last executing test programs: 1.867731007s ago: executing program 0 (id=2188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) 1.666339908s ago: executing program 1 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)="c03a3983713075351d2383e4522d0e1624b0244b899c80566a4e47d48d55a351311544a16282e8f9f91f1e4ffa2011311b168348053a7fe4cf055cf326da623d6d138054eee3373ccb7bcf8e521c05a2f01d98471e879eecbc140a9cc57cfc9434b1042e20f55e3519b7fd737b5e0c3fc676a24e4e5e", 0x76}, {&(0x7f0000000400)="3ddf5ec1c3d94ca464f166d73f0137be207c5a32ed611d7090c757c27ff6444ede504767859c3a0781dbbfd9929f90d506efeb4a11d9b4fd0fded0978e748c04baeecbfc35c1f6730d5c71ae65072824932da73b2624a7b974d90415ae8b93cf1fe7c32adea76c121027c13e52d2773aecd84cafa3fb4652ce18bcb9e9", 0x7d}], 0x2) socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r3, @ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x8e0}, 0x4004) 1.510400322s ago: executing program 1 (id=2194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004503002c000000000004907800000000e000000100004e2000189078040000000000000000000000000000008dd488fb6a04c29786fbbb5fb4d20ccf"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0xf0, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eec8eed1c4d7e2ad3349115d4f99198fb974f3ee33b6bc9b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8dfdc9a13f51608e26bff173a362dbb40f9c9ec1356fa9e9"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "37f88404b8069a7f6cd2ea3c08b3fb49dd1e4e64db611f3d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "df5493c6e342ce20f0704514f7c29bc33bdb6b8f31951f5c"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x5}, 0x4084084) 1.448250553s ago: executing program 0 (id=2196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r0, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1.407925117s ago: executing program 4 (id=2198): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000ff89107d0000000000750500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xd96}, 0x10}, 0x94) 1.310247494s ago: executing program 1 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {}, {0xfff2, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) close(r5) write$cgroup_int(r5, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r7, 0x1, 0x38, 0x0, &(0x7f0000000240)) recvfrom$inet6(r5, &(0x7f0000000000)=""/246, 0xf6, 0x60002000, &(0x7f0000000100)={0xa, 0x4e23, 0xf5e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {}, {0xfff2, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) pipe(&(0x7f0000000180)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) close(r5) (async) write$cgroup_int(r5, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_linger(r7, 0x1, 0x38, 0x0, &(0x7f0000000240)) (async) recvfrom$inet6(r5, &(0x7f0000000000)=""/246, 0xf6, 0x60002000, &(0x7f0000000100)={0xa, 0x4e23, 0xf5e, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async) 1.277423223s ago: executing program 4 (id=2200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000081c0)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa, 0x4}, {0x2, 0xffff}, {0xfff3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40890) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000010000108000000435f00000000000000", @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800600018008001b000600000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.248081154s ago: executing program 0 (id=2201): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483c0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 1.172305223s ago: executing program 2 (id=2203): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004480)="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", 0x7f0, 0x40000, 0x0, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x900, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.109011918s ago: executing program 3 (id=2204): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_OIF={0x8, 0x5, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000000c0)={0x8, 'veth1\x00', {'syzkaller1\x00'}, 0x7}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) 1.095089416s ago: executing program 2 (id=2205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./cgroup/cgroup.procs/../file0\x00', 0x0, 0x8}, 0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000800)) 970.324679ms ago: executing program 0 (id=2206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000038000000030a01040000000000000000010000000900030073797a31000000000900010073797a31000000000c0004"], 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000d80)={&(0x7f0000000b40), 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x18c, r3, 0x403, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xf}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1b3d}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfffffffffffffff9}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x7fffffff}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x28044001}, 0x20010004) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) 961.794748ms ago: executing program 1 (id=2207): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000700000006000000000000010000000027001002006f5f5f003000753eb3cbc1f19b8ba29c7ce61071c3b5d00494132c4854abf2926ec8431ebdc15f56c4da8c64bfce4588b9ee340e909291d8e4793f8cdfa8043b2987aa0b3a4d8473c4b2533cee20b1d256b9"], 0x0, 0x2f, 0x0, 0x1, 0xd6f}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711016000068462e585a00000095000000000000005d4dcaf66215a7f41f93fff4ffcdb0498f0cfcec44"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r2 = socket$inet6(0xa, 0x805, 0x0) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x34, r7, 0x5, 0x70bd2d, 0xffffffec, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000880)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000001100)=ANY=[@ANYBLOB="dc0000001d00000826bd0100251c000000", @ANYRES32=r5, @ANYBLOB="400001031400030006000000010001003a01000056e9000008000d00010000003c000e80040002000500010005000000040002000400020005000100fa000000040002000400020005000100030000000500010080000000040002000a000100000000000000000014000100000000000000000000000000000000000a000100aaaaaaaaaa270000080009000400000008000100ac1414aa2c000e8005000100f7000000050001000a000000050001000600000004000200040002000500010004000000"], 0xdc}, 0x1, 0x0, 0x0, 0xe3968377856b611a}, 0x20000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=0x0, 0x12, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYRES32=r11, @ANYRES32=r13, @ANYRES64=r12], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYRES32=r11, @ANYRES32=r13, @ANYRES64=r12], 0x20) 960.264327ms ago: executing program 2 (id=2208): r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, 0x2, 0x1, 0x104, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x232}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}]}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0x0, 0xfffffff6, 0xdaa7, 0x8, 0x70000, 0x3, 0x20b, 0xa4, 0xc, 0x2]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x0, 0x4, 0x9, 0xe, 0x10000, 0x3, 0x9, 0x0, 0x7]}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x13}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x52}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x510}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x64}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x7fff, 0xffff0cb5, 0xf, 0x0, 0x7fe83179, 0x3e02]}]}, 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x22000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) 906.336357ms ago: executing program 3 (id=2209): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r4, r5, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4, r4}, 0x6) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0501fffffffffcdbdf252e00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200001000490008ac0f00"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd700000000000bc85000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000900000074000000080026008009000008009f0006000000"], 0x38}}, 0x20000000) 896.816013ms ago: executing program 4 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xd8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x64, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5a, 0x2, "39843dd44563878d5bdb29eaaa27b1173ab8d3fc7fa701500211615643ab927b7d8b49ef6ff37002275ada13cef4f876872aeb42ec3d1b0bf7df2b803329acc5966fb40dcc27cb0aa01a1a1dab13db4204f3cfb77462"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 754.191748ms ago: executing program 0 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x49) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "5fa57f815d114e3edef1ec8a2e6ab0700c8aa5da149ca4b53723e1bb723e724da95cb429569cdc070a2ae5afd98b74cdfe465b56ce50d40df5e968050ab1ee24f66193ff1b15dc7382073d6b59bef44e04d6bfc94d206322caf7e11005b5ce0cd59d78d16cad7a9b"}]}], {0x14}}, 0x10c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000010000000000000001410000001c7f7b00000000000000006574683a73797a6b616c6c6572300000000000"], 0x38}}, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, r9, 0x1, 0xfffffff7, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x100) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x4}}]}}}]}, 0x31}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080641007278650014003300767863616e3100"/56], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x50}}, 0x0) 752.686059ms ago: executing program 2 (id=2212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x734fbf90}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x21}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x97a9}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004814) (async) socketpair(0x26, 0x1, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@delnexthop={0x48, 0x69, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004080}, 0x5000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x4, 0x1, {{0x7, 0x4, 0x2, 0x2b, 0x1c, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x8, 0x9, 0x0, 0x9, [0x0]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_deladdr={0x34, 0x15, 0x0, 0x70bd2d, 0x25dfdbfd, {0xa, 0x78, 0x40, 0xfe, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x294, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4c}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x41) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x278, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x73}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcb3}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x150, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x8, 0x0, 0x6}, {0x2, 0x8, 0xf9, 0xfffffffa}, {0xc1, 0xfc, 0x2}, {0x5, 0xe, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x278}}, 0x4000040) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f00000029c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002980)={&(0x7f0000000fc0)={0x199c, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "aaabe4a09547"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x10}]}, @NL80211_ATTR_NAN_FUNC={0x18f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xf}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2e4, 0xe, 0x0, 0x1, [{0x80, 0x0, "2342f547631c1849de0b0e0bf33b020fec1d1c47a457f2d91c168f83f1550b9d577081f42863d9eab4d6c6f82bbabb7d4d155bf92515d33ff57704f48cfd32a444e8f2d3a7578f148ac337d743d92baffd67745f57fa66886217f037d40ed827f69588bfb3a4702923e24d6a16c0e1f31d692245e0988d4153ce91d3"}, {0x18, 0x0, "71e218245b7bdd8fdeffa9397b078de6ae55b563"}, {0x97, 0x0, "282d3c536449a2974e42064de312fb665d4fdfab9d50ad042c59aa390d15a10d1e820a9e7b320b1195ee01e6d3f4f116af5b374ca19fa9e0077773cb6787f56c8bfa91dfa7f7290523f612784ecfede286e56eaafeecf856abd0a8092378dfc10c6c16b24160362074122900098ef3ba47adf6f3302f21c9ff073c53be966b9492c794e764586087d13c90e5884220e02ffbb5"}, {0x64, 0x0, "7540a8e3c66fe8259f2806418ed70ff37977d4ef308121623935f13a899b992455f3d8a7a5d3849ab46266f22471d4ddbe420c9732da8a7a450ba8589da2064f8c5c34d665f9c9c7a699bf379c3f0d2a8ad7d6e5d6f4b57d0a24da5660fed271"}, {0x45, 0x0, "1264b011c0f9df6f81d275bdc5f0a7e810a00ad871ca8ddb5fd24d25f0c622e828725a28fd85f19128a98c7afb1406241a6a7472910ec03777e8b4175df3599696"}, {0x79, 0x0, "4c3d3c1604d2c74ad00ee8bba25974126d97bf0500bba260bc09d7210eb491fe1f3852d211a0f4642018460b20132a8fc51b6463e7e4a96db26d923374c6795ee1b7adf509d00d53db1cb9a59aac0343908f5dc654910b8da25fb944cb8c149c4b048eeb05dac716277f8114fed3d80b3aea110004"}, {0x85, 0x0, "ad5f315f5680e1b6adde8e6cb90ff1f184df92a5a89d6902118ef0256399fe704ff119fd3661b3f5f5128743b5c00ec11ad08fc0d1547ab5ea546824b0eca924cb6cba7197210cfba5e7c54458f94a57cbd69c885499248f6ce947d414c0562f4b279141ac7fa3b4d2f55b0dd995364c0b0bbfc53ebe67e4af92cbd25b94a14877"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148c, 0xd, 0x0, 0x1, [{0xef, 0x0, "6bb93633cba2f47ce4cf96c876b63a575443c1f043ce043d7f5d933d9c6fe556fe6a4b2e7135ba5429a21dc90bf82775f8d5e69040a75ea8e3d0fdc50080608efc8143d9bb63122630943de3ea87b863e94aa384dc714d9ccbb1fabf9b38fde497d583d13aa05f42206ae98a4d9a213174168d60394c7468a7df5549b111d876dd96a90cce885c187259399002c262985f2db5482241912f2115b3f4d4508e5588c8ec99867ea93f70b7c713e251c4ddcee0f8a01c2b462da5ef62d1aaa794c93db91d009e1edc658affef47be96634aa889e1abf330bac56d9cea051d46bb2182b741affa3015d3b15984"}, {0xdd, 0x0, "1ca2a8406a95fef4f320210098f32bbc996c887ffa819bd7858fd34266ffac99a831a9de1cdb42fe55569a23a4d689887d4409e4d96b405f657de384cfc51972d1fa7e51528ca02ec6bbb0de0082e0dc8d56c83f27d7778ed25f464a023c976461c4cc14e7a31eb480a5a7ab7baa8db91e8caa5f8db3935b505caf19f7ee0a0e848c39a3ea81ab7f554bfaafa6b1fd08161e8440cdcb7fe92e213e36005e06e247ebea8528882ef7c5759dc91f6088b6296bba57a7db855cbb35b2fef8623c932f50df14180792a71348c302fef452c8402e10b621ca8b788d"}, {0x5c, 0x0, "852336f6c90ff122fd6f0b329c5949cf24546f0b23e01c4221d4c2a4fe9dfa12594265377750701400a59482adfe2a44fb5afecd8f52653501b8658a422efb3ddbf001f266d3d7c657375fda29f8d1d2e8f36dbcf2ff0e67"}, {0x1004, 0x0, "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"}, {0xb0, 0x0, "423da58b05b0206779f31248628a032e8ea5c09fb50ba7929f06ab6e4c8aad6f0a4bb70b19d7e85e3717c8a40d0bbc53e5954f36a68fc0d21694c4959e57ef89e00da87864cc1c646cb837845e45040a508e7e7065c9405d3a4ff14a3135bf970fe1ac810fbe8eaf778c7f45799c29271a32ed3674000b9e4ee5ba08346e2ac78b537a3e96015b4c6041bb507dbdb958ed0bb0b84e84df8f2dea89e0ac1fdfdc7a9de6464107f2530c5840ac"}, {0xb, 0x0, "9453dcddfaa058"}, {0x23, 0x0, "dc26425f6163d8f0cfb1b92667578c4dd5ef5ce1dc6787f4fad28e844f5c91"}, {0x3e, 0x0, "f3dcb88e86b12dc7a5b137317f1050d89e5a3220749f467618f6f3a4e5aec15dbe94ba5d2e4f8bc546d118c18eeb5e72f5396e1c90a4be416994"}, {0xd2, 0x0, "b8a6c99a3df31a9b478228a24776534228798cfd59f7deb9cdfdb11083ec857df3811875b226b080b43d333aea48ac5904d4085b2af7314ab1a4080b35d1e07683e4371b9f855fad4ba1caf727ce0f4ad0c2089d922b1aba29d695fb4c94df4061b4d89fe10e8a141a2920d487214246f7de2445be2340ed1a781570b2afb434c0e93d0c9e68c8194db203052ae8709fa7e6315545189360cfc29cc598ec55cc5d48c382bc3e9f71c9db4b343591b30eb835ca1a39f062772efa12e95da0df5ebb684b855c16107e730c8139a6bc"}, {0x63, 0x0, "be53a574a190560c2bc97dd273554b62be34ec9dc7f35bc537fa7df6660567f27e5fce7a6715cbf55d8403146f0b306da6d2ce7091260cf2cd74092405ee957b072f02ef7664bf70b7589732be166dc1ec2a2b43fba2484d4c1f2dca4109f9"}]}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd0, 0xe, 0x0, 0x1, [{0xaf, 0x0, "3ec4ec6b9539006f1b4484ec274718feb4f6101681d43e1a9688ce21757b8951d2f27aa20708e8c4d6b0eb7e2ea2e1a1a9debebe2c76aa2354a0578911db87ada551fd74b6b6b904c23e5aa3d5dec503693ffd353aea7f808053684114d3c80aed4f081561c1146fff4a7e3783c8ddee5784e380a25f593f613374601c943cc3b8e94a90a717f9cc6a6b219a0a3ca63d68fcec2e598599e40e3acda0c646f881fad102948afca6d907a928"}, {0x1c, 0x0, "0890f6e41321c056c76940e34d1088a0ce6c584232745ff6"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x8c, 0xe, 0x0, 0x1, [{0x86, 0x0, "9df701e7e45ff9cb4d0a8de130b61b16f7a13669e70a5c719fe161ca72b914983bf132cdee28009eb3028e5d518fccadc9695f340d68e4d0187b9eb1089f14d217019c8207b815e4dec2df42e25f80dd99578cd4176693228628185334574e8403fe8e8d85db46ef259ea5de2295dfdd18a907d9d0aff75dfb818043263952ae5c32"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x70, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x54, 0xb, "4388f1fa6c2e8ef2e1824b54aa41027524d7ea5f450eddf71777586aa2e5a6511d867932835c81563bce59fc3f5b4bbab6a877bf02d356f4f06b011716ca2540cb3f8f13b959a7c84396969a81dfc903"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xf84}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}]}, 0x199c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x78, r9, 0x808, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20040180) syz_genetlink_get_family_id$team(&(0x7f0000002b80), r7) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff}) (async) r11 = getpid() (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003f00)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000004000)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004040)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000004140)=0xe8) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000044c0)={0x0}, &(0x7f0000004500)=0xc) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r16 = getuid() sendmsg$netlink(r0, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000002c00)={0x1190, 0x27, 0x4, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0xd8}, @nested={0x5d, 0xb6, 0x0, 0x1, [@generic="a993d3b3053dc2cd6bf08d50b5188fa60423b249fea173ef2081c09b9b79eff586d45d1693cb5cd7c9f09f7336717ac516636fdb8c03ef1981cf2d88eede91b5fe32aa0ef00e956564ad3871d309b9d57e03371540b67572fe"]}, @generic="24a0b41ea10dd68d10a8f8ed5e39c3b9aa4dcde4e859b3dfe16e4dc84caefbf723bb8e64ee7f3d5eb1fc0058ecf78fce35455cd5056a88a7e0364908530b74822bd87bf36a12a48735e68d2e842eecd27574451763a0573a5f0b739f38ff47bc8a535e15eb42774d32202417263276fc8f67ae0ef9e2b159189695e6fd4033d6a813e0f6cd05a6e1ee8d1ca501c8b3a99071c71328ab3dab86c804b012637e42ef210befbb3633ab86a90a8de149aa1aab0f44742a69e84f96e8ca8786642ecab1760686", @nested={0x1018, 