T19539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4098'. [ 445.702453][T19544] netlink: 'syz.0.4100': attribute type 7 has an invalid length. [ 445.807908][T19548] sctp: [Deprecated]: syz.1.4101 (pid 19548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.807908][T19548] Use struct sctp_sack_info instead [ 445.857135][T19550] netlink: 'syz.2.4103': attribute type 1 has an invalid length. [ 446.256669][T19566] sctp: [Deprecated]: syz.3.4107 (pid 19566) Use of int in maxseg socket option. [ 446.256669][T19566] Use struct sctp_assoc_value instead [ 446.521608][T19582] nbd: nbd0 already in use [ 446.538887][T19582] netlink: 'syz.0.4113': attribute type 2 has an invalid length. [ 446.627065][T19590] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 446.766844][T19596] TCP: TCP_TX_DELAY enabled [ 446.791633][T19600] netlink: 'syz.4.4119': attribute type 1 has an invalid length. [ 446.797774][T19596] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 446.800864][T19600] netlink: 'syz.4.4119': attribute type 2 has an invalid length. [ 446.825040][T19597] pimreg: entered allmulticast mode [ 446.851778][T19596] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 446.860923][T19600] netlink: 'syz.4.4119': attribute type 10 has an invalid length. [ 446.880828][T19600] bridge0: port 3(team0) entered blocking state [ 446.900806][T19600] bridge0: port 3(team0) entered disabled state [ 446.907305][T19600] team0: entered allmulticast mode [ 446.931651][T19600] team_slave_0: entered allmulticast mode [ 446.950528][T19600] team_slave_1: entered allmulticast mode [ 446.985059][T19600] team0: entered promiscuous mode [ 446.997724][T19600] team_slave_0: entered promiscuous mode [ 447.008982][T19600] team_slave_1: entered promiscuous mode [ 447.021893][T19600] bridge0: port 3(team0) entered blocking state [ 447.028424][T19600] bridge0: port 3(team0) entered forwarding state [ 447.082870][ T1157] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.865944][T19655] team0: Device gtp0 is of different type [ 448.647966][T19693] __nla_validate_parse: 21 callbacks suppressed [ 448.647988][T19693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4144'. [ 448.696750][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4144'. [ 448.707040][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4144'. [ 449.062030][T19712] bond0: entered promiscuous mode [ 449.078687][T19712] batadv0: entered promiscuous mode [ 449.097349][T19712] batadv0: left promiscuous mode [ 449.126385][T19712] bond0: left promiscuous mode [ 449.139363][T19723] netlink: 'syz.2.4156': attribute type 3 has an invalid length. [ 449.168394][T19723] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4156'. [ 449.462045][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4160'. [ 449.505466][T19737] netlink: 'syz.4.4161': attribute type 11 has an invalid length. [ 449.540442][T19737] netlink: 'syz.4.4161': attribute type 11 has an invalid length. [ 449.548460][T19737] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4161'. [ 449.550544][T19739] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4162'. [ 449.844973][T19752] sctp: [Deprecated]: syz.0.4168 (pid 19752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.844973][T19752] Use struct sctp_sack_info instead [ 450.077058][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4170'. [ 450.106450][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4171'. [ 450.120497][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4173'. [ 450.371308][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 450.453197][T19791] netlink: 'syz.4.4177': attribute type 29 has an invalid length. [ 450.462332][T19791] netlink: 'syz.4.4177': attribute type 29 has an invalid length. [ 450.645331][T19756] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.735198][T19810] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 450.754475][T19809] openvswitch: netlink: Missing key (keys=40, expected=80) [ 450.850334][T19816] bridge0: port 3(team0) entered disabled state [ 450.856852][T19816] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.864736][T19816] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.030265][T15231] IPVS: starting estimator thread 0... [ 451.042616][T19824] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 451.071264][T19822] lo speed is unknown, defaulting to 1000 [ 451.079298][T19828] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 451.119998][T19823] IPVS: using max 24 ests per chain, 57600 per kthread [ 451.496287][T19844] openvswitch: netlink: Message has 5 unknown bytes. [ 451.680794][T19822] hsr0 speed is unknown, defaulting to 1000 [ 451.689147][T19822] vxcan1 speed is unknown, defaulting to 1000 [ 451.827697][T19859] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 451.870181][T19859] netlink: 'syz.4.4200': attribute type 2 has an invalid length. [ 451.879491][T19859] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 452.418351][T19882] netlink: 'syz.0.4208': attribute type 29 has an invalid length. [ 452.419308][T19880] netlink: 'syz.4.4206': attribute type 3 has an invalid length. [ 452.445613][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 452.456966][T19880] netlink: 'syz.4.4206': attribute type 3 has an invalid length. [ 452.815830][T19893] pimreg: left allmulticast mode [ 452.939357][T19900] Unsupported ieee802154 address type: 0 [ 452.991868][T19900] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.338687][T19911] netlink: 'syz.4.4216': attribute type 1 has an invalid length. [ 453.655681][T19931] __nla_validate_parse: 11 callbacks suppressed [ 453.655702][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 453.732095][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'. [ 454.317187][T19960] validate_nla: 1 callbacks suppressed [ 454.317208][T19960] netlink: 'syz.3.4229': attribute type 1 has an invalid length. [ 454.370626][T19960] netlink: 'syz.3.4229': attribute type 3 has an invalid length. [ 454.390050][T19960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4229'. [ 454.410916][T19963] lo: left allmulticast mode [ 454.444713][T19963] tunl0: left allmulticast mode [ 454.450058][T19963] gre0: left allmulticast mode [ 454.455179][T19963] 0ªî{X¹¦: left allmulticast mode [ 454.462871][T19963] erspan0: left allmulticast mode [ 454.468197][T19963] ip_vti0: left allmulticast mode [ 454.475234][T19963] ip6_vti0: left allmulticast mode [ 454.480781][T19963] sit0: left allmulticast mode [ 454.493798][T19963] ip6tnl0: left allmulticast mode [ 454.503951][T19963] ip6gre0: left allmulticast mode [ 454.509151][T19963] syz_tun: left allmulticast mode [ 454.538127][T19963] ip6gretap0: left allmulticast mode [ 454.553667][T19963] vcan0: left allmulticast mode [ 454.559221][T19963] bond0: left allmulticast mode [ 454.566066][T19963] team0: left allmulticast mode [ 454.575421][T19963] nlmon0: left allmulticast mode [ 454.585423][T19963] caif0: left allmulticast mode [ 454.591171][T19963] batadv0: left allmulticast mode [ 454.596633][T19963] vxcan0: left allmulticast mode [ 454.603977][T19963] vxcan1: left allmulticast mode [ 454.609193][T19963] veth0: left allmulticast mode [ 454.614587][T19963] veth1: left allmulticast mode [ 454.619617][T19963] wg0: left allmulticast mode [ 454.625071][T19963] wg1: left allmulticast mode [ 454.630035][T19963] wg2: left allmulticast mode [ 454.635011][T19963] veth0_to_bridge: left allmulticast mode [ 454.641622][T19963] bridge_slave_0: left allmulticast mode [ 454.647429][T19963] veth1_to_bridge: left allmulticast mode [ 454.653495][T19963] bridge_slave_1: left allmulticast mode [ 454.659507][T19963] veth0_to_bond: left allmulticast mode [ 454.665498][T19963] bond_slave_0: left allmulticast mode [ 454.675505][T19963] veth0_to_team: left allmulticast mode [ 454.683309][T19963] veth1_to_team: left allmulticast mode [ 454.689207][T19963] team_slave_1: left allmulticast mode [ 454.696111][T19963] veth0_to_batadv: left allmulticast mode [ 454.702702][T19963] batadv_slave_0: left allmulticast mode [ 454.708863][T19963] xfrm0: left allmulticast mode [ 454.714804][T19963] veth0_to_hsr: left allmulticast mode [ 454.726852][T19963] veth1_to_hsr: left allmulticast mode [ 454.733610][T19963] hsr0: left allmulticast mode [ 454.740509][T19963] hsr_slave_0: left allmulticast mode [ 454.746207][T19963] hsr_slave_1: left allmulticast mode [ 454.752712][T19963] veth1_vlan: left allmulticast mode [ 454.758617][T19963] vlan0: left allmulticast mode [ 454.765294][T19963] vlan1: left allmulticast mode [ 454.771292][T19963] macvlan0: left allmulticast mode [ 454.776841][T19963] macvlan1: left allmulticast mode [ 454.782898][T19963] ipvlan0: left allmulticast mode [ 454.788376][T19963] ipvlan1: left allmulticast mode [ 454.794247][T19963] veth0_vlan: left allmulticast mode [ 454.800986][T19963] veth1_macvtap: left allmulticast mode [ 454.807019][T19963] veth0_macvtap: left allmulticast mode [ 454.814545][T19963] macvtap0: left allmulticast mode [ 454.820638][T19963] macsec0: left allmulticast mode [ 454.826156][T19963] geneve0: left allmulticast mode [ 454.832206][T19963] geneve1: left allmulticast mode [ 454.838599][T19963] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 454.853346][T19963] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 454.868790][T19963] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 454.879387][T19963] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 454.898858][T19963] mac80211_hwsim hwsim22 wlan0: left allmulticast mode [ 454.921198][T19963] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 454.940267][T19963] bond1: left allmulticast mode [ 454.953935][T19963] veth2: left allmulticast mode [ 454.962517][T19963] veth3: left allmulticast mode [ 454.968221][T19963] bond2: left allmulticast mode [ 454.973643][T19963] bridge1: left allmulticast mode [ 454.978916][T19963] bridge2: left allmulticast mode [ 454.984657][T19963] gre1: left allmulticast mode [ 454.990389][T19963] gretap0: left promiscuous mode [ 454.995475][T19963] gretap0: left allmulticast mode [ 455.022011][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 455.041551][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 455.052649][T19962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4230'. [ 455.080772][T12638] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.107066][T12638] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.161105][T12638] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.236260][T19996] pim6reg: entered allmulticast mode [ 455.253815][T19996] pim6reg: left allmulticast mode [ 455.363048][T20000] netlink: 'syz.4.4241': attribute type 12 has an invalid length. [ 455.371733][T20000] netlink: 'syz.4.4241': attribute type 29 has an invalid length. [ 455.394278][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 455.418192][T20000] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4241'. [ 455.438113][T20000] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4241'. [ 455.456429][T20001] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 455.513553][T20004] IPVS: Unknown mcast interface: pimreg0 [ 455.821415][T20018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4248'. [ 456.279306][T20023] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 456.353317][T20023] bond1: (slave vcan1): Error -95 calling set_mac_address [ 456.988660][T20074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 458.691220][T20136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.701812][T20136] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.713192][T20136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.764280][T20135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.101934][T20165] netlink: 'syz.4.4295': attribute type 1 has an invalid length. [ 459.137233][T20165] __nla_validate_parse: 12 callbacks suppressed [ 459.137254][T20165] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4295'. [ 459.183736][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'. [ 459.214517][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4298'. [ 459.431680][T20181] delete_channel: no stack [ 459.602879][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 459.868786][T20203] batman_adv: batadv0: Adding interface: dummy0 [ 459.880651][T20208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4311'. [ 459.889787][T20203] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.916551][T20203] batman_adv: batadv0: Interface activated: dummy0 [ 459.975573][T20196] pim6reg527: entered allmulticast mode [ 460.183815][T20221] veth1_macvtap: left promiscuous mode [ 460.189412][T20221] macsec0: entered allmulticast mode [ 460.294574][T20232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4319'. [ 460.309390][T20232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4319'. [ 460.339503][T20230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4318'. [ 460.378815][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4318'. [ 460.457232][T20230] veth9: entered allmulticast mode [ 460.715104][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4326'. [ 461.333140][T20286] netlink: 'syz.2.4334': attribute type 4 has an invalid length. [ 461.730475][T20297] lo speed is