0xf0, 0x0, 0x1, [@nested={0x4, 0x38}, @nested={0x4, 0x20}, @generic="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", @typed={0xc, 0x78, 0x0, 0x0, @u64=0xa21}]}, @generic="893660b54e0695404ae4efe5f0a40d29ee69252668e339c38e03dc8738a71e33802bf33170707a727c6648b2731220b5c2e40b6b3016735bac857538e491472a"]}, 0x1190}, {&(0x7f0000003dc0)={0x10, 0x1b, 0x100, 0x70bd25, 0x25dfdbfc}, 0x10}, {&(0x7f0000003e00)={0xac, 0x33, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@generic="75a5338a76f8fdcdcf5adbbdc69910301445f174cd16fd70f279471aa8864d45f97420991df2e1469af5cf04fe01353ceea3cc9ab1dc15212ef74e3f372e61691e9722e4be4aeec6b28ab0c424261d5340c3be57855794429df384b748e94a82df3a3c1e856fed8252a1c3896d2543de46feecdc5fc014917550c8313cdaa9003842348b4c66", @nested={0xc, 0xc1, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0xfb}]}, @typed={0x8, 0x2e, 0x0, 0x0, @pid=r11}]}, 0xac}, {&(0x7f0000003ec0)={0x10, 0x2e, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x10}, {&(0x7f0000004180)={0x318, 0x2a, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@generic="39a1dbb9f34214c3733857874a099a12b68407295e5524421b9682cddab6974c3d2669af2ed3ef191857146c4d4dd246a3c7317dc195aaec8786291739a45522f564d817136b6150807833d8f6b9c21e81bf9018bea33f6de5817abc4dc4bf96d58125af14c73e82fdf402eca791e194f076df828f78e384cde8ddd02a939b8aa311aaf3c288046f804a07c73b0abf5878f72316c2995b796596f5b62b5d20a060ff393b2b80c1e2ae8f7e895e6ad062542588c4c78f4f878fd01fa0021d297b2d9e38043c1b8b48ebc81b20", @nested={0x1b, 0x5e, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @uid=r12}, @typed={0x8, 0xbf, 0x0, 0x0, @uid=0xee01}, @generic="6b9af83a091218"]}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@empty}, @generic="898e7c5fd13bb75cbbf9cde75456060208031bafd42c0b724b4603af90079ae5d8eee7c526abbd4fefb78feedb9a4dde57b470822a73ef8964c22f894ec840589a15847c71149b0a9a72272ee646e48091ad1f7371b5778106a9bdb89b5fea2bf0e96e8e176dec8685f8860a03a8e73ae8b6aeba28554d3c82f2633d5483f18314cb44c1e8cc9c0ece5752b4f6e81131ecd22ece8dbdfc00c331baf07e67694117c58c802efca76c021e2219fa228c4a3ac3b6458e7063685300772bf23c6f750dd2031050eab01bf5daad20ef570ae083c9fb1c2067de9d0aa819311ec3ffa0f8958400a05a33370addf56051", @typed={0x6a, 0x129, 0x0, 0x0, @binary="7088efbfb929d170973ff6a090d25facc22cefdaa10c7f5907cf51a8b4932a1a072d76814e99074b19dde5bc225370a6f8b6177fa58a4afbdcf99c61201dadf6c7e9016e14f605f8a2039ad00705f74da620b0ff56f3fdf61347b32ddb90de62e9dce116ee60"}, @typed={0x8, 0xd5, 0x0, 0x0, @uid=r13}, @nested={0xa7, 0xf2, 0x0, 0x1, [@typed={0x4, 0xc1}, @typed={0x8, 0x46, 0x0, 0x0, @uid}, @generic="1a3c10e426a6b4294c3a459bc189f36176642e67f036f081938ed9481beb572fd2a9b41e99300b58cc3bc06afbc786d6b86923ff1a2c41814c1bc0f673295132aeb3a668913ee539f3e29c1d5ab5c1cc344f3030246c421af29502115420447e5c2c610ecb773046b41e37f374ca7c965181bdcd60e17aa6819327249340a7692f804a953649a1cc6b288848ee01f21486dee12f3316b5"]}]}, 0x318}, {&(0x7f0000004540)={0x100, 0x3a, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xe8, 0x54, 0x0, 0x1, [@nested={0x4, 0xcd}, @typed={0xdd, 0x65, 0x0, 0x0, @binary="c6a3246d06d32ba316aca35c32cd46143a4d60df0ea117912e0f79f9093734e411cc23dfee385907702a859d19dbb4155e43747cbdaab3659ac2234bcddd546e51a188821eb3ec30b5f955b27cbb7bb2695f2be816723e0c26bbbae60a6c5ed9e58a38c02d2d8176541fd36416e0b8c1af48c32df8914c6b2cd13ff1a255f52bc7634505705b2decbf71bfa53df770526bdc461e072fcd646eb437419294734c661cfcd5fe1de3adb515815ec6f6667a46dbc65e2e713607bb08bda8e955480b0c7c8ef8d0dec1ac3e584f786e2ab74676c0f2f1c6a1b460ac"}]}, @typed={0x8, 0x72, 0x0, 0x0, @pid=r14}]}, 0x100}], 0x6, &(0x7f00000046c0)=[@rights={{0x30, 0x1, 0x1, [r10, r2, r1, r10, r7, r15, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r16, 0xee01}}}], 0x50, 0x10}, 0x8810) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x20, 0x0, 0x400, 0x7776a001, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x1) 725.201148ms ago: executing program 3 (id=2213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3c) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x25d, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x3d, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @generic={0x2, 0x1d8, "471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562eb"}}}}}}, 0x293) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x25d, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x3d, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @generic={0x2, 0x1d8, "471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562eb"}}}}}}, 0x293) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f0000000700)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80011000}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88}, 0x4804) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfdef}], 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 591.785817ms ago: executing program 1 (id=2214): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) 526.371609ms ago: executing program 2 (id=2215): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket(0x1a, 0x4, 0x3) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000004500)=@req={0xf3b, 0x8, 0x3, 0x7fffffff}, 0x10) recvfrom(r0, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x27, @short={0x2, 0x1, 0xaaa1}}, 0x14) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x20, 0x3, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)="1fe314f7bc0a6a6fcd057e92f98f51ef291b015636f66fe2a42db9c06a390d07e152c86193da40038f52dccbeccd2d1f745ab9c2d74acafdf9fd362f2fadddcdcee8c539af02a4bd5f1414b3e67f8b2aad97f7eae10070626554130e52df04b1131f44c0da4aefa9f27b10668337f772885179ee15dda016e719bed86af3d41bdcb0d421f248b918f04c819f18e8320c029f", 0x92}], 0x1}}], 0x1, 0x4001c00) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e20, 0x3, @local, 0x80}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000001c0)="46cf3d7915a00b5f06e61482506f29be76731631f40504ace008f54bda614584d65de1f41977c7d2b8a8113accb3f3fbd34137e1a5a056bb9b96d8c994f7d86e03fc6a17b3f41f13f0090e0e486d598b9b4518574b5806083dd9f7f294fcb4c69cfcedb437fa7be574c81d026d8cda0b6a2da6a660bf8f96acdf6823995170c7b5189da2b242adbff1a1b5cf1d43dbd84ff76a3f99bb2f764532dc877ad370f5170c2ab827fbfed53ea965b274cfe1a7a0fab2ac15b73b8e02f9ab78426bef03eb3234e8273cda80d8f0157e9550da905ed9e59ac942e77fdab066ceccbd9fd0bf75e357af3faab0b10d0245b6a186d26ab77584c2fdc5", 0xf7}], 0x1}, 0x0) 524.984796ms ago: executing program 4 (id=2216): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) (async) pipe(&(0x7f0000002300)={0xffffffffffffffff}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x47, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[], 0xfe33) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfffffffe, 0x5, 0xdb, 0x18, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x9}, 0x50) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@func_proto, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x23, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0xc}, {0x4, 0x2}, {0xc, 0x4}, {0xb, 0x2}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @fwd={0xf}, @volatile={0xd}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000004800)=""/4099, 0xa0, 0x1003, 0x1}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x89, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f0000001700), 0x8, 0x44, 0x8, 0x8, &(0x7f0000001740)}}, 0x10) (async) sendmmsg$inet(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000002340)="7a0a5eede5c46e72fc25595a73a6130fee183efbb1a9274ec4edddde924305234ad2935fafa89a04067e542a5679ae8e28924a78245effbdd78d0f377c6f4006975b0906547b0f25a2c909b483", 0x4d}, {&(0x7f00000023c0)="1d47ca545da8aa8ab4ab435900c665de841bf13367aa38462b58d3e03801d5091caf6319fc49a18cd948fc77e2e89b9663b4ffb40b28b9d9973fc931d97ebb6c961586e35ff0080f5bc079da2d0c174f13caf4f89317545214bf56ed34b9229d81e5fdcef85893d3ff3f628b13822152a283b266dddc51b54d41e6b72185ab2b33f263aa5eeaddff700428d7d24a6077c8d6028a927ff08176e25f1da7a38d47bd374d9910fa27518fbe4386cc126796375122c2462856e2a30ba7d9e59eefdb7b314bc7db0cd765f62309d1c24b09ac6f7e1f8497b27524235fbfb6c556e65be84e48a6cd51", 0xe6}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="057b6973203cb83aabfba6378d1ebb96757ee4de6c9e7689787862c043bee2be9048d3ad43107a6066e95bf9a6cf6d87e8e56a7958c7a5d4c34560ee6d3f04cd0d96a6ac5332ecfbf679a90d6615bb5a9937f556c0263ed6677ab38176f5fc8a750daac2d49f4a422925e56856091dc7ab8375f2b0513dbeb3696dfe1dd64bc0f67ebae7909c6a889c8c31f5360d23c9a63df06850b05086e15782da3f858beaa111960284d86956e91d2c48a7e7b7898cc8e251925c9a28db492d0094baa6b486c0b97d584800573a9e5ab243ea3fb1cae1a239a0a8688116be351ce23b07c06389bb4ea71f7a6a", 0xe8}, {&(0x7f00000035c0)="09ffc11af37a07d826951b42b21cedc9a1de94b169f550f401d8b2349daa77cacc651650374f44b1cb3075cc6bc51a56bea62555893a0156632bbcfb33cf33e9531989fe4c628a9fa535043e3d2687e440bee9dbc38d5be541b3f4e27fd3b7477b0ee41a914afdcd1a3d8e67a45009a6622e34bd38070fdb7e3a1c00988ae6a6a5dad2fa9021a8000cbb48d1b5c5ecee07361efe3bc296de8b10e91bbb5632aca5612b10a6fece1c16d59321f0f16ae7f2f27239dd86edee0047b13cbaa50f8304de012af10b77de1f3e464e11de54234360080c61781288f5d27dcc990af443e93bb6517f0d1d6866495d25100174ae7198b82b6df2f8fb1cfefcb84bf1694dd6e42d889d498f40bf81e920562e54c05bb1bc4d90f86f9ff9c56f0ed3cab672feaca565af53399d584cdf4a36662789222425370641a2b32344a0d9f16ed8a28ced1aa0ccb91e0215b755ee981ce40be5de9b65e6bc6071bbee6a6f4105709d0c8e1f29142926016668f027131aa24af4d735cc200cb470ee56f5c8139ff7403481eaca32b7ebee481db1a57810eca7ea64bd918bd8f456431d36a8389e21e695d7a3a5e7212c103652b6bddf00b6211ae466f91e3da57b6f49c28f17699a784e07adcdd3147b43af278688a4345990faf9db8ba0ffb639b3be88897736c3bd7a4d7dcfb7e4ed043947103c800378f261bf877647fdc805f902b4e5c19c326ae57fbb81d1abe3614bcc4e839aa373438c5c6f1729afdf92c497eb400a745b9d67436946da59dac132565f97ea1cf7b606b85259eb6f0cb6f5a04c3685d4c1dacd0c64d702e7e4db53cbac22f0b0a4f584c8f4da0355756daa3531c0702db2ed0ba7f98fe0ed948707d6311d8b2ecf117ba03f881f651d28d9189c8ed28ae46eb00b276c1c65be7fa16323618d2df6b5e659d77405340e4f190519e475acf940c0736309f315789a8b475b73cfbf8361a47eb2663342066ec42b3435909648322ffefff7441b0abfb9feb167df2010fda782c5e6d5e2f0fa7ecb271f128bdaff6bccf46bad48ffc2f5fb8f3e4f6425cbf3984cb9914ec278152262cb93b3af1d538ccf2e75161adedb8c24a4d72c84255d57b89807be99e4a8fd090828a92678228d876123a18dffd00be5fd1e5e979efd704fcabeede2cf93b023f9a2de5fe0f2bd0ad26709d872ff52c55d37f98332728637d1cafae200da5084f81359fd7bd9b2509123929534ef935588efc5ee0e9fc7f58a87508c8e4c76e504e741a1cebd2105eedc58027574b863d3f4f9140693d6422daebe18e1c4413d15d065d083a200f9a32d233723066ff3b10159b7df1e5cd949c653873388f6b79d793f5d8fefc4a8c78f59436dd6b552474f32e13d0965cb2004f88bf915afc6c407d661447e914df89dc0d039172f709f2fff32c464285d7f43a29e42e02ca3c7dd704abaa3963e33dbbe5ff9cbcbdf42cc49d4ca02ba86ed6b1a928a289e1c3c0d71a4d32c0a258bad8301480b2f85ad3d82392071fd192760d9db40bd59945d33e21b12eb7b3f07aeacf21b17a3eca4fc1ad1c0a0793351cf2f0fd175b33787fa6a6468b12d07087dad5b2ecd28d31e9b879d8ad849ca7a4003245acbdad35ffc4a625652080ecfe36211bfe4ab0ecf21dff8a886107af15ee80ff716c1efe8a7b5d4e213f7ad441592996cad71632dc5755a544c97dbfcf8a291e159382f64dfb447c28617ecba365adb8e09ba1443cc4950d8302f4dc72cad821d86734324d233a1914831d1e785c3782d5d391153f1fd8c489e5505522cab10ea3e3014e64b293ff238c7315194bc3c2a8a3ba0738761d2ef3955fc7176e12d2324000170d8147b04c802b1ca0976d94c88d905fc5d1e6f4c55f2f1fa6e9e7d8014334f97381781a4ec6569c6705f9bd03b4d98e3c159ae0eab3835d1557125073d7a6f7f57ac38244d70a7a968ea0eea5e9a580fb37f8fc1c06ac60fc71692042bd631fcc8c2ffc01760abed1cce02f565b1d7f2be94e960c6a1d2ccbdc632a56f07a5b0ae81bfea6590e2e2fb375b0f49dc1f27e22be746684ac9773ff89273bc326a7787c3f134079d29ff8f8ed68075aec11f29cdc2e78a7ca1730ac3e82705efbefb856d170efa361e29202f22f7d6e946371ee73a34678a5f80a59ea53d6f9a4ee2b9c1812e4997f9337663cf175932e2154003095d4f1111f7a51befc52041d91ab2e4f1c2b3e21d8ccbb94f03d9764850a3b95185699322b6c3956feffb4f9d0cd2be62eedda2ea8fbb3fd794b085d37f966bdce5cc4ae5ac690fa27cfddf1575540c1351a5e96b108fb56bf0d31dbc3bc92c763bdfd45d12c3fb7436897bd665815852bccce6f67492c95f9e34b1846e7e01e271be31880bc6f70fc04efa0f0bd4daa7d5dc05a88179afe149495caba1ca7f41606399e2b2110b08d0c381641a9246949974705346259b275f9c905006ff244dc97ed1176a02b3e8a25b480ebe698c2314ef984c85d61c83cdd313bedfdb7d159e1e74287c112f2739b8c5d2eeecf2c94d2c15cf75123f0a52afd2c814571416cdc52494f1d50745284f8996c1c987c68f743bcb485280aaf97f3484a56303bd21f101aa4a394dd7d5771c9b1a84444b99b73b7ba8793cc2cc280ca28e0a5f060144e3f5173bcb2916c5c46b1fa8d55e14adfe9b7969a5392cb79d529cd626fc4da6a15be1f2bcd88ff0d48d945045303e3d919e67889d47fd0f8e773383f0a4a8aebde064130f4973d18348bd8600a6cfd727f7f86b62c84a0de6ddd16482e9520d11d6fef39eb71fc3b8dc034d03a48fd00a424b9c1ff6676a1b901799210855043b7f1b5db8a05236ce8c19c8ffe5642929bf333805a84d54333bcd5353ece9b6c265094b08c2f3d578c36d609a687b2e015623b36c3f7016d8edb41ad4393298f58c0f6ea5b3c784194a4fd748481d6aee23237fab88bad711a9c08e8c6f510c16afd60c3ba7afe83e300a137a11b7570f2aca795c45adbebe53b901be79b32417bb20461e7a316777ee5c508b8d50993d166b7b0ae28348a8daab22b133ad26bff64195596a5a6d91b70580c7e8b02fc32d269b41c0b1063825304ea1cb9ad2604762fcf78c424cac9b4af2e6de824b994d9ba3eaa4f9f9a402df2862e67319bcd361070ddec52a235c32de78d38e3c782266b35e8f8b3d7ff4a62fc33e84642e1d054611557fe240811270ebded43bfab011e4bd56d403ba3d0a1aaa70a395b235862b47c6f747633e0fa7fa28c8ef5f44dfb92d510b4f81198eeda2fbcc1411b3682fbc3d02f27af27ffbaf6eada2ec3cb2aa95054f57d52049742412c7ef825826d7684ee303e5cf134cb2a15ee9589c85f28f087ac3a71d0b882918302c808c3cfaa095fe7391ad40accb0ba5c8f48ccd6051712904308b4670665953742d2feb72c033320ddf6aa433e941a8e9f10749c14053ea8ef2361b083de8dab1d90e6674721638cea253a9759a3b82d54d08c19fbec4b54fef3ba5a9f9e7226540b08867cd006abe64c3abb586779371b5363d06403a96637dbf3258dac57a2f985a14238cee8060cb1444eb60027c150395a5a28d0e650d5974050214938d921c5ec3202d3128584c77c30bc17a48ca8daaa0e8f392d4de2534a392904d35dac55d377e704c14c32c8467929132cbd7565d4f872524a71e83928ba1030472e92107996a4ae83b1ee3eee84859883cf0afb6912b80b5a2173eb22266389b57214f61e78db482ddf287157ea6f0a4473183a340a93911acd66145c715e5fda39b5503fb731318f6434e7f628fb984c3429751af97fa7a0a43b69ff930a23a4dbe98c8138468f03c28bffd499519f440eadba387c2ba20d5f6225c5568ef4d609a916e4fdf19ef2c2c3e4b8b31374980607cab2b9349514912980fe65de8349d5268f6cc96719aa8271a8240f9418af43e5dbff656e33ef5b985fb63e6b6fad5dc5c65919d2fcf5b11a8a367ebe197de26dfb702adc5272acc5b2c9f26f13493059eefb1aec7b9bdf73a57121b661e8aaefc2c11960dfb8a94b8d2b42bd01596f9f45ca361dda406e89f9502777fd7406d9932eb56c11fecf55bee0993b9fd1eee2535e1d9f277fd06554e591d8f018bb6662f1a14dec0d25e0c150221a1bcb859e4ebd2fde63c0426c8e0407684939f8fd707ae90786370cb6398f486a18073469bbd2917e6de7ef013caebabd10124a55a1dbaa38de3b3e346cb8572ae4a21c076179e2858b89466a462082073941555265fcea05143f45cb784bcf18a8abdae8f681decc67c5e287c3c43cf9f901d8f5ab1b70ce95c299b5d358a7ee21b3bcd4cc434696d1b0c970c2f71fd2239d023e51e054f61e41f4b4d4e4d61d303fd1ed6671ecfae2fe58e9007e1269d85a6493cdbf6f2e95d1c3ab76cb0ede0e04e2209114f9e858d5b55a8fcbd142d4c2b998e9afe307042b15f5da498170a0c695ccb5c531887e978386d1ef9cb0e02c7ac99c51ed56bc655233af9e0ea6bc5db51149ead8a61f384fee373a894536d930fb63473f8218e5a88b85481437bf77cc1967172f978b38154ba4ce04e0fde7023fc2ce9a9cd88f5bca3363023472923730742ab6f256ad63af9c4727617f67ba464b7c1d83a048ef5ac6c78ee1e17306b5921d2e2b9478642db1a1376754ecd55003e001867d1bf15c7766de509ed4fb5576d3620fc2584e998a7cba47323061771d487ee8943122ef36297604a83d3629134fe1e3f8d105d97d87f84aa546379ca02fb6820f7417d9e7764ca5a3bd80f3f0871688d918537bcf766f177d51fabe1ff6732dd7a46e1510be2740f032988ff1f372d00cc545a03c59079aee9324913cd0a183fb2b5d3640d45eaffa107659b4a74e58e29bd907a4d144708f573d87d2634ba86eb873cd0979f78aaea66886b5996509c2777fa1ebbcb011abb6416f482c7331964a9dc42c4e09a4b2ecc9658de05db21ca8e4b0afd53bf25d2e089a22157892ff8c9e250fbe51433d050608f37b4a7143e2b57d5ece2fc82bea7077307b24a452913eadbd0a0b5f6e99468132955e6f6e5c2d3dfb2213fe72e93aad31210c303af09cab41e1a7aee94e47c2f0ffce0a61da9b791fc820bf560d8fac160d54f6133e9c8e253ca090f6803f2e2e8eec2e47f1fbebae247035b77cb32c0f7155bc4b72ce36d4675490db3a26b701568d44ee9125310c20905aee0260ea6046f99121f17a1a95026647dac0809b0329db848244146da4633e36fa6ea4441913d5d43ab6374fc2b3af52756177de9ccc4b948e24030388eaccdc5d584f5226a8a06934e87d59eb6d2d60d84172f72489a4f1c919d17fb3c8fee9c13da655c76b371a176edc944ebe7be840123f4274facb97db3f6ad56f88f3981c7df0695022fd5366fc7e4ac57305ef3ff7f3e78e5012afec77dce37bc1fb094670c9095fdd2226feca1650910d668680aa19aec7e81362ddaea028f2694317169384933f0e836e5341356230aeba12325cb311c94438e96e876c5e2f6ca4058dcbe0331e2005593a494e63427c751f1aa2d22a0f617128048a0c58a39ebe96d13ca143ff703f217611806b5a82354888142b742a423af27227dae7928d5d1b9e026d20bac9bbdb08aa2dfbe3f108e1e47b52a4db2f9cbefc8e31f6c631db2cb4702f97c51ffa2338ec3913c1b03bbd0ee5d831459988bd2e7a88b9a2f3081c040cd2bfd7c61da02d265012441278f90a47876b0d05c429a5f0768165932f0b4f8d9a11b5b0a33a504efc744f6703924e74f4a602b53cbfcae69e59f78584a195715", 0x1000}, {&(0x7f00000022c0)="191a8fa7a4c09218566ade60fe656e9bd8f3edfd37ab635dcffb3b499344bc4408b12ef7bd3afd753ac701c1cac780e898fc75108ce94306076d5fcb2d3e39ce", 0x40}, {&(0x7f00000045c0)="aad3519682abc129ec45d12d86c8f73a567774995667af7f84550135b1ba1bc28a1355e3a5b3d97d5190fa243cd8a910c119aa0238b418b4607c041817f485e211ea5f024432e439bdd308bafa6e803cd0485cc105436b06e97a7621620ebe821cab5066e2ac2b656db2730ee5254e8b46e2d4544520b19cf6fc038884f3aaaaea8852dcc094ad2ec84a7e5e9a35a9ff43194048582497367be8ba08ee2e9fedfed40394514f5a47cc75c36ddf155215e5342855f1c3360f", 0xb8}, {&(0x7f0000004680)="b5eb31e61a8483089c724e66cf318788bc5b9035ac2cbfa0fd2207f37eb9c65adb220d7a6adbc77c974a1c54fc5f3dbb9468fd856425a414328daebc8ee1c85fcab0bdcf6c3cf538407364fb6ddf09a6243bf9dd5036780a0db5323f29367cdbceffa937e4dcbc81846fbfd0b9211e4180", 0x71}], 0x8, &(0x7f0000004780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0x8000) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_ext={0x1c, 0x11, &(0x7f00000018c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001980)='GPL\x00', 0x2, 0x51, &(0x7f00000019c0)=""/81, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001a80)={0x2, 0xb, 0x643, 0x6}, 0x10, 0x2eb64, 0xffffffffffffffff, 0x7, &(0x7f0000001ac0)=[r1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001b00)=[{0x2, 0x4, 0x6, 0xc}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x5, 0x2}, {0x5, 0x2, 0x9, 0x9}, {0x4, 0x1, 0x9, 0x3}, {0x5, 0x3, 0x8, 0x5}, {0x2, 0x4, 0x4, 0x228a75af1e34ce20}], 0x10, 0x800}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001c40), &(0x7f0000001c80)}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@bloom_filter={0x1e, 0x9, 0x7, 0x7, 0x20001, 0x1, 0x931, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x3}, 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e80)=@generic={&(0x7f0000001e40)='./file0\x00'}, 0x18) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) (async) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x54a1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{0x1, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f00000020c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x4, 0x1f, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x3, 0x2, 0x0, 0x8, 0xb, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}, @map_val={0x18, 0x8, 0x2, 0x0, r8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x5}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000300)=""/130, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, r9, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x9, 0xf0, 0x16a}, 0x10, r10, r11, 0x8, &(0x7f0000002140)=[r12, r14, 0x1, r15, r16, r17, r18, r19, r20], &(0x7f0000002180)=[{0x5, 0x3, 0x5, 0x2}, {0x1, 0x5, 0x6, 0x7}, {0x2, 0x4, 0xd, 0xa}, {0x4, 0x1, 0x5, 0x7}, {0x4, 0x1, 0x5, 0x6}, {0x2, 0x3, 0xa, 0x4}, {0x3, 0x2, 0x1, 0x1}, {0x1, 0x0, 0x7, 0x3}], 0x10, 0xd12}, 0x94) 404.659044ms ago: executing program 4 (id=2217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="cee5cf31d35a79ace1f9d8442964ac8461f4738672afcf0cee633ef24241564605fd0a79dc2d76ebeadb93756d4a0a4a658fdc7ba51e45b88ff49e1d2ebe73364f7a921e71db711249704c3bedd878b22fb0354803c22452874d88debfaab792ce7d0f75ad28b884a6961e6fbd2c32ad09417e4b29c5376fe789fec254736082ef7b3c78c4044baf179fc57a1879a4db475254af68f12d127234db8061389f746ee6cbf182ae1b6e083f5753f4777fcc531e0c1fe41c98b860bd501a91a688cf43e630c293546ceaf3cc6fc11f1ba0ca9488", @ANYRESDEC=r1, @ANYRES8=r2], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xe) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x16, 0x4) 368.750369ms ago: executing program 3 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e64300000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40006) 280.439834ms ago: executing program 0 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbb6076b520010000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002b00ff010000000000000000000000000001fe8000000000000000000000000000bb6be200"/104], 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x0, 0x61, 0x30, 0x30, 0x61, 0x61, 0x61, 0x0]}}, &(0x7f0000000480)=""/149, 0x32, 0x95, 0x0, 0x401, 0x10000, @value=r3}, 0x28) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4010) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x2, 0xb}, {0xd, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x2c}}, 0x4080) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x21, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev, @empty, 0x0, 0x0, 'team0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d747a3b2be34f8c0809a2d0e0c3e83db33055f35201078241f18c41298e8d27fae15db83081df04c2233cf6aeee560a70da700912dad2f5d5111750464582601"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x1b0e, 0x9}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r9 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x16, 0x8}}) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaac5bb86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000040000000000aa06000003e6393e17e6bd3b029d6f5c0f503789df3abdae707786fadb305308680720afd69cc19cae93ecfcae742c529cde7157b32759c818e19759d8f0d0e045609bf5f36f8533447f0d5e7eb82665f8f614dc795f83a9a89b2b82c6c590713c7500678cff5eb05380f6ba91a55b83e16383d58b211e8237eeb4d26a9fcad0b4c0de33576815ff5988d433dce743de8990db1f6763", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800005e4cd36bb96bd2b9"], 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r12, 0x1, 0x15, 0x0, &(0x7f0000000280)) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000827bd7000fddbdf25050000001c000280080006000800000006000b000a00000006000b000a00000008000600020000002c00038008000500ac1414aa08000500e000000208000300020000000800030002000000060007004e2100000800040089e00000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCX25GDTEFACILITIES(r9, 0x89ea, &(0x7f00000003c0)) 279.892868ms ago: executing program 2 (id=2220): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'wlan1\x00', 0x8000003}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r7 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3e, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x7}, 0x10) close(r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x10000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000000c0)='GPL\x00', 0x70ce679a, 0x91, &(0x7f0000000500)=""/145, 0x41000, 0x22, '\x00', r6, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x575, 0xab7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r10, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x5, 0x4, 0x9}], 0x10, 0xd73}, 0x94) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xc9ae5c4f300005f}}, 0x14) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r11, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r11, 0x110, 0x4, &(0x7f00000001c0), 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) 233.98475ms ago: executing program 1 (id=2221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18) r1 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="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", 0xfc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x2) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000740)) 155.775013ms ago: executing program 3 (id=2222): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060010"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) 22.232347ms ago: executing program 4 (id=2223): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='bridge0\x00') (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async, rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (rerun: 32) sendmsg$inet(r0, &(0x7f0000001d40)={&(0x7f00000018c0)={0x2, 0x4e20, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20}, 0x0) 0s ago: executing program 3 (id=2224): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r8, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x9, 0x9, 0x0, 0x9, 0xac6d]}}]}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES16=r1, @ANYBLOB="03062fbd7000fcdbdf25030000000c00218008000100", @ANYRES32=r5, @ANYRESHEX=r5], 0x28}}, 0x10) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 123.702761][ T6715] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.711800][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 123.744315][ T6715] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.775046][ T6715] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.801773][ T6715] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.826060][ T6853] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 123.896951][ T6715] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 123.918727][ T6859] netlink: 'syz.0.259': attribute type 16 has an invalid length. [ 123.983956][ T6859] netlink: 'syz.0.259': attribute type 17 has an invalid length. [ 124.065487][ T6859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.312127][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 124.551820][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 124.623338][ T6876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.887138][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 124.928964][ T6888] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 124.934109][ T6889] gtp0: entered promiscuous mode [ 124.981078][ T6889] gtp0: entered allmulticast mode [ 125.238137][ T6905] netlink: 'syz.3.273': attribute type 7 has an invalid length. [ 125.804911][ T6928] netlink: 'syz.0.281': attribute type 13 has an invalid length. [ 125.936486][ T6928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.569486][ T6961] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 126.605632][ T6961] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 126.816177][ T6968] macvtap1: entered promiscuous mode [ 126.827549][ T6968] vlan0: entered promiscuous mode [ 126.840069][ T6968] macvtap1: entered allmulticast mode [ 126.858048][ T6968] vlan0: entered allmulticast mode [ 126.867519][ T6968] veth0_vlan: entered allmulticast mode [ 126.899427][ T6971] macvtap2: entered promiscuous mode [ 126.905848][ T6971] macvtap2: entered allmulticast mode [ 127.369954][ T6986] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 127.589061][ T6994] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:0 [ 128.160468][ T6715] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.192430][ T6715] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.216166][ T6720] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.263519][ T6715] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.549722][ T5879] Bluetooth: hci3: command 0x0405 tx timeout [ 128.900900][ T7047] netlink: 'syz.0.322': attribute type 25 has an invalid length. [ 129.085710][ T7053] __nla_validate_parse: 20 callbacks suppressed [ 129.085729][ T7053] netlink: 84 bytes leftover after parsing attributes in process `syz.0.325'. [ 129.089347][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 129.249268][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.257287][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.362627][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.380985][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.537941][ T7053] vlan0: left allmulticast mode [ 129.542919][ T7053] veth0_vlan: left allmulticast mode [ 129.548344][ T7053] vlan0: left promiscuous mode [ 129.669235][ T6709] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.692935][ T6709] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.729828][ T6709] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.759749][ T6709] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.798400][ T6709] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.833774][ T6709] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.876502][ T6709] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.915192][ T6709] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.994787][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 129.996719][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 130.029450][ T7080] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 130.030487][ T7077] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 130.043204][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.219593][ T7092] nbd: socks must be embedded in a SOCK_ITEM attr [ 130.703516][ T7109] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 130.770053][ T7112] sctp: [Deprecated]: syz.0.343 (pid 7112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.770053][ T7112] Use struct sctp_sack_info instead [ 130.801720][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.342'. [ 131.055593][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 131.247134][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.348'. [ 131.404115][ T7136] netlink: 'syz.0.349': attribute type 3 has an invalid length. [ 131.598505][ T7140] netlink: 'syz.1.352': attribute type 83 has an invalid length. [ 133.026105][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032740][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.325853][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.375'. [ 133.419134][ T7209] netlink: 'syz.4.375': attribute type 3 has an invalid length. [ 133.436127][ T7209] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 133.625701][ T7223] tipc: Started in network mode [ 133.642304][ T7227] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 133.648745][ T7223] tipc: Node identity 3a826bde86be, cluster identity 4711 [ 133.709854][ T7223] tipc: Enabled bearer , priority 0 [ 133.741985][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 133.816060][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 133.931955][ T7223] syzkaller0: entered promiscuous mode [ 133.950433][ T7223] syzkaller0: entered allmulticast mode [ 133.978704][ T7223] tipc: Resetting bearer [ 134.280344][ T7253] netlink: 'syz.4.383': attribute type 49 has an invalid length. [ 134.282131][ T7254] netlink: 'syz.4.383': attribute type 49 has an invalid length. [ 134.347192][ T6718] tipc: Resetting bearer [ 134.387690][ T7223] tipc: Resetting bearer [ 134.813499][ T6012] tipc: Node number set to 3158076382 [ 135.796282][ T7223] tipc: Disabling bearer [ 135.830968][ T7264] bridge_slave_0: invalid flags given to default FDB implementation [ 136.341143][ T7289] netlink: 'syz.0.394': attribute type 12 has an invalid length. [ 136.859799][ T7310] __nla_validate_parse: 2 callbacks suppressed [ 136.859822][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 136.911067][ T7312] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.230916][ T9] IPVS: starting estimator thread 0... [ 137.326874][ T7330] IPVS: using max 30 ests per chain, 72000 per kthread [ 137.826016][ T7362] netlink: 144 bytes leftover after parsing attributes in process `syz.2.412'. [ 138.095747][ T7370] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 138.115489][ T7372] netlink: 44 bytes leftover after parsing attributes in process `syz.1.416'. [ 138.132863][ T7370] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 138.162840][ T7370] netlink: 224 bytes leftover after parsing attributes in process `syz.0.415'. [ 138.207881][ T7375] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 138.241423][ T7375] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.417'. [ 139.175013][ T7409] netlink: 64 bytes leftover after parsing attributes in process `syz.3.427'. [ 139.706243][ T7432] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 139.837893][ T7433] veth3: entered promiscuous mode [ 140.357232][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 140.478212][ T7459] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'. [ 140.507509][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 140.524789][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 140.601030][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.685814][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.731251][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.738964][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.745941][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.761002][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.788093][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.819700][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.873282][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.917789][ T7461] openvswitch: netlink: Unknown key attributes 2 [ 140.928514][ T7481] netlink: 'syz.3.449': attribute type 10 has an invalid length. [ 140.975041][ T7483] netlink: 'syz.3.449': attribute type 10 has an invalid length. [ 141.020351][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.737156][ T7515] dvmrp1: entered allmulticast mode [ 141.782617][ T7515] dvmrp1: left allmulticast mode [ 141.920877][ T7528] __nla_validate_parse: 1 callbacks suppressed [ 141.920898][ T7528] netlink: 104 bytes leftover after parsing attributes in process `syz.1.462'. [ 141.939493][ T7530] netlink: 'syz.4.463': attribute type 23 has an invalid length. [ 141.998879][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 142.468541][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 142.525911][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.467'. [ 142.539921][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.467'. [ 142.769696][ T7563] tipc: Enabling of bearer rejected, failed to enable media [ 143.023036][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 143.163090][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'. [ 143.328145][ T6709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.371767][ T6709] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.381751][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.780924][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.840879][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.892796][ T7615] netlink: 80 bytes leftover after parsing attributes in process `syz.3.491'. [ 144.004049][ T7618] gtp0: entered promiscuous mode [ 144.074922][ T7618] gtp0: entered allmulticast mode [ 144.317782][ T7631] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 144.400415][ T7636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.495'. [ 144.440248][ T7632] hsr0 speed is unknown, defaulting to 1000 [ 144.501029][ T7636] vlan2: entered promiscuous mode [ 144.519131][ T7636] gretap0: entered promiscuous mode [ 144.534719][ T7640] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 144.557437][ T7638] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 144.810448][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 