unknown, defaulting to 1000 [ 461.861650][T20304] netlink: 'syz.3.4339': attribute type 21 has an invalid length. [ 462.296681][T20319] netlink: 'syz.1.4343': attribute type 2 has an invalid length. [ 462.664315][T20297] hsr0 speed is unknown, defaulting to 1000 [ 462.677031][T20297] vxcan1 speed is unknown, defaulting to 1000 [ 462.932174][T12631] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 463.578787][T20372] tipc: Enabled bearer , priority 0 [ 463.611776][T20372] syzkaller0: entered promiscuous mode [ 463.627638][T20372] syzkaller0: entered allmulticast mode [ 463.679611][T20372] tipc: Resetting bearer [ 463.713527][T20371] tipc: Resetting bearer [ 463.779620][T20371] tipc: Disabling bearer [ 463.937524][T20377] syzkaller1: entered promiscuous mode [ 463.954488][T20377] syzkaller1: entered allmulticast mode [ 464.214209][ T1157] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea [ 464.486957][T20395] netlink: 'syz.4.4365': attribute type 1 has an invalid length. [ 464.514910][T20399] __nla_validate_parse: 5 callbacks suppressed [ 464.514929][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4366'. [ 464.515053][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4365'. [ 464.772457][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 465.177213][T20434] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.452002][T20446] netlink: 'syz.0.4380': attribute type 10 has an invalid length. [ 465.483551][T20446] team0: Port device dummy0 added [ 465.522262][T20448] netlink: 'syz.0.4380': attribute type 10 has an invalid length. [ 465.591296][T20448] team0: Port device dummy0 removed [ 465.608113][T20448] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 465.624435][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4384'. [ 465.644051][T20452] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 465.860396][T20464] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4387'. [ 465.877883][T20466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4386'. [ 466.056680][T20473] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4390'. [ 466.108956][T20475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.153458][T20477] netlink: 'syz.1.4393': attribute type 10 has an invalid length. [ 466.424456][T20489] tipc: Enabling of bearer rejected, failed to enable media [ 466.491979][T20491] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4397'. [ 466.874113][T20502] macsec0: entered allmulticast mode [ 466.906384][ T1333] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 466.921673][T20506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4398'. [ 467.033703][T20508] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 467.125742][T20527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4404'. [ 467.597493][T20545] netlink: 'syz.4.4409': attribute type 30 has an invalid length. [ 467.657503][T20548] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 467.710155][T15250] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 467.759353][T20548] lo speed is unknown, defaulting to 1000 [ 467.824878][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 468.162954][T20548] hsr0 speed is unknown, defaulting to 1000 [ 468.246043][T20569] bond2: entered promiscuous mode [ 468.275822][T20569] bond2: entered allmulticast mode [ 468.299504][T20569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.536052][T20569] bond2 (unregistering): Released all slaves [ 468.572749][T20548] vxcan1 speed is unknown, defaulting to 1000 [ 468.762282][T15250] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 469.236323][T20597] macvtap1: entered promiscuous mode [ 469.243735][T20597] vlan0: entered promiscuous mode [ 469.249423][T20597] macvtap1: entered allmulticast mode [ 469.255652][T20597] vlan0: entered allmulticast mode [ 469.269184][T20597] veth0_vlan: entered allmulticast mode [ 469.446170][T20603] IPVS: Unknown mcast interface: netpci0 [ 469.832642][T20620] dvmrp1: entered allmulticast mode [ 469.903901][T20624] __nla_validate_parse: 7 callbacks suppressed [ 469.903920][T20624] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4436'. [ 470.261563][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.315546][T20632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.779369][T20651] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 470.842195][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.871623][T20658] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4447'. [ 471.138949][T20661] netlink: 'syz.4.4448': attribute type 25 has an invalid length. [ 471.321649][T20669] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4450'. [ 471.335730][T20669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 471.426544][T20669] syzkaller0: entered promiscuous mode [ 471.436824][T20669] syzkaller0: entered allmulticast mode [ 471.721565][T20687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.105515][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4460'. [ 472.120523][T20701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4460'. [ 472.122670][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 473.754054][T20708] netlink: 'syz.2.4463': attribute type 4 has an invalid length. [ 473.799617][T20708] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4463'. [ 473.837332][T20708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4463'. [ 473.837343][T20709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4463'. [ 473.863995][T20711] netlink: 'syz.0.4464': attribute type 33 has an invalid length. [ 473.880757][T20711] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4464'. [ 473.912268][T20711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4464'. [ 473.947817][T20717] lo speed is unknown, defaulting to 1000 [ 474.036679][T20724] netlink: 'syz.2.4468': attribute type 1 has an invalid length. [ 474.090858][T20724] netlink: 'syz.2.4468': attribute type 1 has an invalid length. [ 474.223660][T20728] atomic_op ffff88806c067998 conn xmit_atomic 0000000000000000 [ 474.655886][T20717] hsr0 speed is unknown, defaulting to 1000 [ 474.671622][T20717] vxcan1 speed is unknown, defaulting to 1000 [ 474.893987][T20754] netlink: 'syz.0.4477': attribute type 1 has an invalid length. [ 475.015834][ T1157] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 475.259004][T20767] __nla_validate_parse: 1 callbacks suppressed [ 475.259024][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4479'. [ 475.297602][T20770] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 475.825788][T20777] openvswitch: netlink: Key type 85 is out of range max 32 [ 475.882509][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4481'. [ 476.377735][T20793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4488'. [ 476.475565][T15248] IPVS: starting estimator thread 0... [ 476.482151][T20795] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 476.490728][T20798] netlink: 'syz.2.4489': attribute type 27 has an invalid length. [ 476.499098][T20798] netlink: 'syz.2.4489': attribute type 27 has an invalid length. [ 476.590015][T20797] IPVS: using max 23 ests per chain, 55200 per kthread [ 476.776360][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 476.803051][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 477.177278][T20823] netlink: 'syz.3.4497': attribute type 1 has an invalid length. [ 477.264114][T20826] bond3 (unregistering): Released all slaves [ 477.356977][T20823] bond3: entered promiscuous mode [ 477.393394][T20823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.406498][T20814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4493'. [ 477.420814][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4493'. [ 477.535803][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 477.632974][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4501'. [ 477.654790][T20836] netlink: 'syz.3.4502': attribute type 3 has an invalid length. [ 477.673541][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4503'. [ 477.732110][T20836] netlink: 'syz.3.4502': attribute type 1 has an invalid length. [ 477.746538][T20840] bridge0: port 2(batadv0) entered blocking state [ 477.753288][T20840] bridge0: port 2(batadv0) entered listening state [ 477.760222][T20840] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.767429][T20840] bridge0: port 1(bridge_slave_0) entered listening state [ 477.848864][T20840] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 478.043397][ T5158] Bluetooth: hci3: command 0x0406 tx timeout [ 479.605987][T20936] validate_nla: 4 callbacks suppressed [ 479.606009][T20936] netlink: 'syz.0.4529': attribute type 2 has an invalid length. [ 479.802293][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 479.807565][T12629] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.810581][ C0] bridge0: port 2(batadv0) entered learning state [ 479.839276][T12629] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.920581][T12629] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.935825][T12629] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.115065][T20954] netlink: 'syz.3.4536': attribute type 83 has an invalid length. [ 480.143167][T20952] 8021q: VLANs not supported on wg2 [ 480.587177][T20975] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 480.606149][T20978] __nla_validate_parse: 9 callbacks suppressed [ 480.606170][T20978] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4546'. [ 480.664862][T20978] veth0: entered promiscuous mode [ 480.672178][T20977] veth0: left promiscuous mode [ 480.931779][T20992] netlink: 'syz.3.4550': attribute type 1 has an invalid length. [ 481.053638][T20994] bond4: (slave gretap1): making interface the new active one [ 481.064983][T20994] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 481.070100][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4550'. [ 481.170453][T20992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.185997][T21002] tipc: Enabled bearer , priority 0 [ 481.198847][T21002] syzkaller0: entered promiscuous mode [ 481.220806][T21002] syzkaller0: entered allmulticast mode [ 481.291772][T21002] tipc: Resetting bearer [ 481.336286][T21009] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4556'. [ 481.366122][T21006] bond0: (slave bridge0): Releasing backup interface [ 481.396942][T21006] bridge0: port 2(batadv0) entered disabled state [ 481.403936][T21006] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.450672][T21006] bond0: (slave dummy0): Releasing backup interface [ 481.476507][T21006] bridge0: port 2(batadv0) entered disabled state [ 481.491406][T21006] bridge_slave_0: left allmulticast mode [ 481.497093][T21006] bridge_slave_0: left promiscuous mode [ 481.503905][T21006] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.515196][T21006] bond0: (slave bridge_slave_1): Releasing backup interface [ 481.529559][T21006] bond0: (slave bond_slave_0): Releasing backup interface [ 481.542415][T21006] bond0: (slave bond_slave_1): Releasing backup interface [ 481.558793][T21006] team0: Port device team_slave_0 removed [ 481.581420][T21006] team0: Port device team_slave_1 removed [ 481.588727][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.598149][T21006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.607667][T21006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.615652][T21006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.638134][T20997] tipc: Resetting bearer [ 481.673685][T20997] tipc: Disabling bearer [ 481.698493][T21011] netlink: 'syz.2.4557': attribute type 10 has an invalid length. [ 481.739332][T21017] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 481.783417][T15248] IPVS: starting estimator thread 0... [ 481.801210][T21017] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4559'. [ 481.823741][T21017] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4559'. [ 481.870658][T21018] IPVS: using max 25 ests per chain, 60000 per kthread [ 481.913029][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4560'. [ 482.041783][T21029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4563'. [ 482.257040][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'. [ 482.396686][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4568'. [ 482.501647][T21054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4571'. [ 482.598006][T21057] tipc: Enabled bearer , priority 0 [ 483.072559][T21071] netlink: 'syz.2.4578': attribute type 1 has an invalid length. [ 483.443041][T21057] tipc: Disabling bearer [ 483.509087][T21083] pimreg: entered allmulticast mode [ 483.619414][T21090] netlink: 'syz.0.4585': attribute type 2 has an invalid length. [ 483.855658][T21096] 8021q: VLANs not supported on ip6gre0 [ 484.323396][T21110] tipc: Disabling bearer [ 484.490764][T21115] netlink: 'syz.2.4596': attribute type 5 has an invalid length. [ 485.172064][T21157] netlink: 'syz.0.4611': attribute type 4 has an invalid length. [ 485.219182][T21157] netlink: 'syz.0.4611': attribute type 4 has an invalid length. [ 485.250994][T21162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.272627][T21162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.283417][T21162] hsr0: entered promiscuous mode [ 485.288407][T21162] hsr0: entered allmulticast mode [ 