145.439181][ T7678] IPVS: set_ctl: invalid protocol: 47 172.20.20.32:20003 [ 145.620847][ T7689] netlink: 'syz.3.512': attribute type 4 has an invalid length. [ 145.636965][ T7686] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 145.792121][ T7686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.817393][ T7692] veth3: entered promiscuous mode [ 145.827791][ T7692] bond3: (slave veth3): Enslaving as an active interface with an up link [ 146.043225][ T7709] netlink: 'syz.1.517': attribute type 21 has an invalid length. [ 146.057646][ T7709] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.072612][ T7709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.080155][ T7709] IPv6: NLM_F_CREATE should be set when creating new route [ 146.087584][ T7709] IPv6: NLM_F_CREATE should be set when creating new route [ 146.094887][ T7709] IPv6: NLM_F_CREATE should be set when creating new route [ 146.127545][ T7712] tipc: Enabling of bearer rejected, failed to enable media [ 146.429986][ T7727] net_ratelimit: 24 callbacks suppressed [ 146.430009][ T7727] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 146.445269][ T9] IPVS: starting estimator thread 0... [ 146.570953][ T7728] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.839896][ T7749] syzkaller0: entered promiscuous mode [ 146.850863][ T7749] syzkaller0: entered allmulticast mode [ 146.870037][ T7748] tipc: Started in network mode [ 146.879060][ T7748] tipc: Node identity fa252b5695c2, cluster identity 4711 [ 146.890508][ T7748] tipc: Enabled bearer , priority 0 [ 146.947295][ T7748] tipc: Resetting bearer [ 147.056092][ T7748] tipc: Disabling bearer [ 147.095507][ T7767] sctp: [Deprecated]: syz.2.535 (pid 7767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.095507][ T7767] Use struct sctp_sack_info instead [ 147.129830][ T7766] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 147.246781][ T7772] __nla_validate_parse: 37 callbacks suppressed [ 147.246803][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'. [ 147.260855][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.317538][ T7766] team0 (unregistering): Port device team_slave_0 removed [ 147.375392][ T7766] team0 (unregistering): Port device team_slave_1 removed [ 147.421545][ T7778] veth0: entered promiscuous mode [ 147.443570][ T7775] veth0: left promiscuous mode [ 147.502057][ T7780] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 147.526515][ T7777] bridge_slave_0: left allmulticast mode [ 147.550777][ T7777] bridge_slave_0: left promiscuous mode [ 147.590326][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.628900][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 147.671996][ T7777] bridge_slave_1: left allmulticast mode [ 147.676470][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 147.677696][ T7777] bridge_slave_1: left promiscuous mode [ 147.678824][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.703019][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'. [ 147.718347][ T7777] bond0: (slave bond_slave_0): Releasing backup interface [ 147.739933][ T7777] bond0: (slave bond_slave_1): Releasing backup interface [ 147.756502][ T7777] team0: Port device team_slave_0 removed [ 147.768019][ T7777] team0: Port device team_slave_1 removed [ 147.775483][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.786543][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.797947][ T7777] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 148.046805][ T7808] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 148.103965][ T7808] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 148.212005][ T7813] sctp: [Deprecated]: syz.0.551 (pid 7813) Use of int in max_burst socket option. [ 148.212005][ T7813] Use struct sctp_assoc_value instead [ 148.442926][ T7826] sock: sock_timestamping_bind_phc: sock not bind to device [ 148.518974][ T7824] gre1: entered promiscuous mode [ 148.548118][ T7824] gre1: entered allmulticast mode [ 148.862280][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 149.537086][ T7864] raw_sendmsg: syz.3.564 forgot to set AF_INET. Fix it! [ 150.229559][ T7887] netlink: 'syz.1.569': attribute type 10 has an invalid length. [ 150.620276][ T7903] Dead loop on virtual device ip6_vti0, fix it urgently! [ 150.789446][ T7912] netlink: 'syz.3.577': attribute type 21 has an invalid length. [ 151.092419][ T7927] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.582'. [ 151.192004][ T7927] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 151.538164][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 151.590957][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 151.666634][ T7958] sock: sock_timestamping_bind_phc: sock not bind to device [ 151.865434][ T7971] netlink: 'syz.0.593': attribute type 12 has an invalid length. [ 151.941643][ T7974] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 151.957314][ T7974] netlink: 'syz.3.594': attribute type 16 has an invalid length. [ 151.958542][ T7969] delete_channel: no stack [ 151.966007][ T7974] netlink: 'syz.3.594': attribute type 3 has an invalid length. [ 151.981358][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.592'. [ 151.988215][ T7974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.594'. [ 152.391473][ T7991] __nla_validate_parse: 2 callbacks suppressed [ 152.391492][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 152.559778][ T7991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 152.583871][ T7997] netlink: 'syz.3.601': attribute type 30 has an invalid length. [ 152.725291][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 153.300984][ T8031] netlink: 104 bytes leftover after parsing attributes in process `syz.3.608'. [ 153.562343][ T30] audit: type=1800 audit(1757318018.064:2): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.612" name="memory.events" dev="tmpfs" ino=648 res=0 errno=0 [ 153.620527][ T30] audit: type=1804 audit(1757318018.064:3): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.612" name="/newroot/124/memory.events" dev="tmpfs" ino=648 res=1 errno=0 [ 153.622793][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 153.737430][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 153.835751][ T5934] IPVS: starting estimator thread 0... [ 153.854562][ T8058] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 153.912935][ T8066] netlink: 13 bytes leftover after parsing attributes in process `syz.0.620'. [ 153.923474][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 153.960940][ T8064] IPVS: using max 35 ests per chain, 84000 per kthread [ 154.374639][ T8087] netlink: 'syz.3.629': attribute type 3 has an invalid length. [ 154.384330][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.629'. [ 154.395005][ T8087] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 154.441955][ T8084] syzkaller1: entered promiscuous mode [ 154.447484][ T8084] syzkaller1: entered allmulticast mode [ 154.707338][ T8100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'. [ 154.780850][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.808374][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 154.929904][ T8114] netlink: set zone limit has 8 unknown bytes [ 155.122852][ T8119] netlink: 'syz.4.637': attribute type 7 has an invalid length. [ 155.138305][ T8119] netlink: 'syz.4.637': attribute type 8 has an invalid length. [ 155.325183][ T8124] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 155.383041][ T8127] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 155.460573][ T8127] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.403587][ T8158] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 156.598184][ T8166] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 156.738500][ T8170] validate_nla: 3 callbacks suppressed [ 156.738522][ T8170] netlink: 'syz.3.653': attribute type 21 has an invalid length. [ 157.009642][ T8186] 8021q: VLANs not supported on lo [ 157.299298][ T8186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.332562][ T8186] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.423245][ T8187] hsr0 speed is unknown, defaulting to 1000 [ 157.458757][ T8205] __nla_validate_parse: 13 callbacks suppressed [ 157.458777][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 157.488231][ T8204] delete_channel: no stack [ 157.529150][ T8186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.580892][ T5879] Bluetooth: hci3: command 0x0405 tx timeout [ 157.591181][ T8186] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.820562][ T8186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.833243][ T8186] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.905307][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.669'. [ 157.977072][ T8186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.020769][ T8186] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.084684][ T8235] bridge_slave_0: entered promiscuous mode [ 158.252585][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 158.293104][ T6718] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.310218][ T8237] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 158.320588][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.346261][ T8237] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 158.369933][ T6709] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.378761][ T8237] netlink: 'syz.2.672': attribute type 2 has an invalid length. [ 158.389816][ T8237] netlink: 68 bytes leftover after parsing attributes in process `syz.2.672'. [ 158.407890][ T6709] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.411345][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'. [ 158.487717][ T6709] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.524344][ T6709] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.545987][ T6709] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.564944][ T6709] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.892052][ T8262] netlink: 'syz.3.680': attribute type 11 has an invalid length. [ 159.160001][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.684'. [ 159.206556][ T8275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.684'. [ 159.298170][ T8269] bond3: entered promiscuous mode [ 159.320510][ T8269] bond3: entered allmulticast mode [ 159.336342][ T8269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.462839][ T8292] netlink: 'syz.4.689': attribute type 21 has an invalid length. [ 159.500503][ T8294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.690'. [ 159.554717][ T8269] bond3 (unregistering): Released all slaves [ 159.575546][ T8273] netlink: 64 bytes leftover after parsing attributes in process `syz.2.685'. [ 159.579507][ T8292] netlink: 132 bytes leftover after parsing attributes in process `syz.4.689'. [ 159.782453][ T8300] tipc: Started in network mode [ 159.787386][ T8300] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 159.811464][ T8300] tipc: Enabled bearer , priority 10 [ 159.911072][ T8306] tipc: Started in network mode [ 159.926612][ T8306] tipc: Node identity a6b64ea0abd6, cluster identity 4711 [ 159.944538][ T8306] tipc: Enabled bearer , priority 0 [ 159.998133][ T8306] syzkaller0: entered promiscuous mode [ 160.018134][ T8306] syzkaller0: entered allmulticast mode [ 160.081633][ T8306] tipc: Resetting bearer [ 160.097722][ T8301] tipc: Resetting bearer [ 160.148068][ T8301] tipc: Disabling bearer [ 160.441335][ T8337] tipc: Enabled bearer , priority 0 [ 160.452034][ T8337] syzkaller0: entered promiscuous mode [ 160.457566][ T8337] syzkaller0: entered allmulticast mode [ 160.534781][ T8337] tipc: Resetting bearer [ 160.563835][ T8336] tipc: Resetting bearer [ 160.783374][ T8336] tipc: Disabling bearer [ 160.942120][ T10] tipc: Node number set to 10136234 [ 161.209177][ T8358] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 161.334855][ T8367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.136863][ T8393] netlink: 'syz.4.722': attribute type 21 has an invalid length. [ 162.627573][ T8414] __nla_validate_parse: 7 callbacks suppressed [ 162.627593][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 162.673691][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 162.787404][ T8422] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 162.866002][ T8422] netlink: 15 bytes leftover after parsing attributes in process `syz.4.730'. [ 162.872885][ T8427] netlink: 'syz.2.733': attribute type 16 has an invalid length. [ 162.910313][ T8427] netlink: 'syz.2.733': attribute type 17 has an invalid length. [ 162.918245][ T8425] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 162.918977][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.732'. [ 162.955928][ T8425] netlink: 224 bytes leftover after parsing attributes in process `syz.4.730'. [ 162.992667][ T8432] netlink: 14 bytes leftover after parsing attributes in process `syz.3.734'. [ 163.019889][ T8434] netlink: 14 bytes leftover after parsing attributes in process `syz.3.734'. [ 163.061180][ T8435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.326933][ T8432] bond0 (unregistering): Released all slaves [ 163.379104][ T8440] bond0: entered promiscuous mode [ 163.386981][ T8440] bond_slave_0: entered promiscuous mode [ 163.396172][ T8440] bond_slave_1: entered promiscuous mode [ 163.407964][ T8440] batadv0: entered promiscuous mode [ 163.428626][ T8440] hsr1: entered allmulticast mode [ 163.446405][ T8440] bond0: entered allmulticast mode [ 163.476051][ T8440] bond_slave_0: entered allmulticast mode [ 163.495208][ T8440] bond_slave_1: entered allmulticast mode [ 163.528631][ T8440] batadv0: entered allmulticast mode [ 163.552316][ T8440] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 163.587892][ T8440] bond0: left promiscuous mode [ 163.601457][ T8440] bond_slave_0: left promiscuous mode [ 163.607932][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 163.611950][ T8440] bond_slave_1: left promiscuous mode [ 163.623955][ T8440] batadv0: left promiscuous mode [ 164.126409][ T8482] netlink: 'syz.1.750': attribute type 32 has an invalid length. [ 164.137007][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 164.167754][ T8482] (unnamed net_device) (uninitialized): option coupled_control: invalid value (159) [ 164.189829][ T8487] vcan0: entered allmulticast mode [ 164.584051][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.759'. [ 164.810570][ T8522] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 164.975414][ T8530] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 165.473018][ T8559] netlink: 'syz.2.771': attribute type 5 has an invalid length. [ 165.692683][ T8568] netlink: 'syz.2.774': attribute type 5 has an invalid length. [ 165.700385][ T8568] netlink: 'syz.2.774': attribute type 6 has an invalid length. [ 166.742748][ T8623] bridge_slave_0: left allmulticast mode [ 166.757235][ T8623] bridge_slave_0: left promiscuous mode [ 166.764745][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.787983][ T8623] bridge_slave_1: left allmulticast mode [ 166.798719][ T8623] bridge_slave_1: left promiscuous mode [ 166.816377][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.843599][ T8623] bond0: (slave bond_slave_0): Releasing backup interface [ 166.857384][ T8623] bond_slave_0: left allmulticast mode [ 166.872913][ T8623] bond0: (slave bond_slave_1): Releasing backup interface [ 166.882520][ T8623] bond_slave_1: left allmulticast mode [ 166.894060][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.902069][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.915983][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.926328][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.812129][ T8666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.875618][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.882528][ T8672] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.907748][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.914280][ T8672] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.924831][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.931380][ T8672] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.940143][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.946744][ T8672] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.973997][ T8672] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.236254][ T8687] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 168.280061][ T8687] __nla_validate_parse: 18 callbacks suppressed [ 168.280084][ T8687] netlink: 228 bytes leftover after parsing attributes in process `syz.1.811'. [ 168.629072][ T8700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.699863][ T8700] bond0: (slave rose0): Enslaving as an active interface with an up link [ 168.833315][ T8709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.818'. [ 169.045393][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 169.611711][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 169.636570][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 169.643772][ T8740] netlink: 'syz.2.827': attribute type 12 has an invalid length. [ 169.665571][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 169.876698][ T8747] netlink: 128 bytes leftover after parsing attributes in process `syz.3.831'. [ 169.934423][ T8747] netlink: 128 bytes leftover after parsing attributes in process `syz.3.831'. [ 170.109821][ T8757] hsr0 speed is unknown, defaulting to 1000 [ 170.782424][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.001964][ T8803] syzkaller1: entered promiscuous mode [ 171.007500][ T8803] syzkaller1: entered allmulticast mode [ 171.307731][ T8823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.315048][ T8823] IPv6: NLM_F_CREATE should be set when creating new route [ 171.725055][ T8837] tipc: Enabled bearer , priority 0 [ 171.733402][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 171.778944][ T8842] bridge0: entered allmulticast mode [ 171.858146][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 171.899924][ T8842] tipc: MTU too low for tipc bearer [ 171.914706][ T8847] syzkaller0: MTU too low for tipc bearer [ 171.938751][ T8847] tipc: Disabling bearer [ 172.128473][ T8864] xt_l2tp: unknown flags: 10 [ 172.313052][ T8876] sctp: [Deprecated]: syz.3.866 (pid 8876) Use of int in max_burst socket option. [ 172.313052][ T8876] Use struct sctp_assoc_value instead [ 172.862010][ T8894] bond0 (unregistering): Released all slaves [ 173.409525][ T8922] __nla_validate_parse: 3 callbacks suppressed [ 173.409545][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.468052][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.509545][ T8922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.778790][ T8935] FAULT_INJECTION: forcing a failure. [ 173.778790][ T8935] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.864015][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.1.878 Not tainted syzkaller #0 PREEMPT(full) [ 173.864055][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.864067][ T8935] Call Trace: [ 173.864075][ T8935] [ 173.864084][ T8935] dump_stack_lvl+0x189/0x250 [ 173.864114][ T8935] ? __pfx____ratelimit+0x10/0x10 [ 173.864141][ T8935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.864164][ T8935] ? __pfx__printk+0x10/0x10 [ 173.864190][ T8935] ? __might_fault+0xb0/0x130 [ 173.864228][ T8935] should_fail_ex+0x414/0x560 [ 173.864259][ T8935] _copy_from_user+0x2d/0xb0 [ 173.864283][ T8935] ___sys_sendmsg+0x158/0x2a0 [ 173.864306][ T8935] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.864367][ T8935] ? __fget_files+0x2a/0x420 [ 173.864384][ T8935] ? __fget_files+0x3a0/0x420 [ 173.864411][ T8935] __x64_sys_sendmsg+0x19b/0x260 [ 173.864436][ T8935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.864467][ T8935] ? __pfx_ksys_write+0x10/0x10 [ 173.864488][ T8935] ? rcu_is_watching+0x15/0xb0 [ 173.864511][ T8935] ? do_syscall_64+0xbe/0x3b0 [ 173.864531][ T8935] do_syscall_64+0xfa/0x3b0 [ 173.864547][ T8935] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.864571][ T8935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.864589][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 173.864611][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.864628][ T8935] RIP: 0033:0x7f20ffb8ebe9 [ 173.864646][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.864661][ T8935] RSP: 002b:00007f21009c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.864683][ T8935] RAX: ffffffffffffffda RBX: 00007f20ffdc5fa0 RCX: 00007f20ffb8ebe9 [ 173.864696][ T8935] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 173.864708][ T8935] RBP: 00007f21009c4090 R08: 0000000000000000 R09: 0000000000000000 [ 173.864719][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.864730][ T8935] R13: 00007f20ffdc6038 R14: 00007f20ffdc5fa0 R15: 00007ffed8c788c8 [ 173.864762][ T8935] [ 174.730559][ T8981] net_ratelimit: 1991 callbacks suppressed [ 174.730580][ T8981] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 174.778210][ T8981] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 175.781643][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.900'. [ 175.829433][ T9036] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 175.856193][ T9036] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 175.875814][ T9036] netlink: 'syz.0.902': attribute type 1 has an invalid length. [ 175.990949][ T9040] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 176.019194][ T9040] netlink: 'syz.3.903': attribute type 2 has an invalid length. [ 176.054195][ T9040] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.903'. [ 176.081444][ T9049] nbd: must specify a size in bytes for the device [ 176.168250][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.905'. [ 176.407853][ T9066] netlink: 'syz.0.907': attribute type 3 has an invalid length. [ 176.715995][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 176.746631][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 176.810045][ T9075] netlink: 'syz.2.909': attribute type 11 has an invalid length. [ 176.860034][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 176.879124][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 176.899071][ T9075] netlink: 'syz.2.909': attribute type 11 has an invalid length. [ 177.154032][ T9100] netlink: 'syz.0.916': attribute type 2 has an invalid length. [ 177.413055][ T9109] openvswitch: netlink: EtherType 0 is less than min 600 [ 177.884828][ T9131] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 177.916406][ T9131] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 177.944040][ T9136] netlink: 'syz.3.933': attribute type 8 has an invalid length. [ 178.728010][ T9183] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 179.018865][ T9200] __nla_validate_parse: 6 callbacks suppressed [ 179.018886][ T9200] netlink: 36 bytes leftover after parsing attributes in process `syz.4.953'. [ 179.295816][ T9210] netlink: ct family unspecified [ 179.311672][ T9210] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.656790][ T9233] netlink: 17 bytes leftover after parsing attributes in process `syz.3.964'. [ 180.225225][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 180.437360][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 180.836996][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 180.863166][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 180.864339][ T9307] tipc: Enabling of bearer rejected, failed to enable media [ 180.882942][ T9305] validate_nla: 2 callbacks suppressed [ 180.882963][ T9305] netlink: 'syz.2.987': attribute type 12 has an invalid length. [ 180.903034][ T9305] netlink: 'syz.2.987': attribute type 11 has an invalid length. [ 180.917163][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 180.927068][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 180.936382][ T9305] netlink: 'syz.2.987': attribute type 12 has an invalid length. [ 180.949972][ T9305] netlink: 'syz.2.987': attribute type 11 has an invalid length. [ 181.039814][ T9311] netlink: 'syz.3.988': attribute type 1 has an invalid length. [ 181.208229][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 181.231327][ T9326] netlink: 'syz.1.993': attribute type 24 has an invalid length. [ 181.725485][ T9357] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1000'. [ 181.735807][ T9357] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 181.856841][ T9366] hsr0 speed is unknown, defaulting to 1000 [ 182.087088][ T9381] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 182.176969][ T9388] siw: device registration error -23 [ 182.655354][ T9410] netlink: 'syz.3.1017': attribute type 9 has an invalid length. [ 182.703392][ T5879] Bluetooth: hci3: command 0x0405 tx timeout [ 183.499102][ T9447] veth3: entered allmulticast mode [ 183.632736][ T9459] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.689754][ T9451] tipc: Enabled bearer , priority 0 [ 183.726679][ T9451] syzkaller0: entered promiscuous mode [ 183.747493][ T9451] syzkaller0: entered allmulticast mode [ 183.787659][ T9451] syzkaller0: mtu less than device minimum [ 183.845832][ T9473] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 184.305860][ T9449] tipc: Resetting bearer [ 184.366599][ T9449] tipc: Disabling bearer [ 184.412484][ T9497] __nla_validate_parse: 8 callbacks suppressed [ 184.412503][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1044'. [ 184.601003][ T9515] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1048'. [ 184.755128][ T5962] IPVS: starting estimator thread 0... [ 184.793096][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 184.870925][ T9525] IPVS: using max 23 ests per chain, 55200 per kthread [ 185.109379][ T9541] vcan0: entered allmulticast mode [ 185.185482][ T9537] bridge3: entered promiscuous mode [ 185.222749][ T9537] bridge3: entered allmulticast mode [ 185.785635][ T9580] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1067'. [ 186.049147][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 186.082977][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'. [ 186.137150][ T9598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1071'. [ 186.153312][ T9599] netlink: 'syz.0.1071': attribute type 1 has an invalid length. [ 186.461901][ T9611] hsr0 speed is unknown, defaulting to 1000 [ 186.587789][ T9620] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1076'. [ 186.870334][ T9632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.253667][ T9649] netlink: 'syz.3.1085': attribute type 3 has an invalid length. [ 187.274104][ T9649] netlink: 'syz.3.1085': attribute type 3 has an invalid length. [ 187.286825][ T9659] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 187.528591][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 187.590238][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 187.817069][ T9685] macvtap1: entered allmulticast mode [ 187.831021][ T9685] veth0_macvtap: entered allmulticast mode [ 188.106571][ T9706] tipc: New replicast peer: 255.255.255.255 [ 188.157430][ T9706] tipc: Enabled bearer , priority 10 [ 188.236143][ T9719] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 188.253985][ T9720] erspan0: entered promiscuous mode [ 188.259250][ T9720] erspan0: entered allmulticast mode [ 188.387115][ T9724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.419967][ T9727] macvlan0: entered promiscuous mode [ 188.450961][ T9727] macvlan0: entered allmulticast mode [ 188.491408][ T9727] netlink: 'syz.2.1109': attribute type 21 has an invalid length. [ 188.729751][ T9742] tipc: Enabled bearer , priority 10 [ 188.944479][ T9748] pim6reg1: entered promiscuous mode [ 188.961047][ T9748] pim6reg1: entered allmulticast mode [ 189.003661][ T9755] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.143871][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.300848][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.333264][ T9773] netlink: 'syz.3.1127': attribute type 30 has an invalid length. [ 189.499261][ T9780] can: request_module (can-proto-0) failed. [ 189.575203][ T9787] __nla_validate_parse: 8 callbacks suppressed [ 189.575225][ T9787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1133'. [ 189.634682][ T9787] netlink: 'syz.1.1133': attribute type 7 has an invalid length. [ 189.649897][ T9787] netlink: 'syz.1.1133': attribute type 8 has an invalid length. [ 189.658226][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 189.841145][ T5962] tipc: Node number set to 1877420886 [ 190.092175][ T9814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1140'. [ 190.130247][ T9817] erspan0: entered promiscuous mode [ 190.141495][ T9817] erspan0: entered allmulticast mode [ 190.600220][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1152'. [ 190.624055][ T9853] sctp: [Deprecated]: syz.0.1151 (pid 9853) Use of int in max_burst socket option deprecated. [ 190.624055][ T9853] Use struct sctp_assoc_value instead [ 190.660396][ T9854] sctp: [Deprecated]: syz.0.1151 (pid 9854) Use of int in max_burst socket option deprecated. [ 190.660396][ T9854] Use struct sctp_assoc_value instead [ 190.694722][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1153'. [ 190.711401][ T9856] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1153'. [ 191.022789][ T6721] wlan1: Trigger new scan to find an IBSS to join [ 191.059759][ T9876] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1159'. [ 191.068223][ T9881] blkio.reset_stats is deprecated [ 191.069398][ T9876] nbd: must specify a size in bytes for the device [ 191.162586][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 191.178396][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 191.220016][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1165'. [ 191.372873][ T9895] unknown channel width for channel at 909000KHz? [ 191.629901][ T9910] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 191.754414][ T9919] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 191.780087][ T9919] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 191.819411][ T9919] netlink: 'syz.1.1177': attribute type 2 has an invalid length. [ 191.875324][ T9919] netlink: 'syz.1.1177': attribute type 2 has an invalid length. [ 192.487505][ T9960] tipc: Resetting bearer [ 192.573694][ T9963] tipc: Resetting bearer [ 193.083244][ T9985] nbd0: detected capacity change from 0 to 127 [ 193.207609][ T5876] block nbd0: Receive control failed (result -104) [ 193.257335][ T9992] ip6erspan0: entered promiscuous mode [ 193.461851][T10014] netlink: 'syz.1.1206': attribute type 21 has an invalid length. [ 193.508400][T10017] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 193.518988][T10017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.555891][T10014] netlink: 'syz.1.1206': attribute type 5 has an invalid length. [ 193.589561][T10019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.959291][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.005066][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.015052][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.027043][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.039441][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.053029][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.061620][ T6728] wlan1: Trigger new scan to find an IBSS to join [ 194.107314][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.115230][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.124491][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.131837][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.138831][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.149505][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.157865][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.165921][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.175619][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.189542][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.202064][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.215419][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.219556][T10057] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 194.232991][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.251333][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.268486][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.287867][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.324314][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.333356][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.346512][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.354057][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.365668][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.375190][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.383721][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.391308][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.402868][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.465886][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477726][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.484758][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.508438][T10042] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003 [ 194.534008][T10074] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 194.570866][T10074] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 194.595725][T10079] netlink: 'syz.2.1225': attribute type 12 has an invalid length. [ 194.620408][T10079] __nla_validate_parse: 25 callbacks suppressed [ 194.620427][T10079] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1225'. [ 194.687292][T10079] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1225'. [ 194.816587][T10093] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1231'. [ 195.109239][T10109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1236'. [ 195.431419][ T6721] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.439334][ T6721] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.445016][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 195.462364][ T5962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.525231][T10121] dummy0: entered promiscuous mode [ 195.535794][T10121] batadv_slave_1: entered promiscuous mode [ 195.613756][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 195.650516][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'. [ 195.931321][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.141424][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 196.419781][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 196.646287][T10184] tipc: Enabled bearer , priority 0 [ 196.673830][T10184] syzkaller0: entered promiscuous mode [ 196.686200][T10184] syzkaller0: entered allmulticast mode [ 196.698900][T10185] veth0: entered promiscuous mode [ 196.709766][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 196.739215][T10189] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1262'. [ 196.822571][T10190] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.847430][T10190] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.868253][T10182] veth0: left promiscuous mode [ 196.883998][T10184] tipc: Resetting bearer [ 196.912361][T10183] tipc: Resetting bearer [ 197.001193][T10183] tipc: Disabling bearer [ 197.025000][ T6721] wlan1: Creating new IBSS network, BSSID a6:00:e5:aa:cb:ff [ 197.137141][T10190] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.143956][T10199] validate_nla: 1 callbacks suppressed [ 197.143978][T10199] netlink: 