485.293680][T21162] hsr_slave_0: entered allmulticast mode [ 485.299344][T21162] hsr_slave_1: entered allmulticast mode [ 485.512132][T21171] netlink: 'syz.2.4614': attribute type 4 has an invalid length. [ 485.674067][T21183] __nla_validate_parse: 18 callbacks suppressed [ 485.674089][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 485.680496][T21184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4620'. [ 485.692758][T21184] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4620'. [ 485.708810][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 485.866098][T21183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4619'. [ 485.882617][T21190] lo speed is unknown, defaulting to 1000 [ 485.910599][T21193] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4622'. [ 485.942643][T21193] macsec0: left allmulticast mode [ 486.205385][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 486.296652][T21208] netlink: 'syz.3.4625': attribute type 21 has an invalid length. [ 486.302318][T21190] hsr0 speed is unknown, defaulting to 1000 [ 486.314213][T21190] vxcan1 speed is unknown, defaulting to 1000 [ 486.347717][T21209] netlink: 'syz.3.4625': attribute type 21 has an invalid length. [ 486.367404][T21208] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 486.400104][T21209] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 486.401636][T21215] openvswitch: netlink: Message has 4 unknown bytes. [ 486.596112][T21220] netlink: 'syz.1.4628': attribute type 21 has an invalid length. [ 486.615212][T21220] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.650238][T21220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.657597][T21220] IPv6: NLM_F_CREATE should be set when creating new route [ 486.664902][T21220] IPv6: NLM_F_CREATE should be set when creating new route [ 486.672179][T21220] IPv6: NLM_F_CREATE should be set when creating new route [ 486.752691][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4628'. [ 487.022914][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'. [ 487.140126][T21183] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 487.211744][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 487.253556][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4634'. [ 487.262712][T21234] openvswitch: netlink: Flow actions attr not present in new flow. [ 487.279430][T21239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.309695][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.330468][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.338402][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.347021][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.355438][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 487.696885][T21240] lo speed is unknown, defaulting to 1000 [ 488.135436][T21250] lo speed is unknown, defaulting to 1000 [ 488.544090][T21240] hsr0 speed is unknown, defaulting to 1000 [ 488.563050][T21250] hsr0 speed is unknown, defaulting to 1000 [ 488.581455][T21240] vxcan1 speed is unknown, defaulting to 1000 [ 488.742911][T21284] netlink: 'syz.0.4647': attribute type 1 has an invalid length. [ 488.910627][T21284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 488.983863][T21287] gretap3: entered promiscuous mode [ 489.052794][T21287] bond5: (slave gretap3): making interface the new active one [ 489.084256][T21287] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 489.220744][T21293] netlink: 'syz.1.4650': attribute type 4 has an invalid length. [ 489.278419][T21250] vxcan1 speed is unknown, defaulting to 1000 [ 489.401822][ T5842] Bluetooth: hci5: command tx timeout [ 489.694235][T21240] chnl_net:caif_netlink_parms(): no params data found [ 490.189196][T21240] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.199279][T21240] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.217410][T21240] bridge_slave_0: entered allmulticast mode [ 490.232806][T21240] bridge_slave_0: entered promiscuous mode [ 490.261415][T21240] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.268689][T21240] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.298316][T21240] bridge_slave_1: entered allmulticast mode [ 490.323968][T21240] bridge_slave_1: entered promiscuous mode [ 490.611104][T21240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.657861][T21240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.684825][T20671] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 491.123409][T21240] team0: Port device team_slave_0 added [ 491.142552][T21240] team0: Port device team_slave_1 added [ 491.395233][T21330] __nla_validate_parse: 2 callbacks suppressed [ 491.395253][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4658'. [ 491.418809][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4658'. [ 491.431248][T21330] netlink: 'syz.2.4658': attribute type 3 has an invalid length. [ 491.439308][T21333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4659'. [ 491.451400][T21240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.458370][T21240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.489972][T21333] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 491.501492][ T5842] Bluetooth: hci5: command tx timeout [ 491.503258][T21240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.580029][T21240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.587016][T21240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.648423][T21240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.689531][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4661'. [ 491.786802][T21240] hsr_slave_0: entered promiscuous mode [ 491.815534][T21240] hsr_slave_1: entered promiscuous mode [ 491.830280][T21240] debugfs: 'hsr0' already exists in 'hsr' [ 491.842940][T21240] Cannot create hsr debugfs directory [ 492.272087][T21240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 492.290322][T21240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.316397][T21240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 492.317075][T21346] netlink: 'syz.2.4663': attribute type 3 has an invalid length. [ 492.333294][T21346] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.4663'. [ 492.345625][T21240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 492.494349][T21354] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4664'. [ 492.547310][T21356] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4665'. [ 492.571469][T21240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.606469][T21240] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.643815][T12631] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.651138][T12631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.661908][T12631] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.669134][T12631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.817135][T21240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.058330][T21240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.327367][T21240] veth0_vlan: entered promiscuous mode [ 493.346686][T21240] veth1_vlan: entered promiscuous mode [ 493.387423][T21240] veth0_macvtap: entered promiscuous mode [ 493.397038][T21240] veth1_macvtap: entered promiscuous mode [ 493.403117][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 493.426263][T21240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.442404][T21240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.458655][T12629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.467611][T12629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.492405][T12629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.501311][T12629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.560256][ T5839] Bluetooth: hci5: command tx timeout [ 493.589480][T12629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.607072][T12629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.638225][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.647717][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.958584][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 495.640602][ T5839] Bluetooth: hci5: command tx timeout [ 496.443757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.570289][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.000170][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 522.067579][T12629] vlan0: left promiscuous mode [ 522.074078][T12629] veth1: left promiscuous mode [ 522.079194][T12629] bridge4: port 2(vlan0) entered disabled state [ 522.089690][T12629] veth0_to_bond: left allmulticast mode [ 522.097476][T12629] veth0_to_bond: left promiscuous mode [ 522.103446][T12629] bridge4: port 1(veth0_to_bond) entered disabled state [ 522.403408][T12629] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 522.414166][T12629] bond0 (unregistering): (slave geneve1): the permanent HWaddr of slave - aa:aa:aa:aa:aa:41 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 522.636018][T12629] bond18 (unregistering): (slave bridge3): Releasing active interface [ 522.848247][T12629] bond0 (unregistering): (slave v): Releasing backup interface [ 522.857171][T12629] bond0 (unregistering): Released all slaves [ 522.980700][T12629] bond1 (unregistering): Released all slaves [ 523.104854][T12629] bond2 (unregistering): Released all slaves [ 523.119588][T12629] bond3 (unregistering): Released all slaves [ 523.136139][T12629] bond4 (unregistering): Released all slaves [ 523.153731][T12629] bond5 (unregistering): Released all slaves [ 523.181025][T12629] bond6 (unregistering): Released all slaves [ 523.197821][T12629] bond7 (unregistering): Released all slaves [ 523.211691][T12629] bond8 (unregistering): Released all slaves [ 523.228850][T12629] bond9 (unregistering): Released all slaves [ 523.264612][T12629] bond10 (unregistering): Released all slaves [ 523.281870][T12629] bond11 (unregistering): Released all slaves [ 523.303230][T12629] bond12 (unregistering): Released all slaves [ 523.327253][T12629] bond13 (unregistering): Released all slaves [ 523.349660][T12629] bond14 (unregistering): Released all slaves [ 523.472631][T12629] bond15 (unregistering): Released all slaves [ 523.599283][T12629] bond16 (unregistering): Released all slaves [ 523.725232][T12629] bond17 (unregistering): Released all slaves [ 523.739823][T12629] bond18 (unregistering): Released all slaves [ 523.758506][T12629] bond19 (unregistering): Released all slaves [ 523.922740][T12629] tipc: Disabling bearer [ 523.930473][T12629] tipc: Disabling bearer [ 523.946160][T12629] tipc: Left network mode [ 524.516224][T12629] hsr_slave_0: left promiscuous mode [ 524.885976][ T1333] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 547.409280][T21395] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 547.475482][T21400] netlink: 'syz.3.4672': attribute type 29 has an invalid length. [ 547.484434][T21400] netlink: 'syz.3.4672': attribute type 29 has an invalid length. [ 547.493347][T21406] netlink: 'syz.3.4672': attribute type 29 has an invalid length. [ 547.514536][T21405] netlink: 'syz.1.4673': attribute type 21 has an invalid length. [ 547.519382][T21406] netlink: 'syz.3.4672': attribute type 29 has an invalid length. [ 547.560143][T21405] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4673'. [ 547.637167][T21405] netlink: 'syz.1.4673': attribute type 5 has an invalid length. [ 547.729235][T21405] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4673'. [ 547.913129][T21429] netlink: 'syz.2.4680': attribute type 10 has an invalid length. [ 547.993421][T21434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4683'. [ 548.174110][T21438] delete_channel: no stack [ 548.234605][T21451] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.260325][T21452] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.315967][T21450] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4688'. [ 548.452942][T21460] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4689'. [ 548.599081][T21468] : entered promiscuous mode [ 549.136831][T21497] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4701'. [ 549.217433][T21504] netlink: 'syz.0.4703': attribute type 1 has an invalid length. [ 549.252014][T21504] netlink: 'syz.0.4703': attribute type 3 has an invalid length. [ 549.275541][T21504] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4703'. [ 549.416873][T21513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4706'. [ 549.420078][T21514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4708'. [ 549.465039][T21513] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4706'. [ 549.821169][T21534] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 549.838930][T21534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.873511][T21534] netlink: 'syz.1.4716': attribute type 83 has an invalid length. [ 550.315666][T21561] tipc: Enabled bearer , priority 0 [ 550.336020][T21561] syzkaller0: entered promiscuous mode [ 550.354097][T21561] syzkaller0: entered allmulticast mode [ 550.470460][T21561] tipc: Resetting bearer [ 550.513910][T21560] tipc: Resetting bearer [ 550.586492][T21560] tipc: Disabling bearer [ 550.811902][T21578] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 551.011879][T21593] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 