'syz.4.1265': attribute type 23 has an invalid length. [ 197.170449][T10190] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.368640][T10190] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.401283][T10190] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.713891][T10190] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.733125][T10190] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.961923][ T6728] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.980124][ T6728] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.048215][ T6720] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.066300][ T6720] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.126748][ T6728] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.154407][ T6728] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.209761][T10255] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 198.215137][ T6709] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.234521][ T6709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.240089][T10255] netlink: 'syz.2.1284': attribute type 2 has an invalid length. [ 198.656187][T10282] macvtap2: entered promiscuous mode [ 198.666674][T10282] vlan0: entered promiscuous mode [ 198.678409][T10282] macvtap2: entered allmulticast mode [ 198.687579][T10282] vlan0: entered allmulticast mode [ 198.694740][T10282] veth0_vlan: entered allmulticast mode [ 198.736785][T10287] macvtap3: entered promiscuous mode [ 198.748827][T10287] macvtap3: entered allmulticast mode [ 199.501349][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 199.786215][T10340] __nla_validate_parse: 5 callbacks suppressed [ 199.786235][T10340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1305'. [ 199.817833][T10340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1305'. [ 199.835408][T10343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1305'. [ 199.854597][T10343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1305'. [ 199.934351][T10351] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 199.942417][T10351] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1306'. [ 199.958655][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 200.437602][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 200.475294][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1315'. [ 200.528479][T10376] geneve2: entered promiscuous mode [ 200.554686][T10376] geneve2: entered allmulticast mode [ 200.614105][ T6709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.640532][T10376] netlink: 'syz.0.1315': attribute type 21 has an invalid length. [ 200.667698][ T6709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.678994][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 200.679099][T10376] netlink: 'syz.0.1315': attribute type 22 has an invalid length. [ 200.715048][ T6709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.733987][ T6709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.753342][T10376] netlink: 'syz.0.1315': attribute type 23 has an invalid length. [ 200.784076][T10376] netlink: 'syz.0.1315': attribute type 25 has an invalid length. [ 200.806240][T10376] netlink: 'syz.0.1315': attribute type 26 has an invalid length. [ 200.840721][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 200.883119][T10390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.131851][T10455] vlan2: entered promiscuous mode [ 202.136973][T10455] syz_tun: entered promiscuous mode [ 202.243796][T10470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.289754][T10471] netlink: 'syz.1.1334': attribute type 7 has an invalid length. [ 202.747310][T10500] tipc: Enabled bearer , priority 0 [ 202.792253][T10501] syzkaller0: entered promiscuous mode [ 202.797782][T10501] syzkaller0: entered allmulticast mode [ 202.831434][T10510] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 202.840173][T10501] tipc: Resetting bearer [ 202.889854][T10501] tipc: Disabling bearer [ 203.328786][T10536] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 203.420809][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.557992][T10546] tipc: Enabled bearer , priority 0 [ 203.649867][T10546] syzkaller0: entered promiscuous mode [ 203.655581][T10546] syzkaller0: entered allmulticast mode [ 203.662732][T10546] tipc: Resetting bearer [ 203.709671][T10545] tipc: Resetting bearer [ 203.739618][T10549] syz.1.1356 (10549) used greatest stack depth: 17864 bytes left [ 204.563864][ T43] tipc: Node number set to 224415392 [ 205.311922][T10545] tipc: Disabling bearer [ 205.629713][T10593] __nla_validate_parse: 13 callbacks suppressed [ 205.629734][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 205.646711][T10593] tc_dump_action: action bad kind [ 205.657514][T10593] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1368'. [ 205.690349][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 205.811845][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 205.892067][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 205.977133][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 206.060183][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 206.128396][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 206.178303][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 206.245111][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 206.325017][T10620] tunl0: entered promiscuous mode [ 206.348517][T10620] netlink: 'syz.3.1376': attribute type 3 has an invalid length. [ 206.439576][T10622] bridge3: entered promiscuous mode [ 206.447483][T10622] bridge3: entered allmulticast mode [ 206.470216][T10623] bridge4: entered promiscuous mode [ 206.484492][T10623] bridge4: entered allmulticast mode [ 206.807759][T10638] netlink: 'syz.2.1383': attribute type 29 has an invalid length. [ 206.867389][T10640] bond0: entered promiscuous mode [ 206.875743][T10640] bond0: left promiscuous mode [ 206.914189][T10638] netlink: 'syz.2.1383': attribute type 29 has an invalid length. [ 206.939317][T10646] netlink: 'syz.2.1383': attribute type 29 has an invalid length. [ 206.964744][T10642] syzkaller0: entered promiscuous mode [ 206.977160][T10642] syzkaller0: entered allmulticast mode [ 206.993379][T10646] netlink: 'syz.2.1383': attribute type 29 has an invalid length. [ 207.161820][T10646] netlink: 'syz.2.1383': attribute type 11 has an invalid length. [ 207.260896][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.474498][T10666] netlink: 'syz.1.1394': attribute type 12 has an invalid length. [ 207.555277][T10669] gre0: entered promiscuous mode [ 207.565051][T10673] netlink: 'syz.4.1397': attribute type 2 has an invalid length. [ 207.764184][T10675] bridge_slave_0: left allmulticast mode [ 207.769978][T10675] bridge_slave_0: left promiscuous mode [ 207.841128][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.896935][T10694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.914862][T10675] bridge_slave_1: left allmulticast mode [ 207.938665][T10675] bridge_slave_1: left promiscuous mode [ 207.950552][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.007476][T10675] bond0: (slave bond_slave_0): Releasing backup interface [ 208.032426][T10675] bond0: (slave bond_slave_1): Releasing backup interface [ 208.058217][T10675] team0: Port device team_slave_0 removed [ 208.069715][T10675] team0: Port device team_slave_1 removed [ 208.076655][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.086651][T10675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.097624][T10675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.105702][T10675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.127209][T10675] team0: Port device geneve0 removed [ 208.134387][T10675] bond1: left allmulticast mode [ 208.139374][T10675] bond1: left promiscuous mode [ 208.146892][T10675] bridge1: port 1(bond1) entered disabled state [ 208.291533][ T5954] hsr0 speed is unknown, defaulting to 1000 [ 208.600338][T10726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.197306][T10762] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 210.255038][T10810] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 210.284984][T10813] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 210.293772][T10806] tipc: Enabled bearer , priority 0 [ 210.374460][T10806] syzkaller0: entered promiscuous mode [ 210.379993][T10806] syzkaller0: entered allmulticast mode [ 210.663492][T10806] tipc: Resetting bearer [ 210.783525][T10806] tipc: Disabling bearer [ 210.889322][T10821] pim6reg1: entered promiscuous mode [ 210.925172][T10821] pim6reg1: entered allmulticast mode [ 211.023166][T10848] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.070012][T10850] __nla_validate_parse: 15 callbacks suppressed [ 211.070033][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'. [ 211.511809][T10877] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 211.631490][T10877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.726035][T10882] bond0: (slave wlan0): Enslaving as an active interface with a down link [ 211.827417][T10877] vlan3: entered allmulticast mode [ 211.857282][T10877] veth1: entered allmulticast mode [ 211.936349][T10888] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 212.001024][T10888] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1458'. [ 212.119097][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 212.159969][T10915] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 212.207396][T10921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1466'. [ 212.210848][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1465'. [ 212.251042][T10915] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1465'. [ 212.296130][T10912] hsr0 speed is unknown, defaulting to 1000 [ 212.335294][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 212.523786][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 212.720113][T10943] Bluetooth: MGMT ver 1.23 [ 212.955450][T10949] netlink: 'syz.4.1477': attribute type 16 has an invalid length. [ 212.967394][T10947] tipc: Enabled bearer , priority 0 [ 212.974731][T10949] netlink: 'syz.4.1477': attribute type 17 has an invalid length. [ 212.989221][T10947] syzkaller0: entered promiscuous mode [ 212.995308][T10947] syzkaller0: entered allmulticast mode [ 213.042931][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.119797][T10953] tipc: New replicast peer: 255.255.255.255 [ 213.127820][T10953] tipc: Enabled bearer , priority 10 [ 213.140370][T10947] tipc: Resetting bearer [ 213.157035][T10946] tipc: Resetting bearer [ 213.182862][T10946] tipc: Disabling bearer [ 213.432207][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.865200][T10991] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 213.935664][T10991] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 214.019897][T11000] delete_channel: no stack [ 214.074093][T11003] netlink: 'syz.2.1494': attribute type 3 has an invalid length. [ 214.179733][T11016] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1495'. [ 214.189800][T11010] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1493'. [ 214.630456][T11010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.661507][T11010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.672149][T11010] bond0 (unregistering): Released all slaves [ 215.009211][T11052] IPVS: ip_vs_edit_dest(): server weight less than zero [ 215.022698][T11052] vxcan1: tx address claim with different name [ 215.627076][T11094] sctp: [Deprecated]: syz.4.1514 (pid 11094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.627076][T11094] Use struct sctp_sack_info instead [ 216.159617][T11128] __nla_validate_parse: 4 callbacks suppressed [ 216.159642][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1525'. [ 216.190280][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1523'. [ 216.426472][T11136] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.446960][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1526'. [ 216.451217][T11134] sctp: [Deprecated]: syz.2.1527 (pid 11134) Use of int in maxseg socket option. [ 216.451217][T11134] Use struct sctp_assoc_value instead [ 216.700390][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 217.024779][ T5886] Bluetooth: hci4: command 0x0406 tx timeout [ 217.025113][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.031069][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.036960][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 217.142474][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a1fc800: rx timeout, send abort [ 217.154591][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a1fc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 217.169379][T11173] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 217.197829][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 217.369556][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1543'. [ 217.400933][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 217.458370][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1545'. [ 217.479132][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1545'. [ 217.626785][T11191] tipc: Enabling of bearer rejected, failed to enable media [ 217.838507][T11199] openvswitch: netlink: Key type 10502 is out of range max 32 [ 217.849283][T11204] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 218.713354][T11235] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1554'. [ 219.138179][T11252] team0: Device vti0 is of different type [ 219.193117][T11248] team0: Device vti0 is of different type [ 219.493647][T11278] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 219.502103][T11278] netlink: 'syz.0.1565': attribute type 2 has an invalid length. [ 219.533861][T11278] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 219.558627][T11278] netlink: 'syz.0.1565': attribute type 2 has an invalid length. [ 219.718869][T11289] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 219.775733][T11289] geneve2: entered promiscuous mode [ 219.789128][T11289] geneve2: entered allmulticast mode [ 219.819079][T11291] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 219.877909][ T6726] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.930978][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.964426][ T6714] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 219.980414][ T6714] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 221.029521][T11352] hsr0 speed is unknown, defaulting to 1000 [ 221.039404][T11355] tipc: Enabled bearer , priority 0 [ 221.084391][T11355] syzkaller0: entered promiscuous mode [ 221.098137][T11355] syzkaller0: entered allmulticast mode [ 221.274671][T11355] tipc: Resetting bearer [ 221.332124][T11354] tipc: Resetting bearer [ 221.381609][T11354] tipc: Disabling bearer [ 221.453226][T11372] __nla_validate_parse: 7 callbacks suppressed [ 221.453250][T11372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1597'. [ 222.004679][T11405] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 222.621922][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 222.639206][T11428] netlink: 'syz.3.1608': attribute type 1 has an invalid length. [ 222.679492][T11433] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1610'. [ 222.962885][T11446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 223.055129][T11448] 8021q: VLANs not supported on ip_vti0 [ 223.121933][T11452] 8021q: VLANs not supported on ip_vti0 [ 223.262556][ T11] block nbd0: Possible stuck request ffff888025535080: control (read@0,1024B). Runtime 30 seconds [ 223.274856][ T11] block nbd0: Possible stuck request ffff888025535240: control (read@1024,1024B). Runtime 30 seconds [ 223.286503][ T11] block nbd0: Possible stuck request ffff888025535400: control (read@2048,1024B). Runtime 30 seconds [ 223.297507][ T11] block nbd0: Possible stuck request ffff8880255355c0: control (read@3072,1024B). Runtime 30 seconds [ 223.298100][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 223.344430][T11463] sctp: Trying to GSO but underlying device doesn't support it. [ 223.468104][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 223.648370][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1622'. [ 223.713256][T11479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1624'. [ 224.129537][T11505] sctp: [Deprecated]: syz.1.1629 (pid 11505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.129537][T11505] Use struct sctp_sack_info instead [ 224.245373][T11514] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1632'. [ 224.625301][T11532] netlink: zone id is out of range [ 224.738639][T11532] netlink: zone id is out of range [ 224.771202][T11532] netlink: zone id is out of range [ 224.832832][T11532] netlink: zone id is out of range [ 224.904872][T11532] netlink: zone id is out of range [ 224.917491][T11541] team0: Port device team_slave_0 removed [ 224.945736][T11532] netlink: zone id is out of range [ 224.955044][T11532] netlink: zone id is out of range [ 224.967888][T11541] team0: Port device team_slave_1 removed [ 224.972696][T11532] netlink: zone id is out of range [ 224.983007][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 224.997858][T11541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.000341][T11532] netlink: zone id is out of range [ 225.005672][T11541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.024667][T11541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.033171][T11541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.033543][T11532] netlink: zone id is out of range [ 225.082824][T11538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1639'. [ 225.095176][ T6713] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 225.281689][T11560] netlink: 'syz.1.1642': attribute type 64 has an invalid length. [ 