551.249577][T21603] ip6gre2: entered allmulticast mode [ 551.759072][T21629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 552.255550][T21664] bond0: Device is already in use. [ 552.366826][T21668] openvswitch: netlink: Key type 29 is not supported [ 552.369596][T21669] veth0: entered promiscuous mode [ 552.436493][T21669] veth0 (unregistering): left promiscuous mode [ 552.626452][T21681] IPVS: length: 8 != 1152 [ 552.872262][T21674] __nla_validate_parse: 10 callbacks suppressed [ 552.872286][T21674] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4755'. [ 553.175496][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4760'. [ 553.177167][T21695] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4762'. [ 553.317710][T21702] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 553.330700][T21702] bond6: (slave vcan1): Error -95 calling set_mac_address [ 553.420956][T21707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.463100][T21707] validate_nla: 1 callbacks suppressed [ 553.463121][T21707] netlink: 'syz.5.4765': attribute type 1 has an invalid length. [ 553.512388][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4767'. [ 553.529528][T21707] vlan2: entered promiscuous mode [ 553.546324][T21707] geneve0: entered promiscuous mode [ 553.583319][T21707] vlan2: entered allmulticast mode [ 553.588492][T21707] geneve0: entered allmulticast mode [ 553.648041][T21718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4769'. [ 554.144496][T21742] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4777'. [ 554.275573][T21759] vlan0: entered promiscuous mode [ 554.289090][T21759] bridge0: entered promiscuous mode [ 554.848646][T21789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4787'. [ 554.949412][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4787'. [ 555.066572][T21798] tc_dump_action: action bad kind [ 555.079694][T21801] netlink: 'syz.5.4790': attribute type 10 has an invalid length. [ 555.083383][T21799] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4791'. [ 555.199599][T21801] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 555.279217][T21805] netlink: 'syz.0.4792': attribute type 1 has an invalid length. [ 555.310189][T21805] netlink: 'syz.0.4792': attribute type 3 has an invalid length. [ 555.326749][T21805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4792'. [ 555.427970][T21817] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 555.555340][T21822] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 555.615924][T21822] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 555.807691][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 556.835501][T21904] netlink: 'syz.2.4819': attribute type 24 has an invalid length. [ 556.917449][T21906] sctp: [Deprecated]: syz.3.4820 (pid 21906) Use of int in maxseg socket option. [ 556.917449][T21906] Use struct sctp_assoc_value instead [ 556.939140][T21908] netlink: 'syz.5.4821': attribute type 1 has an invalid length. [ 556.975559][T21908] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 557.458611][T21891] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 557.611780][T21942] sch_fq: defrate 0 ignored. [ 558.006500][T21946] __nla_validate_parse: 5 callbacks suppressed [ 558.006521][T21946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4831'. [ 558.164771][T21963] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 558.325028][T21980] netlink: 'syz.5.4837': attribute type 29 has an invalid length. [ 558.419747][T21984] netlink: 'syz.1.4840': attribute type 1 has an invalid length. [ 558.623423][T21994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4843'. [ 558.675362][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'. [ 558.712631][T21999] netlink: 'syz.5.4845': attribute type 1 has an invalid length. [ 558.849337][T22003] bond1: (slave bridge1): making interface the new active one [ 558.858726][T22003] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 559.155623][T22020] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4851'. [ 559.386073][T22033] sctp: [Deprecated]: syz.0.4853 (pid 22033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 559.386073][T22033] Use struct sctp_sack_info instead [ 559.524874][T22036] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4856'. [ 559.931011][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.039426][T22048] netlink: 'syz.5.4859': attribute type 1 has an invalid length. [ 560.345894][T22054] syz.0.4861 uses old SIOCAX25GETINFO [ 560.421926][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.443725][T22056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4863'. [ 560.451326][T22059] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4864'. [ 560.480116][T22059] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 560.489028][T22060] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4865'. [ 560.490619][T22056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4863'. [ 560.536980][T22062] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4867'. [ 561.382060][T22098] netlink: 'syz.3.4878': attribute type 4 has an invalid length. [ 561.403045][T22098] netlink: 'syz.3.4878': attribute type 4 has an invalid length. [ 561.479535][T22098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.506762][T22098] bond0: (slave bond5): Enslaving as an active interface with an up link [ 561.518191][T22103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.761875][T22115] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 562.229226][T22138] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 562.354622][T22148] netlink: 'syz.5.4895': attribute type 21 has an invalid length. [ 562.377705][T22148] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.449587][T22155] tipc: Enabling of bearer rejected, failed to enable media [ 562.492115][T22155] geneve2: entered promiscuous mode [ 562.497585][T22155] geneve2: entered allmulticast mode [ 562.806636][T22165] netem: incorrect ge model size [ 562.823622][T22165] netem: change failed [ 563.006197][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.217578][T22188] xfrm1: entered allmulticast mode [ 563.284643][T22191] __nla_validate_parse: 12 callbacks suppressed [ 563.284664][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4909'. [ 563.501717][T22191] syzkaller1: entered promiscuous mode [ 563.517580][T22191] syzkaller1: entered allmulticast mode [ 563.528287][T22206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4914'. [ 563.532912][T22203] syzkaller1: entered promiscuous mode [ 563.589864][T22203] syzkaller1: entered allmulticast mode [ 563.644573][T22211] netlink: 'syz.0.4917': attribute type 1 has an invalid length. [ 563.714395][T22213] pim6reg1: entered promiscuous mode [ 563.740160][T22213] pim6reg1: entered allmulticast mode [ 563.894895][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4921'. [ 563.924580][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4921'. [ 563.935415][T22223] tipc: Enabling of bearer rejected, failed to enable media [ 564.261694][T22239] tipc: Started in network mode [ 564.266622][T22239] tipc: Node identity 1a5421c78d2d, cluster identity 4711 [ 564.287650][T22239] tipc: Enabled bearer , priority 0 [ 564.307153][T22239] syzkaller0: entered promiscuous mode [ 564.313397][T22239] syzkaller0: entered allmulticast mode [ 564.327380][T22239] tipc: Resetting bearer [ 564.344279][T22237] tipc: Resetting bearer [ 564.394164][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4928'. [ 564.416469][T22237] tipc: Disabling bearer [ 564.431734][T22245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4929'. [ 564.935381][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4939'. [ 565.130666][T22287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4942'. [ 565.279053][T22296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4945'. [ 565.366971][T22303] netlink: 'syz.3.4948': attribute type 1 has an invalid length. [ 565.407721][T22306] netlink: 'syz.5.4950': attribute type 2 has an invalid length. [ 565.456182][T22306] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4950'. [ 565.531849][T22317] netlink: 'syz.1.4952': attribute type 11 has an invalid length. [ 565.596272][T22321] netlink: 'syz.1.4952': attribute type 11 has an invalid length. [ 565.963158][ T1037] wlan0: Trigger new scan to find an IBSS to join [ 566.022802][T22341] tipc: Enabled bearer , priority 0 [ 566.156641][T22341] syzkaller0: entered promiscuous mode [ 566.188980][T22341] syzkaller0: entered allmulticast mode [ 566.215938][T22341] tipc: Resetting bearer [ 566.258435][T22341] sctp: [Deprecated]: syz.0.4958 (pid 22341) Use of int in maxseg socket option. [ 566.258435][T22341] Use struct sctp_assoc_value instead [ 566.323105][T22361] macvlan3: entered promiscuous mode [ 566.329545][T22361] macvlan3: entered allmulticast mode [ 566.343301][T22361] syz_tun: entered promiscuous mode [ 566.348994][T22361] syz_tun: entered allmulticast mode [ 566.373244][T22361] team0: Port device macvlan3 added [ 566.484699][T22339] tipc: Resetting bearer [ 566.942724][T22390] netlink: 'syz.3.4972': attribute type 1 has an invalid length. [ 567.050312][T15231] tipc: Node number set to 975636404 [ 568.998496][T22339] tipc: Disabling bearer [ 569.219406][T22410] __nla_validate_parse: 12 callbacks suppressed [ 569.219428][T22410] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4979'. [ 569.305535][T22415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4981'. [ 569.374895][T22414] nbd: must specify at least one socket [ 570.019339][T22450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4992'. [ 570.316557][T22465] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4993'. [ 570.487439][T22474] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4998'. [ 570.606529][T22477] tipc: Enabling of bearer rejected, failed to enable media [ 570.753424][T22486] tipc: Enabling of bearer rejected, failed to enable media [ 570.920142][ T1333] wlan0: Trigger new scan to find an IBSS to join [ 571.052347][T22500] netlink: 'syz.5.5005': attribute type 29 has an invalid length. [ 571.068536][T22500] netlink: 'syz.5.5005': attribute type 29 has an invalid length. [ 571.111000][T22500] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5005'. [ 571.353734][T22517] geneve2: entered promiscuous mode [ 571.384364][T22517] geneve2: entered allmulticast mode [ 571.465099][T22525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5013'. [ 571.523772][T22517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.549975][T22517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.776581][T22517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.789527][T22517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.823727][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.964079][T22517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.981274][T22517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.032836][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5017'. [ 572.156996][T22517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.194662][T22517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.371371][T22563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 572.376006][T12631] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.388357][T12631] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.397677][T22563] netlink: 'syz.1.5022': attribute type 1 has an invalid length. [ 572.497260][T12631] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.523985][T12631] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.568965][T12631] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.585167][T12631] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.617040][T12631] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.626866][T12631] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.696683][T22578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5026'. [ 573.100634][T22588] tipc: Enabled bearer , priority 0 [ 573.120859][T22588] syzkaller0: entered promiscuous mode [ 573.126378][T22588] syzkaller0: entered allmulticast mode [ 573.165167][T22597] netlink: 'syz.3.5031': attribute type 1 has an invalid length. [ 573.187093][T22588] tipc: Resetting bearer [ 573.229178][T22587] tipc: Resetting bearer [ 573.304953][T22608] netlink: 'syz.1.5032': attribute type 2 has an invalid length. [ 573.399047][T22587] tipc: Disabling bearer [ 573.421222][T22614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5035'. [ 573.854283][T22645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 574.426715][T22670] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 574.473082][T22667] __nla_validate_parse: 3 callbacks suppressed [ 574.473106][T22667] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5050'. [ 574.555122][T22675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5053'. [ 574.746594][T22680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5053'. [ 575.159526][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'. [ 575.306133][T22681] bond6: entered promiscuous mode [ 575.388815][T22681] bond6: entered allmulticast mode [ 575.396237][T22681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.442868][T22704] pim6reg1: entered promiscuous mode [ 575.471360][T22704] pim6reg1: entered allmulticast mode [ 575.621731][T22720] syzkaller1: entered promiscuous mode [ 575.640408][T22720] syzkaller1: entered allmulticast mode [ 576.000712][T22735] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5069'. [ 576.104698][T22742] netlink: 'syz.1.5072': attribute type 1 has an invalid length. [ 576.143694][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5072'. [ 576.445810][T22759] netlink: 'syz.1.5076': attribute type 10 has an invalid length. [ 576.453733][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5076'. [ 576.456378][T22761] Unsupported ieee802154 address type: 0 [ 576.470954][T22759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5076'. [ 576.487021][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'. [ 576.574685][T22769] delete_channel: no stack [ 577.297666][T22812] netlink: 'syz.0.5087': attribute type 29 has an invalid length. [ 577.365426][T22816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.380806][T22812] netlink: 'syz.0.5087': attribute type 29 has an invalid length. [ 577.402181][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5090'. [ 577.433138][T22816] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 577.461481][T22816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.945806][T22844] netlink: 'syz.1.5101': attribute type 83 has an invalid length. [ 577.996245][T22843] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.999399][T22845] netlink: 'syz.1.5101': attribute type 178 has an invalid length. [ 578.036376][T22851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.044123][T22851] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 578.056431][T22851] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 578.101815][T22850] netlink: 'syz.0.5102': attribute type 16 has an invalid length. [ 578.127193][T22850] netlink: 'syz.0.5102': attribute type 17 has an invalid length. [ 578.273736][T22850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.360789][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.360795][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.693527][T22879] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 578.873140][T22882] tipc: Enabled bearer , priority 0 [ 578.881931][T22885] syzkaller0: entered promiscuous mode [ 578.887633][T22885] syzkaller0: entered allmulticast mode [ 579.172126][T22885] tipc: Resetting bearer [ 579.209723][T22884] syzkaller0: entered promiscuous mode [ 579.215782][T22884] syzkaller0: entered allmulticast mode [ 579.316619][T22903] tipc: Enabled bearer , priority 0 [ 579.400411][T22864] syzkaller0: entered promiscuous mode [ 579.406055][T22864] syzkaller0: entered allmulticast mode [ 579.427120][T22864] tipc: Resetting bearer [ 579.460369][T22875] tipc: Resetting bearer [ 579.535331][T22875] tipc: Disabling bearer [ 579.609086][T22863] tipc: Resetting bearer [ 581.585915][T22863] tipc: Disabling bearer [ 581.761071][T22939] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 581.794671][T22939] nftables ruleset with unbound set [ 582.321257][T22963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.778002][T22985] __nla_validate_parse: 7 callbacks suppressed [ 582.778023][T22985] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5140'. [ 582.862383][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5137'. [ 582.979085][T22990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 583.130952][T22997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5145'. [ 583.576522][T23019] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 583.848909][T23036] netlink: 404 bytes leftover after parsing attributes in process `syz.5.5157'. [ 583.900905][T23036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5157'. [ 583.937295][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5158'. [ 583.964383][T23036] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5157'. [ 583.992599][T23036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5157'. [ 584.279045][T23063] netlink: 'syz.3.5166': attribute type 83 has an invalid length. [ 584.341405][T23065] netlink: 'syz.1.5167': attribute type 7 has an invalid length. [ 584.385016][T23073] netlink: 'syz.2.5163': attribute type 1 has an invalid length. [ 584.517899][T23067] syz.2.5163 (23067) used obsolete PPPIOCDETACH ioctl [ 584.550484][T23078] sch_fq: defrate 0 ignored. [ 584.682962][T23081] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5171'. [ 585.868928][T23147] geneve3: entered promiscuous mode [ 585.881830][T23147] geneve3: entered allmulticast mode [ 586.155883][T23162] erspan0: entered promiscuous mode [ 586.175469][ T30] audit: type=1800 audit(1754032168.493:7): pid=23164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5200" name="memory.events" dev="tmpfs" ino=2124 res=0 errno=0 [ 586.192642][T23162] 0ªî{X¹¦: entered promiscuous mode [ 586.263848][T23162] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 586.368591][T23169] veth5: entered promiscuous mode [ 586.376154][T23169] veth5: entered allmulticast mode [ 586.835029][ T78] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 586.904959][T23194] netlink: 'syz.2.5211': attribute type 1 has an invalid length. [ 586.913978][T23194] netlink: 'syz.2.5211': attribute type 3 has an invalid length. [ 586.950575][T23194] NCSI netlink: No device for ifindex 813332851 [ 586.967030][T23194] dvmrp0: left allmulticast mode [ 586.976706][T23194] pimreg: left allmulticast mode [ 588.323458][T23265] lo speed is unknown, defaulting to 1000 [ 588.648137][T23281] __nla_validate_parse: 14 callbacks suppressed [ 588.648158][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5238'. [ 588.650803][T23280] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.671186][T23280] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.681788][T23276] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.5237'. [ 588.854206][T15231] IPVS: starting estimator thread 0... [ 588.973769][T23293] IPVS: using max 23 ests per chain, 55200 per kthread [ 589.075605][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'. [ 589.181402][T23306] 8021q: VLANs not supported on ip6_vti0 [ 589.276887][T23265] hsr0 speed is unknown, defaulting to 1000 [ 589.302590][T23265] vxcan1 speed is unknown, defaulting to 1000 [ 589.354110][T23317] netlink: 'syz.3.5250': attribute type 15 has an invalid length. [ 589.533723][T23324] netlink: 'syz.3.5252': attribute type 3 has an invalid length. [ 589.551203][T23324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5252'. [ 589.726069][T23326] netlink: 'syz.1.5253': attribute type 1 has an invalid length. [ 589.738065][T23326] netlink: 'syz.1.5253': attribute type 3 has an invalid length. [ 589.758925][T23326] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5253'. [ 589.871828][T23337] nft_compat: unsupported protocol 6 [ 590.169048][T23348] netlink: 'syz.5.5260': attribute type 1 has an invalid length. [ 590.191769][T23348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.203233][T23347] nftables ruleset with unbound chain [ 590.377210][T23354] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5261'. [ 590.471033][T23350] lo speed is unknown, defaulting to 1000 [ 590.675927][T23360] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 590.700139][T23360] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 591.127916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c19d000: rx timeout, send abort [ 591.138155][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c19d000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 591.239342][T23350] hsr0 speed is unknown, defaulting to 1000 [ 591.259059][T23350] vxcan1 speed is unknown, defaulting to 1000 [ 591.288278][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5270'. [ 591.407884][T23377] netlink: 'syz.0.5271': attribute type 10 has an invalid length. [ 591.533488][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5273'. [ 591.766360][T23391] netlink: 'syz.0.5275': attribute type 1 has an invalid length. [ 591.790614][T23391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5275'. [ 591.821336][T23391] netlink: 'syz.0.5275': attribute type 2 has an invalid length. [ 591.825017][T23394] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5274'. [ 591.878722][T23391] netlink: 'syz.0.5275': attribute type 1 has an invalid length. [ 592.347030][T23421] FAULT_INJECTION: forcing a failure. [ 592.347030][T23421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.361311][T23421] CPU: 1 UID: 0 PID: 23421 Comm: syz.5.5284 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 592.361341][T23421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.361353][T23421] Call Trace: [ 592.361361][T23421] [ 592.361371][T23421] dump_stack_lvl+0x189/0x250 [ 592.361397][T23421] ? __pfx____ratelimit+0x10/0x10 [ 592.361427][T23421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.361449][T23421] ? __pfx__printk+0x10/0x10 [ 592.361489][T23421] should_fail_ex+0x414/0x560 [ 592.361526][T23421] _copy_to_user+0x31/0xb0 [ 592.361555][T23421] simple_read_from_buffer+0xe1/0x170 [ 592.361591][T23421] proc_fail_nth_read+0x1b3/0x220 [ 592.361619][T23421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.361647][T23421] ? rw_verify_area+0x258/0x650 [ 592.361673][T23421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 592.361698][T23421] vfs_read+0x1fd/0x980 [ 592.361724][T23421] ? fdget_pos+0x247/0x320 [ 592.361749][T23421] ? __pfx___mutex_lock+0x10/0x10 [ 592.361779][T23421] ? __pfx_vfs_read+0x10/0x10 [ 592.361808][T23421] ? __fget_files+0x2a/0x420 [ 592.361833][T23421] ? __fget_files+0x3a0/0x420 [ 592.361851][T23421] ? __fget_files+0x2a/0x420 [ 592.361881][T23421] ksys_read+0x145/0x250 [ 592.361912][T23421] ? __pfx_ksys_read+0x10/0x10 [ 592.361946][T23421] ? do_syscall_64+0xbe/0x3b0 [ 592.361979][T23421] do_syscall_64+0xfa/0x3b0 [ 592.362004][T23421] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.362031][T23421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.362051][T23421] ? clear_bhb_loop+0x60/0xb0 [ 592.362076][T23421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.362095][T23421] RIP: 0033:0x7f7c7178d57c [ 592.362112][T23421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 592.362130][T23421] RSP: 002b:00007f7c715f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 592.362161][T23421] RAX: ffffffffffffffda RBX: 00007f7c719b5fa0 RCX: 00007f7c7178d57c [ 592.362176][T23421] RDX: 000000000000000f RSI: 00007f7c715f70a0 RDI: 0000000000000003 [ 592.362188][T23421] RBP: 00007f7c715f7090 R08: 0000000000000000 R09: 0000000000000000 [ 592.362207][T23421] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 592.362219][T23421] R13: 0000000000000000 R14: 00007f7c719b5fa0 R15: 00007ffd1473d828 [ 592.362255][T23421] [ 593.169567][T23457] netlink: 'syz.1.5294': attribute type 5 has an invalid length. [ 594.349476][T23516] __nla_validate_parse: 9 callbacks suppressed [ 594.349491][T23516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5312'. [ 594.626203][T23526] erspan0: entered promiscuous mode [ 594.637323][T23528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5314'. [ 594.643815][T23526] erspan0: entered allmulticast mode [ 594.925720][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5320'. [ 594.968236][T23549] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5320'. [ 594.983254][T23554] validate_nla: 6 callbacks suppressed [ 594.983273][T23554] netlink: 'syz.3.5322': attribute type 1 has an invalid length. [ 595.008300][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5320'. [ 595.038596][T23549] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5320'. [ 595.065806][T23549] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5320'. [ 595.115128][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5321'. [ 595.320568][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 595.514666][T12634] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.756838][T23589] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.5331'. [ 595.783984][T23589] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 595.807188][T23585] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5329'. [ 596.105879][ T5839] block nbd2: Receive control failed (result -32) [ 596.134732][T23605] netlink: 'syz.1.5338': attribute type 3 has an invalid length. [ 597.354214][T23655] netlink: 'syz.0.5357': attribute type 4 has an invalid length. [ 597.418577][T23655] netlink: 'syz.0.5357': attribute type 4 has an invalid length. [ 597.699010][T23673] tipc: Enabling of bearer rejected, failed to enable media [ 598.053728][T23685] sctp: [Deprecated]: syz.2.5368 (pid 23685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.053728][T23685] Use struct sctp_sack_info instead [ 598.542871][T23710] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 598.573213][T23710] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 598.700589][T23720] netlink: 'syz.5.5379': attribute type 11 has an invalid length. [ 598.713752][T23720] netlink: 'syz.5.5379': attribute type 11 has an invalid length. [ 599.232470][T23747] tipc: Enabled bearer , priority 10 [ 599.717535][T23780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.350066][T15231] tipc: Node number