225.665722][T11568] syzkaller0: entered promiscuous mode [ 225.671773][T11568] syzkaller0: entered allmulticast mode [ 227.552419][T11603] __nla_validate_parse: 3 callbacks suppressed [ 227.552440][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'. [ 227.736260][T11616] IPVS: set_ctl: invalid protocol: 41 172.20.20.1:20002 [ 227.766533][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1660'. [ 227.781150][T11617] tipc: Invalid UDP bearer configuration [ 227.781213][T11617] tipc: Enabling of bearer rejected, failed to enable media [ 227.790155][T11602] netlink: 'syz.4.1657': attribute type 16 has an invalid length. [ 227.813785][T11602] netlink: 'syz.4.1657': attribute type 17 has an invalid length. [ 227.853423][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1657'. [ 227.906271][T11606] lo: entered allmulticast mode [ 227.914726][T11622] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1663'. [ 227.934440][T11602] lo: left allmulticast mode [ 227.944273][T11622] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 227.954075][T11624] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1663'. [ 227.967385][T11622] 0ªî{X¹¦: entered allmulticast mode [ 227.991609][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 228.008223][T11624] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 228.136174][T11633] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.155847][T11633] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.197751][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 228.208638][T11637] syz_tun: entered allmulticast mode [ 228.232327][T11633] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.247265][T11633] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.306033][T11637] syz_tun: left allmulticast mode [ 228.348183][T11633] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.358880][T11633] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.506132][T11633] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.544533][T11633] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.577672][ T6718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.590718][ T6718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.813869][ T6721] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.840938][ T6721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.986513][ T6721] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.007772][ T6721] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.040186][ T6721] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.056962][ T6721] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.093807][ T6713] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.104723][ T6713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.231344][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 229.358520][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 229.470567][T11696] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1682'. [ 229.559790][T11701] FAULT_INJECTION: forcing a failure. [ 229.559790][T11701] name failslab, interval 1, probability 0, space 0, times 1 [ 229.603823][T11701] CPU: 1 UID: 0 PID: 11701 Comm: syz.1.1686 Not tainted syzkaller #0 PREEMPT(full) [ 229.603852][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.603864][T11701] Call Trace: [ 229.603871][T11701] [ 229.603880][T11701] dump_stack_lvl+0x189/0x250 [ 229.603907][T11701] ? __pfx____ratelimit+0x10/0x10 [ 229.603937][T11701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.603960][T11701] ? __pfx__printk+0x10/0x10 [ 229.603994][T11701] ? __pfx___might_resched+0x10/0x10 [ 229.604019][T11701] should_fail_ex+0x414/0x560 [ 229.604062][T11701] should_failslab+0xa8/0x100 [ 229.604092][T11701] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 229.604119][T11701] ? __alloc_skb+0x112/0x2d0 [ 229.604144][T11701] __alloc_skb+0x112/0x2d0 [ 229.604168][T11701] netlink_sendmsg+0x5c6/0xb30 [ 229.604199][T11701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.604223][T11701] ? aa_sock_msg_perm+0xf1/0x1d0 [ 229.604244][T11701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.604265][T11701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.604285][T11701] __sock_sendmsg+0x21c/0x270 [ 229.604315][T11701] __sys_sendto+0x3bd/0x520 [ 229.604337][T11701] ? __pfx___sys_sendto+0x10/0x10 [ 229.604353][T11701] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 229.604388][T11701] ? __fget_files+0x3a0/0x420 [ 229.604418][T11701] ? ksys_write+0x22a/0x250 [ 229.604446][T11701] ? __pfx_ksys_write+0x10/0x10 [ 229.604468][T11701] ? rcu_is_watching+0x15/0xb0 [ 229.604494][T11701] __x64_sys_sendto+0xde/0x100 [ 229.604517][T11701] do_syscall_64+0xfa/0x3b0 [ 229.604534][T11701] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.604561][T11701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.604580][T11701] ? clear_bhb_loop+0x60/0xb0 [ 229.604604][T11701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.604622][T11701] RIP: 0033:0x7f20ffb8ebe9 [ 229.604639][T11701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.604655][T11701] RSP: 002b:00007f21009c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.604677][T11701] RAX: ffffffffffffffda RBX: 00007f20ffdc5fa0 RCX: 00007f20ffb8ebe9 [ 229.604690][T11701] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 229.604702][T11701] RBP: 00007f21009c4090 R08: 0000000000000000 R09: 0000000000000000 [ 229.604713][T11701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.604724][T11701] R13: 00007f20ffdc6038 R14: 00007f20ffdc5fa0 R15: 00007ffed8c788c8 [ 229.604757][T11701] [ 230.401804][T11741] netlink: 'syz.4.1698': attribute type 29 has an invalid length. [ 230.419072][T11741] netlink: 'syz.4.1698': attribute type 29 has an invalid length. [ 230.908639][T11776] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 230.922377][T11775] netlink: 'syz.2.1710': attribute type 1 has an invalid length. [ 230.998214][T11776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.045759][T11784] netlink: 'syz.1.1712': attribute type 6 has an invalid length. [ 231.870521][T11821] netlink: 'syz.3.1723': attribute type 83 has an invalid length. [ 232.148782][T11829] sctp: [Deprecated]: syz.3.1726 (pid 11829) Use of int in maxseg socket option. [ 232.148782][T11829] Use struct sctp_assoc_value instead [ 232.411196][T11839] netlink: 'syz.4.1729': attribute type 1 has an invalid length. [ 232.563074][T11843] netlink: 'syz.2.1731': attribute type 3 has an invalid length. [ 232.929372][T11856] netlink: 'syz.3.1736': attribute type 16 has an invalid length. [ 232.983868][T11856] netlink: 'syz.3.1736': attribute type 17 has an invalid length. [ 233.030184][T11856] tunl0: left promiscuous mode [ 233.048630][T11856] 1ªî{X¹¦: left allmulticast mode [ 233.077561][T11876] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 233.087955][T11856] erspan0: left promiscuous mode [ 233.095568][T11856] erspan0: left allmulticast mode [ 233.119570][T11856] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.167654][T11877] __nla_validate_parse: 10 callbacks suppressed [ 233.167674][T11877] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1742'. [ 233.213336][T11856] net_ratelimit: 12 callbacks suppressed [ 233.213348][T11856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.290521][T11888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 233.322688][T11877] 8021q: VLANs not supported on ip6tnl0 [ 233.546516][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'. [ 233.581201][T11896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1745'. [ 233.643462][T11895] xfrm1: entered promiscuous mode [ 233.648554][T11895] xfrm1: entered allmulticast mode [ 233.701923][T11903] netlink: 'syz.0.1749': attribute type 11 has an invalid length. [ 233.710467][T11900] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1748'. [ 233.750946][T11903] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1749'. [ 233.916819][T11916] tipc: Enabled bearer , priority 0 [ 233.925234][T11916] syzkaller0: entered promiscuous mode [ 233.935924][T11916] syzkaller0: entered allmulticast mode [ 234.018789][T11909] geneve2: entered promiscuous mode [ 234.040852][T11909] geneve2: entered allmulticast mode [ 234.095534][T11923] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1756'. [ 234.119638][T11909] tipc: Resetting bearer [ 234.145079][T11906] tipc: Resetting bearer [ 234.179705][T11906] tipc: Disabling bearer [ 234.226102][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 234.226280][T11930] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1756'. [ 234.238518][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'. [ 235.018214][T11964] hsr0 speed is unknown, defaulting to 1000 [ 235.044499][T11960] lo speed is unknown, defaulting to 1000 [ 235.054974][T11960] lo speed is unknown, defaulting to 1000 [ 235.077073][T11960] lo speed is unknown, defaulting to 1000 [ 235.140324][T11960] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.224544][T11975] FAULT_INJECTION: forcing a failure. [ 235.224544][T11975] name failslab, interval 1, probability 0, space 0, times 0 [ 235.245448][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.2.1771 Not tainted syzkaller #0 PREEMPT(full) [ 235.245477][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.245488][T11975] Call Trace: [ 235.245495][T11975] [ 235.245503][T11975] dump_stack_lvl+0x189/0x250 [ 235.245530][T11975] ? __pfx____ratelimit+0x10/0x10 [ 235.245559][T11975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.245580][T11975] ? __pfx__printk+0x10/0x10 [ 235.245613][T11975] ? __pfx___might_resched+0x10/0x10 [ 235.245638][T11975] should_fail_ex+0x414/0x560 [ 235.245671][T11975] should_failslab+0xa8/0x100 [ 235.245698][T11975] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 235.245724][T11975] ? __alloc_skb+0x112/0x2d0 [ 235.245748][T11975] __alloc_skb+0x112/0x2d0 [ 235.245772][T11975] netlink_dump+0x1b7/0xe90 [ 235.245817][T11975] ? __pfx_netlink_dump+0x10/0x10 [ 235.245864][T11975] ? __inet_diag_dump_start+0x89a/0xa10 [ 235.245886][T11975] ? netlink_lookup+0x30/0x200 [ 235.245920][T11975] __netlink_dump_start+0x5cb/0x7e0 [ 235.245968][T11975] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 235.245994][T11975] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 235.246027][T11975] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 235.246046][T11975] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 235.246064][T11975] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 235.246091][T11975] ? sock_diag_rcv_msg+0x188/0x600 [ 235.246126][T11975] sock_diag_rcv_msg+0x4cc/0x600 [ 235.246159][T11975] netlink_rcv_skb+0x205/0x470 [ 235.246188][T11975] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 235.246219][T11975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.246262][T11975] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.246301][T11975] netlink_unicast+0x82c/0x9e0 [ 235.246339][T11975] ? __pfx_netlink_unicast+0x10/0x10 [ 235.246368][T11975] ? netlink_sendmsg+0x642/0xb30 [ 235.246384][T11975] ? skb_put+0x11b/0x210 [ 235.246408][T11975] netlink_sendmsg+0x805/0xb30 [ 235.246438][T11975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.246459][T11975] ? aa_sock_msg_perm+0xf1/0x1d0 [ 235.246480][T11975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.246500][T11975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.246520][T11975] __sock_sendmsg+0x21c/0x270 [ 235.246551][T11975] __sys_sendto+0x3bd/0x520 [ 235.246574][T11975] ? __pfx___sys_sendto+0x10/0x10 [ 235.246589][T11975] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 235.246625][T11975] ? __fget_files+0x3a0/0x420 [ 235.246657][T11975] ? ksys_write+0x22a/0x250 [ 235.246684][T11975] ? __pfx_ksys_write+0x10/0x10 [ 235.246705][T11975] ? rcu_is_watching+0x15/0xb0 [ 235.246731][T11975] __x64_sys_sendto+0xde/0x100 [ 235.246754][T11975] do_syscall_64+0xfa/0x3b0 [ 235.246770][T11975] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.246796][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.246815][T11975] ? clear_bhb_loop+0x60/0xb0 [ 235.246839][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.246857][T11975] RIP: 0033:0x7f916cd8ebe9 [ 235.246875][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.246891][T11975] RSP: 002b:00007f916dba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 235.246912][T11975] RAX: ffffffffffffffda RBX: 00007f916cfc5fa0 RCX: 00007f916cd8ebe9 [ 235.246926][T11975] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 235.246945][T11975] RBP: 00007f916dba9090 R08: 0000000000000000 R09: 0000000000000000 [ 235.246957][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.246968][T11975] R13: 00007f916cfc6038 R14: 00007f916cfc5fa0 R15: 00007ffc91cc4e58 [ 235.247003][T11975] [ 235.662882][T11960] lo speed is unknown, defaulting to 1000 [ 235.723095][T11960] lo speed is unknown, defaulting to 1000 [ 235.767138][T11982] delete_channel: no stack [ 235.823806][T11960] lo speed is unknown, defaulting to 1000 [ 235.856663][T11960] lo speed is unknown, defaulting to 1000 [ 235.865431][T11960] lo speed is unknown, defaulting to 1000 [ 235.873975][T11960] lo speed is unknown, defaulting to 1000 [ 235.980703][T11992] validate_nla: 4 callbacks suppressed [ 235.980746][T11992] netlink: 'syz.0.1777': attribute type 10 has an invalid length. [ 236.048494][T11997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.637728][T12022] netlink: 'syz.0.1784': attribute type 21 has an invalid length. [ 236.773050][T12027] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 237.161386][T12045] syzkaller1: entered promiscuous mode [ 237.181586][T12045] syzkaller1: entered allmulticast mode [ 237.506031][T12062] FAULT_INJECTION: forcing a failure. [ 237.506031][T12062] name failslab, interval 1, probability 0, space 0, times 0 [ 237.540743][T12062] CPU: 0 UID: 0 PID: 12062 Comm: syz.2.1795 Not tainted syzkaller #0 PREEMPT(full) [ 237.540770][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.540780][T12062] Call Trace: [ 237.540788][T12062] [ 237.540796][T12062] dump_stack_lvl+0x189/0x250 [ 237.540825][T12062] ? __pfx____ratelimit+0x10/0x10 [ 237.540855][T12062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.540878][T12062] ? __pfx__printk+0x10/0x10 [ 237.540924][T12062] should_fail_ex+0x414/0x560 [ 237.540957][T12062] should_failslab+0xa8/0x100 [ 237.540996][T12062] kmem_cache_alloc_noprof+0x73/0x3c0 [ 237.541022][T12062] ? skb_clone+0x212/0x3a0 [ 237.541051][T12062] skb_clone+0x212/0x3a0 [ 237.541079][T12062] __netlink_deliver_tap+0x404/0x850 [ 237.541125][T12062] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.541156][T12062] netlink_deliver_tap+0x19c/0x1b0 [ 237.541187][T12062] netlink_dump+0x92b/0xe90 [ 237.541231][T12062] ? __pfx_netlink_dump+0x10/0x10 [ 237.541280][T12062] ? __inet_diag_dump_start+0x89a/0xa10 [ 237.541303][T12062] ? netlink_lookup+0x30/0x200 [ 237.541338][T12062] __netlink_dump_start+0x5cb/0x7e0 [ 237.541378][T12062] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 237.541405][T12062] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 237.541437][T12062] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 237.541456][T12062] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 237.541474][T12062] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 237.541502][T12062] ? sock_diag_rcv_msg+0x188/0x600 [ 237.541536][T12062] sock_diag_rcv_msg+0x4cc/0x600 [ 237.541569][T12062] netlink_rcv_skb+0x205/0x470 [ 237.541599][T12062] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 237.541629][T12062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.541669][T12062] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.541706][T12062] netlink_unicast+0x82c/0x9e0 [ 237.541742][T12062] ? __pfx_netlink_unicast+0x10/0x10 [ 237.541777][T12062] ? netlink_sendmsg+0x642/0xb30 [ 237.541793][T12062] ? skb_put+0x11b/0x210 [ 237.541816][T12062] netlink_sendmsg+0x805/0xb30 [ 237.541848][T12062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.541871][T12062] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.541893][T12062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.541914][T12062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.541934][T12062] __sock_sendmsg+0x21c/0x270 [ 237.541966][T12062] __sys_sendto+0x3bd/0x520 [ 237.542001][T12062] ? __pfx___sys_sendto+0x10/0x10 [ 237.542018][T12062] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 237.542054][T12062] ? __fget_files+0x3a0/0x420 [ 237.542085][T12062] ? ksys_write+0x22a/0x250 [ 237.542115][T12062] ? __pfx_ksys_write+0x10/0x10 [ 237.542137][T12062] ? rcu_is_watching+0x15/0xb0 [ 237.542163][T12062] __x64_sys_sendto+0xde/0x100 [ 237.542187][T12062] do_syscall_64+0xfa/0x3b0 [ 237.542204][T12062] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.542231][T12062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.542251][T12062] ? clear_bhb_loop+0x60/0xb0 [ 237.542275][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.542293][T12062] RIP: 0033:0x7f916cd8ebe9 [ 237.542312][T12062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.542328][T12062] RSP: 002b:00007f916dba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.542350][T12062] RAX: ffffffffffffffda RBX: 00007f916cfc5fa0 RCX: 00007f916cd8ebe9 [ 237.542364][T12062] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 237.542377][T12062] RBP: 00007f916dba9090 R08: 0000000000000000 R09: 0000000000000000 [ 237.542389][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.542400][T12062] R13: 00007f916cfc6038 R14: 00007f916cfc5fa0 R15: 00007ffc91cc4e58 [ 237.542436][T12062] [ 238.212840][T12078] __nla_validate_parse: 4 callbacks suppressed [ 238.212860][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 