set to 2526320262 [ 600.357760][T23793] tipc: Enabled bearer , priority 0 [ 600.370599][T23803] syzkaller0: entered promiscuous mode [ 600.382211][T23803] syzkaller0: entered allmulticast mode [ 600.497282][T23803] tipc: Resetting bearer [ 600.590166][T23792] tipc: Resetting bearer [ 600.684844][T23792] tipc: Disabling bearer [ 600.755815][T23836] netlink: 'syz.5.5410': attribute type 19 has an invalid length. [ 601.163239][T23858] __nla_validate_parse: 15 callbacks suppressed [ 601.163260][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5416'. [ 601.168708][T23850] lo speed is unknown, defaulting to 1000 [ 601.854391][T23877] IPVS: set_ctl: invalid protocol: 704 0.32.0.0:5120 [ 601.913176][T23881] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5423'. [ 602.164913][T23850] hsr0 speed is unknown, defaulting to 1000 [ 602.173016][T23850] vxcan1 speed is unknown, defaulting to 1000 [ 602.872542][T23912] : entered promiscuous mode [ 603.382431][T23927] tipc: Enabled bearer , priority 0 [ 603.398302][T23927] syzkaller0: MTU too low for tipc bearer [ 603.419878][T23927] tipc: Disabling bearer [ 603.454438][T23931] netlink: 'syz.0.5436': attribute type 11 has an invalid length. [ 603.633707][T23942] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5438'. [ 604.124701][T23295] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 604.567592][T23966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5446'. [ 605.164438][T23998] netlink: 'syz.5.5453': attribute type 1 has an invalid length. [ 605.221067][T23998] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5453'. [ 605.232810][T24001] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5454'. [ 605.505413][T24015] bond4: (slave gretap1): Releasing active interface [ 605.521885][T15248] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 605.617505][T24015] bond0: (slave bond5): Releasing backup interface [ 605.886151][T24032] dvmrp0: entered allmulticast mode [ 605.934967][T24034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.042267][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 606.856743][T24083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5481'. [ 607.240688][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.040094][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 608.291837][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5491'. [ 608.455157][T24133] hsr_slave_1 (unregistering): left promiscuous mode [ 608.507682][T24145] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.5493'. [ 608.525176][T24146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5496'. [ 608.541696][T24149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5497'. [ 608.544968][T24137] pim6reg1: entered promiscuous mode [ 608.565315][T24137] pim6reg1: entered allmulticast mode [ 608.606755][T24149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 608.628628][T24149] gretap3: entered promiscuous mode [ 608.646399][T24149] gretap3: entered allmulticast mode [ 608.732996][T24154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5499'. [ 608.769167][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5499'. [ 608.903861][T24163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5503'. [ 608.915022][T24154] bridge_slave_1 (unregistering): left allmulticast mode [ 608.928649][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5502'. [ 608.934322][T24154] bridge_slave_1 (unregistering): left promiscuous mode [ 608.950111][T24163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5503'. [ 608.961319][T24154] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.412635][T24178] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 609.439867][T24178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.638629][T24192] netlink: 'syz.2.5512': attribute type 5 has an invalid length. [ 609.673063][T24194] netlink: zone id is out of range [ 609.688559][T24194] netlink: zone id is out of range [ 609.697689][T24194] netlink: zone id is out of range [ 609.718297][T24194] netlink: get zone limit has 8 unknown bytes [ 609.735106][T24189] lo speed is unknown, defaulting to 1000 [ 609.771225][T24194] netlink: 'syz.5.5511': attribute type 6 has an invalid length. [ 609.791692][T24194] netlink: 'syz.5.5511': attribute type 6 has an invalid length. [ 610.228360][T24219] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 610.267455][T24219] 0ªî{X¹¦: entered allmulticast mode [ 610.283248][T24219] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 610.395841][T24189] hsr0 speed is unknown, defaulting to 1000 [ 610.407648][T24189] vxcan1 speed is unknown, defaulting to 1000 [ 610.529918][T24228] netlink: 'syz.0.5523': attribute type 6 has an invalid length. [ 610.910789][T24239] tipc: Enabled bearer , priority 0 [ 610.946449][T24239] syzkaller0: entered promiscuous mode [ 610.983497][T24239] syzkaller0: entered allmulticast mode [ 611.126475][T24245] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 611.163918][T24239] tipc: Resetting bearer [ 611.223771][T24238] tipc: Resetting bearer [ 611.299464][T24238] tipc: Disabling bearer [ 611.460688][T24266] netlink: 'syz.0.5537': attribute type 9 has an invalid length. [ 611.921481][T24290] delete_channel: no stack [ 611.977711][T24293] __nla_validate_parse: 14 callbacks suppressed [ 611.977733][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5545'. [ 612.237181][T24302] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 612.544118][T24310] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 612.912864][T24323] netlink: 'syz.5.5556': attribute type 3 has an invalid length. [ 613.910475][T24355] only policy match revision 0 supported [ 613.910499][T24355] unable to load match [ 613.940565][T24359] only policy match revision 0 supported [ 613.940587][T24359] unable to load match [ 614.172842][T24344] netlink: 'syz.0.5560': attribute type 10 has an invalid length. [ 614.266510][T24381] rdma_rxe: rxe_newlink: failed to add lo [ 614.279486][T24382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5570'. [ 614.286632][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5571'. [ 614.291293][T24377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5560'. [ 614.335753][T24379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5570'. [ 614.480658][T24391] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5574'. [ 614.520771][T24392] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5574'. [ 614.648025][T24396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5576'. [ 614.660631][T24396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5576'. [ 614.990525][T24419] team0: Device vti0 is of different type [ 615.019414][T24421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5582'. [ 615.042077][T24421] openvswitch: netlink: Flow key attr not present in new flow. [ 615.262384][T24421] hsr_slave_1 (unregistering): left promiscuous mode [ 615.480011][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 615.495512][T24441] netlink: 'syz.0.5587': attribute type 1 has an invalid length. [ 615.728712][T24452] sctp: [Deprecated]: syz.2.5590 (pid 24452) Use of int in max_burst socket option deprecated. [ 615.728712][T24452] Use struct sctp_assoc_value instead [ 615.908487][T24452] syzkaller0: entered promiscuous mode [ 615.928080][T24452] syzkaller0: entered allmulticast mode [ 616.115455][T24467] netlink: 'syz.5.5594': attribute type 12 has an invalid length. [ 617.082030][T24507] __nla_validate_parse: 5 callbacks suppressed [ 617.082053][T24507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5608'. [ 617.762786][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 618.636377][T24501] kthread_run failed with err -4 [ 618.665303][T24503] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 618.848088][T24514] netlink: 'syz.2.5610': attribute type 1 has an invalid length. [ 618.879343][T24518] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5611'. [ 618.923158][T24514] 8021q: adding VLAN 0 to HW filter on device bond9 [ 619.019141][T24514] macvlan4: entered promiscuous mode [ 619.040421][T24514] macvlan4: entered allmulticast mode [ 619.064836][T24514] bond9: entered promiscuous mode [ 619.094895][T24514] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 619.133041][T24514] bond9: left promiscuous mode [ 619.176043][T24527] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5614'. [ 619.498503][T24547] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5618'. [ 619.748123][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5622'. [ 619.885263][T24562] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5625'. [ 619.974789][T24570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5627'. [ 620.016723][T24567] can: request_module (can-proto-0) failed. [ 620.382721][T24591] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5632'. [ 620.389661][T24596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.581361][T24602] IPVS: stopping backup sync thread 19810 ... [ 620.587467][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5635'. [ 620.623334][T24605] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 620.662113][T24603] netlink: 'syz.5.5635': attribute type 13 has an invalid length. [ 620.717947][T24603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5635'. [ 621.425534][T24657] IPVS: Error joining to the multicast group [ 622.250832][T24675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.446176][T24709] netlink: 'syz.2.5661': attribute type 4 has an invalid length. [ 622.619313][T24725] veth0_macvtap: left promiscuous mode [ 622.653378][T24725] macvtap0: entered allmulticast mode [ 622.694529][T24728] veth0: entered promiscuous mode [ 622.735497][T24727] veth0: left promiscuous mode [ 622.894819][T24736] netlink: 'syz.1.5669': attribute type 1 has an invalid length. [ 622.942373][T24736] __nla_validate_parse: 5 callbacks suppressed [ 622.942395][T24736] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5669'. [ 623.217345][T24748] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.379659][T24753] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5675'. [ 623.581989][T24759] netlink: 'syz.2.5680': attribute type 1 has an invalid length. [ 623.669340][T24759] bond10: entered promiscuous mode [ 623.676776][T24759] 8021q: adding VLAN 0 to HW filter on device bond10 [ 623.709711][T24770] 8021q: adding VLAN 0 to HW filter on device bond10 [ 623.717256][T24759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 623.724547][T24759] IPv6: NLM_F_CREATE should be set when creating new route [ 623.732109][T24759] IPv6: NLM_F_CREATE should be set when creating new route [ 623.741387][T24770] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 623.753681][T24770] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 623.773276][T24759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 623.807673][T24770] bond10: (slave wireguard0): making interface the new active one [ 623.834006][T24770] wireguard0: entered promiscuous mode [ 623.842668][T24770] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 623.844329][T24781] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 623.851999][T24772] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5681'. [ 623.866063][T24781] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 623.931641][T24781] netlink: 'syz.3.5681': attribute type 1 has an invalid length. [ 623.963309][T24781] netlink: 'syz.3.5681': attribute type 2 has an invalid length. [ 624.036966][T24781] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5681'. [ 624.361500][T24803] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5690'. [ 624.388865][T24807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5688'. [ 624.411429][T24806] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5691'. [ 624.426606][T24808] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 624.450630][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.605032][T24816] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5693'. [ 624.742046][T24822] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5694'. [ 624.957461][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 625.364595][T24860] netlink: 'syz.1.5705': attribute type 10 has an invalid length. [ 625.577010][T24858] tipc: Enabled bearer , priority 0 [ 625.606159][T24858] syzkaller0: entered promiscuous mode [ 625.612750][T24867] sctp: [Deprecated]: syz.0.5706 (pid 24867) Use of int in max_burst socket option. [ 625.612750][T24867] Use struct sctp_assoc_value instead [ 625.630243][T24858] syzkaller0: entered allmulticast mode [ 625.723185][T24858] tipc: Resetting bearer [ 625.730884][T24868] tipc: Enabling of bearer rejected, failed to enable media [ 625.829072][T24857] tipc: Resetting bearer [ 625.901281][T24857] tipc: Disabling bearer [ 626.343178][T24897] netlink: 'syz.3.5711': attribute type 1 has an invalid length. [ 626.385878][T24899] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 626.399150][T24897] netlink: 'syz.3.5711': attribute type 1 has an invalid length. [ 626.461670][T24899] bridge: RTM_NEWNEIGH with invalid ether address [ 626.712984][T24910] netlink: 'syz.0.5718': attribute type 1 has an invalid length. [ 626.730173][T24910] netlink: 'syz.0.5718': attribute type 2 has an invalid length. [ 626.741838][T24910] netlink: 'syz.0.5718': attribute type 1 has an invalid length. [ 627.317567][T24946] siw: device registration error -23 [ 627.925358][T24967] lo speed is unknown, defaulting to 1000 [ 628.304782][T25005] __nla_validate_parse: 7 callbacks suppressed [ 628.304804][T25005] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5745'. [ 628.397990][T25008] rdma_op ffff88802e39c9f0 conn xmit_rdma 0000000000000000 [ 628.425143][T25012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5747'. [ 628.704343][T25009] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5745'. [ 628.741875][T24967] hsr0 speed is unknown, defaulting to 1000 [ 628.785697][T24967] vxcan1 speed is unknown, defaulting to 1000 [ 628.859614][T25027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5750'. [ 628.946609][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5751'. [ 629.239258][T25033] syzkaller0: entered promiscuous mode [ 629.255274][T25033] syzkaller0: entered allmulticast mode [ 630.849994][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 631.913987][T25057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5757'. [ 632.081876][T25063] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 632.109377][T25068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5761'. [ 632.285264][T25068] vlan2: entered allmulticast mode [ 632.291645][T25068] veth1: entered allmulticast mode [ 632.301568][T25076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5764'. [ 632.331004][T25068] bridge9: port 1(vlan2) entered blocking state [ 632.347845][T25068] bridge9: port 1(vlan2) entered disabled state [ 632.394464][T25068] vlan2: entered promiscuous mode [ 632.413295][T25068] veth1: entered promiscuous mode [ 632.657389][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 632.771630][T25101] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5770'. [ 632.806681][T25104] netlink: 'syz.0.5771': attribute type 10 has an invalid length. [ 632.909002][T25104] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 632.947741][T25105] veth9: entered allmulticast mode [ 633.313420][T25129] C: renamed from lo [ 633.367943][T25136] __nla_validate_parse: 3 callbacks suppressed [ 633.367962][T25136] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5780'. [ 633.387821][T25136] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5780'. [ 633.442623][T25139] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 633.748388][T25147] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 634.290839][T25162] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 634.557020][T25176] netlink: 191164 bytes leftover after parsing attributes in process `syz.5.5791'. [ 634.732764][T25183] syzkaller1: entered promiscuous mode [ 634.738283][T25183] syzkaller1: entered allmulticast mode [ 634.873946][T25188] veth0: entered promiscuous mode [ 634.901069][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5797'. [ 635.465167][T25219] netlink: 'syz.5.5803': attribute type 4 has an invalid length. [ 635.725525][T25231] sit0: entered allmulticast mode [ 635.890500][T25246] netlink: 'syz.5.5812': attribute type 6 has an invalid length. [ 635.961945][T25248] netlink: 'syz.5.5812': attribute type 6 has an invalid length. [ 636.123661][T25255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.147165][T25255] bond0: (slave rose0): Enslaving as an active interface with an up link [ 636.676187][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'. [ 636.734475][T25298] netlink: 'syz.1.5826': attribute type 4 has an invalid length. [ 636.882473][T25308] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 636.921738][T25309] netlink: 'syz.5.5830': attribute type 4 has an invalid length. [ 636.923152][T25308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5829'. [ 636.961789][T25309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5830'. [ 636.992841][T25309] netlink: 'syz.5.5830': attribute type 26 has an invalid length. [ 637.016563][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5830'. [ 637.499236][T25336] netlink: 'syz.0.5837': attribute type 2 has an invalid length. [ 637.775342][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f627400: rx timeout, send abort [ 637.783756][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565c0c00: rx timeout, send abort [ 637.792347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f627400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 637.806770][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880565c0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 637.978928][T25357] tipc: Enabled bearer , priority 0 [ 637.997762][T25357] syzkaller0: entered promiscuous mode [ 638.009943][T25357] syzkaller0: entered allmulticast mode [ 638.046057][T25357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5847'. [ 638.104495][T25357] tipc: Resetting bearer [ 638.131786][T25357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.199067][T25373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5852'. [ 638.211825][T25370] veth7: entered allmulticast mode [ 638.371757][T25355] tipc: Resetting bearer [ 638.458375][T25355] tipc: Disabling bearer [ 638.856472][T25403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5860'. [ 638.875018][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5861'. [ 638.891753][T25407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5861'. [ 639.190096][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5865'. [ 639.203254][T25424] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5868'. [ 639.211278][T25422] chnl_net:caif_netlink_parms(): no params data found [ 639.277702][T25427] IPVS: ip_vs_edit_dest(): server weight less than zero [ 639.393959][T25427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5870'. [ 639.412649][T25427] nbd: must specify at least one socket [ 640.052892][T25464] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5879'. [ 640.156502][T25473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5881'. [ 640.479886][T25476] macsec0: entered promiscuous mode [ 640.486704][T25478] veth1_macvtap: entered promiscuous mode [ 640.494783][T25478] veth1_macvtap: entered allmulticast mode [ 640.501339][T25478] macsec0: left promiscuous mode [ 640.507245][T25478] macsec0: left allmulticast mode [ 640.512762][T25478] veth1_macvtap: left allmulticast mode [ 640.869243][T25498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5886'. [ 641.271866][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5886'. [ 641.405231][T25519] netlink: 'syz.5.5892': attribute type 6 has an invalid length. [ 641.449424][T25520] netlink: 'syz.5.5892': attribute type 6 has an invalid length. [ 641.863172][T25549] netlink: 'syz.1.5901': attribute type 13 has an invalid length. [ 642.121360][T25557] netlink: 'syz.3.5904': attribute type 30 has an invalid length. [ 642.164647][T25557] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 642.193724][T25557] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 642.573080][T25576] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 642.581568][T25576] netlink: 'syz.3.5910': attribute type 2 has an invalid length. [ 642.589329][T25576] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 642.616271][T25576] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 642.640312][T25576] netlink: 'syz.3.5910': attribute type 1 has an invalid length. [ 642.661381][T25576] netlink: 'syz.3.5910': attribute type 2 has an invalid length. [ 642.855108][T25596] IPVS: length: 12 != 8 [ 643.145249][T25618] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 643.175564][T25608] 8021q: adding VLAN 0 to HW filter on device bond8 [ 643.225938][T25623] macvlan3: entered promiscuous mode [ 643.234646][T25623] macvlan3: entered allmulticast mode [ 643.250398][T25623] bond8: entered promiscuous mode [ 643.257825][T25623] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 643.359333][T25623] bond8: left promiscuous mode [ 643.726350][T25641] tipc: Enabled bearer , priority 10 [ 644.215193][T25670] 8021q: adding VLAN 0 to HW filter on device bond12 [ 644.269576][T25675] bond12: (slave gretap0): making interface the new active one [ 644.289384][T25675] bond12: (slave gretap0): Enslaving as an active interface with an up link [ 644.571411][T25689] __nla_validate_parse: 11 callbacks suppressed [ 644.571433][T25689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5942'. [ 644.772562][T25694] sctp: [Deprecated]: syz.5.5943 (pid 25694) Use of int in max_burst socket option deprecated. [ 644.772562][T25694] Use struct sctp_assoc_value instead [ 645.024599][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5944'. [ 645.281577][T25701] syzkaller0: entered promiscuous mode [ 645.287106][T25701] syzkaller0: entered allmulticast mode [ 645.427637][T25714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5948'. [ 645.677551][T25722] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5948'. [ 645.936119][T25734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5952'. [ 646.037848][T25737] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5952'. [ 646.098876][T25737] nbd: couldn't find device at index 1048576 [ 646.141664][T25741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.788369][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5959'. [ 646.907725][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.910332][T25768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5961'. [ 646.917578][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.933379][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.941695][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.952068][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.961675][T25768] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5961'. [ 647.023359][T25769] lo speed is unknown, defaulting to 1000 [ 647.423606][T25781] validate_nla: 6 callbacks suppressed [ 647.423625][T25781] netlink: 'syz.2.5965': attribute type 1 has an invalid length. [ 647.593362][T25781] 8021q: adding VLAN 0 to HW filter on device bond13 [ 647.636535][T25790] macvtap1: entered promiscuous mode [ 647.642460][T25790] bond13: entered promiscuous mode [ 647.654953][T25790] macvtap1: entered allmulticast mode [ 647.679417][T25790] bond13: entered allmulticast mode [ 647.697699][T25790] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 647.731616][T25769] hsr0 speed is unknown, defaulting to 1000 [ 647.800735][T25769] vxcan1 speed is unknown, defaulting to 1000 [ 648.155633][T25812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 648.500872][T25832] netlink: 'syz.1.5978': attribute type 24 has an invalid length. [ 648.559116][T25833] sctp: [Deprecated]: syz.1.5978 (pid 25833) Use of int in maxseg socket option. [ 648.559116][T25833] Use struct sctp_assoc_value instead [ 648.720052][T25836] netlink: 'syz.5.5979': attribute type 1 has an invalid length. [ 648.786489][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 648.984558][T25839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 649.000705][ T5842] Bluetooth: hci2: command tx timeout [ 649.008346][T25839] bond4: (slave bond5): making interface the new active one [ 649.022001][T25839] bond4: (slave bond5): Enslaving as an active interface with an up link [ 649.037913][T25847] netlink: 'syz.0.5982': attribute type 10 has an invalid length. [ 649.294296][T25862] tipc: Enabling of bearer rejected, failed to enable media [ 649.387354][T25871] dvmrp1: left allmulticast mode [ 649.443228][T25874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.482681][T25877] netlink: 'syz.0.5987': attribute type 4 has an invalid length. [ 649.566011][T25769] chnl_net:caif_netlink_parms(): no params data found [ 649.899280][T25889] __nla_validate_parse: 3 callbacks suppressed [ 649.899300][T25889] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5990'. [ 650.226458][T25769] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.260727][T25769] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.269518][T25769] bridge_slave_0: entered allmulticast mode [ 650.283489][T25769] bridge_slave_0: entered promiscuous mode [ 650.308977][T25769] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.324442][T25769] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.342044][T25769] bridge_slave_1: entered allmulticast mode [ 650.361957][T25769] bridge_slave_1: entered promiscuous mode [ 650.552517][T25921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5997'. [ 650.608445][T25769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.664768][T25769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.684026][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5998'. [ 650.695887][T25925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.905511][T25769] team0: Port device team_slave_0 added [ 650.924921][T25769] team0: Port device team_slave_1 added [ 651.081401][ T5842] Bluetooth: hci2: command tx timeout [ 651.124242][T25769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.149876][T25769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.239580][T25769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.288762][T25769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.309885][T25769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.341464][T25769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.429536][T25960] openvswitch: netlink: Missing valid actions attribute. [ 651.436794][T25960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.530253][T25769] hsr_slave_0: entered promiscuous mode [ 651.547419][T25769] hsr_slave_1: entered promiscuous mode [ 651.674918][T25969] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6010'. [ 651.850776][T25970] delete_channel: no stack [ 652.022051][T25976] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.6014'. [ 652.032660][T25976] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.6014'. [ 652.050756][T25977] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.6014'. [ 652.060690][T25977] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.6014'. [ 652.225348][T25985] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 652.334504][T25994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6017'. [ 652.388546][T25994] bond0: entered promiscuous mode [ 652.420702][T25994] bond_slave_0: entered promiscuous mode [ 652.439004][T25994] bond_slave_1: entered promiscuous mode [ 652.457234][T25994] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 652.468618][T25994] bond0: left promiscuous mode [ 652.475776][T25994] bond_slave_0: left promiscuous mode [ 652.481947][T25994] bond_slave_1: left promiscuous mode [ 652.487825][T25994] mac80211_hwsim hwsim44 wlan1: left promiscuous mode [ 652.709304][T26006] netlink: 'syz.2.6020': attribute type 4 has an invalid length. [ 652.753954][T26006] tipc: Enabled bearer , priority 0 [ 652.772990][T26006] syzkaller0: entered promiscuous mode [ 652.778576][T26006] syzkaller0: entered allmulticast mode [ 652.807787][T26013] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6023'. [ 652.820304][T26012] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 652.848360][T26012] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 652.961708][T26006] netlink: 'syz.2.6020': attribute type 4 has an invalid length. [ 652.978336][T26016] tipc: Resetting bearer [ 653.063958][T26005] tipc: Resetting bearer [ 653.124656][T26005] tipc: Disabling bearer [ 653.161385][ T5842] Bluetooth: hci2: command tx timeout [ 653.230653][T26029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.317555][T26029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.365174][T26035] ------------[ cut here ]------------ [ 653.371277][T26035] WARNING: CPU: 0 PID: 26035 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 653.381319][T26035] Modules linked in: [ 653.385533][T26035] CPU: 0 UID: 0 PID: 26035 Comm: syz.2.6028 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 653.398375][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.408956][T26035] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 653.409361][T25769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 653.415401][T26035] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 89 8c 00 cc e8 12 8d d9 f6 90 0f 0b 90 eb e1 e8 07 8d d9 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 653.415441][T26035] RSP: 0018:ffffc9000ce06f70 EFLAGS: 00010283 [ 653.415467][T26035] RAX: ffffffff8ae623a9 RBX: ffff88807e998000 RCX: 0000000000080000 [ 653.415486][T26035] RDX: ffffc90012143000 RSI: 00000000000003d2 RDI: 00000000000003d3 [ 653.415503][T26035] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae61ec3 [ 653.415519][T26035] R10: dffffc0000000000 R11: ffffed100fd33031 R12: 1ffff1100fd3300a [ 653.415537][T26035] R13: ffff888032160e40 R14: 0000000000000001 R15: ffffffff8ae61ec3 [ 653.415554][T26035] FS: 00007fa91d7f66c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 653.415574][T26035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.507038][T26035] CR2: 00007fa91f974620 CR3: 00000000417a0000 CR4: 00000000003526f0 [ 653.515367][T26035] Call Trace: [ 653.518682][T26035] [ 653.521701][T26035] rate_control_rate_init_all_links+0x109/0x1a0 [ 653.527998][T26035] sta_apply_auth_flags+0x1c2/0x400 [ 653.533594][T26035] sta_apply_parameters+0xe4b/0x15b0 [ 653.538940][T26035] ieee80211_add_station+0x424/0x6a0 [ 653.544309][T26035] rdev_add_station+0x108/0x290 [ 653.549214][T26035] nl80211_new_station+0x1755/0x1b70 [ 653.554621][T26035] ? __pfx_nl80211_new_station+0x10/0x10 [ 653.560924][T26035] ? netdev_run_todo+0xe1d/0xea0 [ 653.565938][T26035] ? nl80211_pre_doit+0x4f1/0x930 [ 653.571101][T26035] genl_family_rcv_msg_doit+0x215/0x300 [ 653.576689][T26035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 653.582870][T26035] ? bpf_lsm_capable+0x9/0x20 [ 653.587588][T26035] ? security_capable+0x7e/0x2e0 [ 653.592871][T26035] genl_rcv_msg+0x60e/0x790 [ 653.597418][T26035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.603280][T26035] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 653.609168][T26035] ? __pfx_nl80211_new_station+0x10/0x10 [ 653.614916][T26035] ? __pfx_nl80211_post_doit+0x10/0x10 [ 653.620690][T26035] ? __asan_memcpy+0x40/0x70 [ 653.625329][T26035] ? __pfx_ref_tracker_free+0x10/0x10 [ 653.630794][T26035] netlink_rcv_skb+0x208/0x470 [ 653.635590][T26035] ? __lock_acquire+0xab9/0xd20 [ 653.640954][T26035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.646029][T26035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.651697][T26035] ? down_read+0x1ad/0x2e0 [ 653.656144][T26035] genl_rcv+0x28/0x40 [ 653.660244][T26035] netlink_unicast+0x82c/0x9e0 [ 653.665060][T26035] ? __pfx_netlink_unicast+0x10/0x10 [ 653.670436][T26035] ? netlink_sendmsg+0x642/0xb30 [ 653.675409][T26035] ? skb_put+0x11b/0x210 [ 653.679681][T26035] netlink_sendmsg+0x805/0xb30 [ 653.684536][T26035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.690239][T26035] ? aa_sock_msg_perm+0x94/0x160 [ 653.695225][T26035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.700588][T26035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.706624][T26035] __sock_sendmsg+0x21c/0x270 [ 653.711924][T26035] ____sys_sendmsg+0x505/0x830 [ 653.716733][T26035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.722411][T26035] ? import_iovec+0x74/0xa0 [ 653.726970][T26035] ___sys_sendmsg+0x21f/0x2a0 [ 653.731739][T26035] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.737014][T26035] ? __fget_files+0x2a/0x420 [ 653.741680][T26035] ? __fget_files+0x3a0/0x420 [ 653.746458][T26035] __x64_sys_sendmsg+0x19b/0x260 [ 653.753246][T26035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.758777][T26035] ? rcu_is_watching+0x15/0xb0 [ 653.763661][T26035] ? do_syscall_64+0xbe/0x3b0 [ 653.768390][T26035] do_syscall_64+0xfa/0x3b0 [ 653.773011][T26035] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.778255][T26035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.784676][T26035] ? clear_bhb_loop+0x60/0xb0 [ 653.789409][T26035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.795385][T26035] RIP: 0033:0x7fa91f98eb69 [ 653.799956][T26035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.820681][T26035] RSP: 002b:00007fa91d7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.829232][T26035] RAX: ffffffffffffffda RBX: 00007fa91fbb5fa0 RCX: 00007fa91f98eb69 [ 653.837793][T26035] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 653.845853][T26035] RBP: 00007fa91fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 653.854146][T26035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.862196][T26035] R13: 0000000000000000 R14: 00007fa91fbb5fa0 R15: 00007ffc1b473948 [ 653.870254][T26035] [ 653.873298][T26035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 653.880609][T26035] CPU: 0 UID: 0 PID: 26035 Comm: syz.2.6028 Not tainted 6.16.0-syzkaller-06589-g010510128873 #0 PREEMPT(full) [ 653.892348][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.902412][T26035] Call Trace: [ 653.905707][T26035] [ 653.908646][T26035] dump_stack_lvl+0x99/0x250 [ 653.913250][T26035] ? __asan_memcpy+0x40/0x70 [ 653.917850][T26035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.923082][T26035] ? __pfx__printk+0x10/0x10 [ 653.927695][T26035] panic+0x2db/0x790 [ 653.931609][T26035] ? __pfx_panic+0x10/0x10 [ 653.936056][T26035] __warn+0x31b/0x4b0 [ 653.940038][T26035] ? rate_control_rate_init+0x64a/0x6e0 [ 653.945606][T26035] ? rate_control_rate_init+0x64a/0x6e0 [ 653.951168][T26035] report_bug+0x2be/0x4f0 [ 653.955509][T26035] ? rate_control_rate_init+0x64a/0x6e0 [ 653.961072][T26035] ? rate_control_rate_init+0x64a/0x6e0 [ 653.966640][T26035] ? rate_control_rate_init+0x64c/0x6e0 [ 653.972209][T26035] handle_bug+0x84/0x160 [ 653.976474][T26035] exc_invalid_op+0x1a/0x50 [ 653.980985][T26035] asm_exc_invalid_op+0x1a/0x20 [ 653.985847][T26035] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 653.992024][T26035] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 89 8c 00 cc e8 12 8d d9 f6 90 0f 0b 90 eb e1 e8 07 8d d9 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 654.011662][T26035] RSP: 0018:ffffc9000ce06f70 EFLAGS: 00010283 [ 654.017772][T26035] RAX: ffffffff8ae623a9 RBX: ffff88807e998000 RCX: 0000000000080000 [ 654.025759][T26035] RDX: ffffc90012143000 RSI: 00000000000003d2 RDI: 00000000000003d3 [ 654.033741][T26035] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae61ec3 [ 654.041723][T26035] R10: dffffc0000000000 R11: ffffed100fd33031 R12: 1ffff1100fd3300a [ 654.049700][T26035] R13: ffff888032160e40 R14: 0000000000000001 R15: ffffffff8ae61ec3 [ 654.057685][T26035] ? rate_control_rate_init+0x163/0x6e0 [ 654.063262][T26035] ? rate_control_rate_init+0x163/0x6e0 [ 654.068822][T26035] ? rate_control_rate_init+0x649/0x6e0 [ 654.074417][T26035] rate_control_rate_init_all_links+0x109/0x1a0 [ 654.080684][T26035] sta_apply_auth_flags+0x1c2/0x400 [ 654.085907][T26035] sta_apply_parameters+0xe4b/0x15b0 [ 654.091229][T26035] ieee80211_add_station+0x424/0x6a0 [ 654.096535][T26035] rdev_add_station+0x108/0x290 [ 654.101400][T26035] nl80211_new_station+0x1755/0x1b70 [ 654.106712][T26035] ? __pfx_nl80211_new_station+0x10/0x10 [ 654.112351][T26035] ? netdev_run_todo+0xe1d/0xea0 [ 654.117320][T26035] ? nl80211_pre_doit+0x4f1/0x930 [ 654.122359][T26035] genl_family_rcv_msg_doit+0x215/0x300 [ 654.127924][T26035] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 654.134009][T26035] ? bpf_lsm_capable+0x9/0x20 [ 654.138696][T26035] ? security_capable+0x7e/0x2e0 [ 654.143656][T26035] genl_rcv_msg+0x60e/0x790 [ 654.148170][T26035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.153198][T26035] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 654.158577][T26035] ? __pfx_nl80211_new_station+0x10/0x10 [ 654.164219][T26035] ? __pfx_nl80211_post_doit+0x10/0x10 [ 654.169692][T26035] ? __asan_memcpy+0x40/0x70 [ 654.174295][T26035] ? __pfx_ref_tracker_free+0x10/0x10 [ 654.179678][T26035] netlink_rcv_skb+0x208/0x470 [ 654.184454][T26035] ? __lock_acquire+0xab9/0xd20 [ 654.189316][T26035] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.194350][T26035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.199671][T26035] ? down_read+0x1ad/0x2e0 [ 654.204096][T26035] genl_rcv+0x28/0x40 [ 654.208084][T26035] netlink_unicast+0x82c/0x9e0 [ 654.212867][T26035] ? __pfx_netlink_unicast+0x10/0x10 [ 654.218165][T26035] ? netlink_sendmsg+0x642/0xb30 [ 654.223113][T26035] ? skb_put+0x11b/0x210 [ 654.227366][T26035] netlink_sendmsg+0x805/0xb30 [ 654.232225][T26035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.237538][T26035] ? aa_sock_msg_perm+0x94/0x160 [ 654.242491][T26035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.247796][T26035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.253093][T26035] __sock_sendmsg+0x21c/0x270 [ 654.257785][T26035] ____sys_sendmsg+0x505/0x830 [ 654.262557][T26035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.267857][T26035] ? import_iovec+0x74/0xa0 [ 654.272372][T26035] ___sys_sendmsg+0x21f/0x2a0 [ 654.277060][T26035] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.282297][T26035] ? __fget_files+0x2a/0x420 [ 654.286889][T26035] ? __fget_files+0x3a0/0x420 [ 654.291577][T26035] __x64_sys_sendmsg+0x19b/0x260 [ 654.296527][T26035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.302010][T26035] ? rcu_is_watching+0x15/0xb0 [ 654.306793][T26035] ? do_syscall_64+0xbe/0x3b0 [ 654.311485][T26035] do_syscall_64+0xfa/0x3b0 [ 654.316006][T26035] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.321214][T26035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.327283][T26035] ? clear_bhb_loop+0x60/0xb0 [ 654.331967][T26035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.337863][T26035] RIP: 0033:0x7fa91f98eb69 [ 654.342280][T26035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.361891][T26035] RSP: 002b:00007fa91d7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.370312][T26035] RAX: ffffffffffffffda RBX: 00007fa91fbb5fa0 RCX: 00007fa91f98eb69 [ 654.378290][T26035] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 654.386268][T26035] RBP: 00007fa91fa11df1 R08: 0000000000000000 R09: 0000000000000000 [ 654.394246][T26035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.402223][T26035] R13: 0000000000000000 R14: 00007fa91fbb5fa0 R15: 00007ffc1b473948 [ 654.410212][T26035] [ 654.413549][T26035] Kernel Offset: disabled [ 654.417956][T26035] Rebooting in 86400 seconds..