238.328912][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 238.423315][T12094] netlink: 'syz.0.1804': attribute type 4 has an invalid length. [ 238.426527][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 238.508119][T12100] netlink: 'syz.2.1806': attribute type 11 has an invalid length. [ 239.023302][T12126] IPVS: Scheduler module ip_vs_sip not found [ 239.191344][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1814'. [ 239.261573][T12134] nbd1: detected capacity change from 0 to 63 [ 239.273654][ T5883] block nbd1: Receive control failed (result -104) [ 239.274002][ T5890] block nbd1: Send control failed (result -32) [ 239.306160][T12135] tipc: Enabled bearer , priority 0 [ 239.306933][T12143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.322564][ T5890] block nbd1: Request send failed, requeueing [ 239.344316][ T11] block nbd1: Dead connection, failed to find a fallback [ 239.351816][ T11] block nbd1: shutting down sockets [ 239.355202][T12135] syzkaller0: entered promiscuous mode [ 239.357371][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.363341][T12135] syzkaller0: entered allmulticast mode [ 239.377535][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 239.390860][ T5890] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.400342][ T5890] Buffer I/O error on dev nbd1, logical block 2, async page read [ 239.408799][ T5890] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.418037][ T5890] Buffer I/O error on dev nbd1, logical block 3, async page read [ 239.503199][T12149] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 239.511057][T12149] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1818'. [ 239.555207][T12155] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1818'. [ 239.605128][T12146] bridge0: port 1(veth0_to_bridge) entered blocking state [ 239.613202][T12146] bridge0: port 1(veth0_to_bridge) entered disabled state [ 239.624389][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'. [ 239.635889][T12146] veth0_to_bridge: entered allmulticast mode [ 239.644931][T12146] veth0_to_bridge: entered promiscuous mode [ 239.761447][T12152] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 239.887298][T12157] tipc: Resetting bearer [ 239.905306][T12132] tipc: Resetting bearer [ 240.027260][T12132] tipc: Disabling bearer [ 240.381820][T12202] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 240.445870][T12205] netlink: 'syz.4.1832': attribute type 10 has an invalid length. [ 240.519297][T12205] syz_tun: entered allmulticast mode [ 240.526887][T12205] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 240.544319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.571439][T12202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.640086][T12205] syz_tun: entered promiscuous mode [ 240.649790][T12205] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 240.659200][T12205] bond4: (slave macvlan0): unknown ethtool speed (5) for port 1 (set it to 0) [ 240.669103][T12205] bond4: (slave macvlan0): speed changed to 0 on port 1 [ 240.684519][T12205] bond4: (slave macvlan0): Enslaving as a backup interface with an up link [ 241.221531][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 241.431801][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 241.929513][T12273] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.958133][T12273] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.988126][T12273] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 242.084104][T12280] tipc: Enabled bearer , priority 0 [ 242.105158][T12280] syzkaller0: entered promiscuous mode [ 242.124396][T12280] syzkaller0: entered allmulticast mode [ 242.159139][T12273] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.187853][T12273] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.219998][T12273] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 242.241781][T12284] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1853'. [ 242.294285][T12280] tipc: Resetting bearer [ 242.334495][T12273] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.375794][T12273] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.423122][T12273] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 242.543245][T12279] tipc: Resetting bearer [ 242.621819][T12279] tipc: Disabling bearer [ 242.636031][T12297] netlink: 'syz.0.1855': attribute type 8 has an invalid length. [ 242.656346][T12298] netlink: 'syz.0.1855': attribute type 8 has an invalid length. [ 242.669431][T12273] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.680343][T12273] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.697289][T12273] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.075636][ T6718] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.110725][ T6718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.141154][ T6718] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.215549][ T6714] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.233695][ T6714] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.244173][ T6714] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.289451][ T6714] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.305776][ T6714] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.326063][ T6714] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.408103][ T6714] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.460976][ T6714] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.508708][ T6714] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.616685][T12331] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 243.651055][T12331] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 243.841844][T12347] vlan4: entered allmulticast mode [ 243.861099][T12347] bond0: entered allmulticast mode [ 243.891548][T12355] netlink: 'syz.3.1870': attribute type 9 has an invalid length. [ 243.899344][T12355] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.1870'. [ 244.278707][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 244.789182][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1881'. [ 244.866560][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 244.903579][T12415] vcan0 (unregistering): left allmulticast mode [ 245.164881][T12427] hsr0 speed is unknown, defaulting to 1000 [ 245.179978][T12427] lo speed is unknown, defaulting to 1000 [ 245.390245][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 245.559556][T12445] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 245.605023][T12453] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1893'. [ 245.668328][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.680132][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.720122][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.752285][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.866285][T12461] batman_adv: batadv0: Adding interface: dummy0 [ 245.875554][T12461] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 245.888420][T12465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 245.906151][T12461] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 245.921284][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 246.103405][T12476] : renamed from hsr0 [ 246.113464][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 246.408291][T12491] netlink: 'syz.3.1906': attribute type 7 has an invalid length. [ 246.453468][T12491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1906'. [ 246.664899][T12508] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 246.895787][T12527] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 247.016383][T12535] netlink: 'syz.0.1921': attribute type 4 has an invalid length. [ 247.229004][T12542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.254249][T12553] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 247.801823][T12584] netlink: 'syz.0.1936': attribute type 1 has an invalid length. [ 248.047569][T12598] gtp1: entered promiscuous mode [ 248.060351][T12598] gtp1: entered allmulticast mode [ 248.605994][T12633] netlink: 'syz.4.1950': attribute type 3 has an invalid length. [ 249.110939][T12651] netlink: 'syz.0.1955': attribute type 1 has an invalid length. [ 249.213229][T12651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.285261][T12662] __nla_validate_parse: 11 callbacks suppressed [ 249.285284][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 249.308463][T12664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1958'. [ 249.402796][T12667] netlink: 'syz.1.1959': attribute type 2 has an invalid length. [ 249.440435][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1960'. [ 249.623950][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 249.666430][T12677] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 249.692753][T12677] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 249.705748][T12677] gretap1: entered promiscuous mode [ 249.711499][T12677] gretap1: entered allmulticast mode [ 249.733333][T12679] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1963'. [ 249.749845][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1964'. [ 249.963681][T12694] syzkaller1: entered promiscuous mode [ 249.969212][T12694] syzkaller1: entered allmulticast mode [ 250.024349][T12698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1968'. [ 250.067131][T12700] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 250.154085][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 250.337994][T12700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.652927][T12734] xt_l2tp: invalid flags combination: 8 [ 250.654145][T12727] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 250.742486][T12727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.772762][T12741] siw: device registration error -23 [ 250.809708][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 250.812506][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 251.007065][T12750] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 251.019128][T12751] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 251.045697][T12750] team0: Port device geneve0 added [ 251.239409][T12759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.417154][T12774] sctp: [Deprecated]: syz.0.1989 (pid 12774) Use of int in max_burst socket option. [ 251.417154][T12774] Use struct sctp_assoc_value instead [ 251.589531][T12781] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 251.781940][T12792] netlink: 'syz.2.1997': attribute type 1 has an invalid length. [ 251.936708][T12805] unsupported nlmsg_type 40 [ 251.950272][T12792] bond6: (slave bridge7): making interface the new active one [ 252.004367][T12792] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 252.086952][T12804] warn_alloc: 1 callbacks suppressed [ 252.086972][T12804] syz.0.2002: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 252.139672][T12819] netlink: 'syz.2.2003': attribute type 3 has an invalid length. [ 252.147889][T12804] CPU: 0 UID: 0 PID: 12804 Comm: syz.0.2002 Not tainted syzkaller #0 PREEMPT(full) [ 252.147916][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.147935][T12804] Call Trace: [ 252.147943][T12804] [ 252.147951][T12804] dump_stack_lvl+0x189/0x250 [ 252.147982][T12804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.148005][T12804] ? __pfx__printk+0x10/0x10 [ 252.148030][T12804] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 252.148054][T12804] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 252.148078][T12804] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 252.148102][T12804] warn_alloc+0x214/0x310 [ 252.148140][T12804] ? __pfx_warn_alloc+0x10/0x10 [ 252.148180][T12804] ? __get_vm_area_node+0x28f/0x300 [ 252.148207][T12804] ? nf_tables_newset+0x132b/0x2530 [ 252.148235][T12804] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 252.148293][T12804] ? alloc_pages_mpol+0x3cd/0x4a0 [ 252.148321][T12804] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.148355][T12804] ? rcu_is_watching+0x15/0xb0 [ 252.148377][T12804] ? nf_tables_newset+0x132b/0x2530 [ 252.148397][T12804] ? nf_tables_newset+0x132b/0x2530 [ 252.148415][T12804] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 252.148442][T12804] ? nf_tables_newset+0x132b/0x2530 [ 252.148465][T12804] ? nft_table_lookup+0x211/0x230 [ 252.148484][T12804] ? nft_set_lookup+0x128/0x150 [ 252.148507][T12804] ? nft_hash_privsize+0xef/0xf0 [ 252.148529][T12804] nf_tables_newset+0x132b/0x2530 [ 252.148568][T12804] ? __pfx_nf_tables_newset+0x10/0x10 [ 252.148638][T12804] ? __nla_parse+0x40/0x60 [ 252.148673][T12804] nfnetlink_rcv+0x1132/0x2520 [ 252.148738][T12804] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.148829][T12804] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.148882][T12804] netlink_unicast+0x82c/0x9e0 [ 252.148921][T12804] ? __pfx_netlink_unicast+0x10/0x10 [ 252.148958][T12804] ? netlink_sendmsg+0x642/0xb30 [ 252.148974][T12804] ? skb_put+0x11b/0x210 [ 252.148999][T12804] netlink_sendmsg+0x805/0xb30 [ 252.149031][T12804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.149054][T12804] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.149073][T12804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.149092][T12804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.149110][T12804] __sock_sendmsg+0x21c/0x270 [ 252.149141][T12804] ____sys_sendmsg+0x505/0x830 [ 252.149170][T12804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.149204][T12804] ? import_iovec+0x74/0xa0 [ 252.149232][T12804] ___sys_sendmsg+0x21f/0x2a0 [ 252.149256][T12804] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.149325][T12804] ? __fget_files+0x2a/0x420 [ 252.149343][T12804] ? __fget_files+0x3a0/0x420 [ 252.149374][T12804] __x64_sys_sendmsg+0x19b/0x260 [ 252.149400][T12804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.149436][T12804] ? rcu_is_watching+0x15/0xb0 [ 252.149462][T12804] ? do_syscall_64+0xbe/0x3b0 [ 252.149486][T12804] do_syscall_64+0xfa/0x3b0 [ 252.149502][T12804] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.149530][T12804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.149549][T12804] ? clear_bhb_loop+0x60/0xb0 [ 252.149574][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.149592][T12804] RIP: 0033:0x7f36fb98ebe9 [ 252.149609][T12804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.149626][T12804] RSP: 002b:00007f36fc7e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.149647][T12804] RAX: ffffffffffffffda RBX: 00007f36fbbc5fa0 RCX: 00007f36fb98ebe9 [ 252.149661][T12804] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 252.149673][T12804] RBP: 00007f36fba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 252.149684][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.149695][T12804] R13: 00007f36fbbc6038 R14: 00007f36fbbc5fa0 R15: 00007ffd2af45e08 [ 252.149731][T12804] [ 252.149739][T12804] Mem-Info: [ 252.535357][T12804] active_anon:5773 inactive_anon:0 isolated_anon:0 [ 252.535357][T12804] active_file:2984 inactive_file:39912 isolated_file:0 [ 252.535357][T12804] unevictable:768 dirty:51 writeback:0 [ 252.535357][T12804] slab_reclaimable:11869 slab_unreclaimable:130471 [ 252.535357][T12804] mapped:29173 shmem:1371 pagetables:1300 [ 252.535357][T12804] sec_pagetables:0 bounce:0 [ 252.535357][T12804] kernel_misc_reclaimable:0 [ 252.535357][T12804] free:1293636 free_pcp:14024 free_cma:0 [ 252.584898][T12804] Node 0 active_anon:22992kB inactive_anon:0kB active_file:11936kB inactive_file:159448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116692kB dirty:200kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13724kB pagetables:5036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.646772][T12804] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.686524][T12804] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.727313][T12804] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 252.769506][T12804] Node 0 DMA32 free:1263628kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23048kB inactive_anon:0kB active_file:11936kB inactive_file:157872kB unevictable:1536kB writepending:200kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:39588kB local_pcp:18268kB free_cma:0kB [ 252.845494][T12804] lowmem_reserve[]: 0 0 1 1 1 [ 252.850293][T12804] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 252.892112][T12804] lowmem_reserve[]: 0 0 0 0 0 [ 252.897169][T12804] Node 1 Normal free:3895288kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17344kB local_pcp:12000kB free_cma:0kB [ 252.976820][T12804] lowmem_reserve[]: 0 0 0 0 0 [ 252.991014][T12804] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 253.020942][T12804] Node 0 DMA32: 2*4kB (UE) 0*8kB 163*16kB (ME) 212*32kB (UM) 46*64kB (UME) 11*128kB (UME) 3*256kB (UM) 3*512kB (M) 2*1024kB (ME) 2*2048kB (ME) 303*4096kB (UM) = 1263288kB [ 253.039462][T12804] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 253.086466][T12804] Node 1 Normal: 192*4kB (UME) 37*8kB (UME) 41*16kB (UME) 126*32kB (UME) 28*64kB (UME) 9*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3895288kB [ 253.129609][T12804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.150112][T12804] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.163057][T12804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 253.216947][T12804] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 253.276033][T12804] 44263 total pagecache pages [ 253.290689][T12804] 0 pages in swap cache [ 253.294912][T12804] Free swap = 124996kB [ 253.299102][T12804] Total swap = 124996kB [ 253.340890][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 253.356863][ T11] block nbd0: Possible stuck request ffff888025535080: control (read@0,1024B). Runtime 60 seconds [ 253.367987][ T11] block nbd0: Possible stuck request ffff888025535240: control (read@1024,1024B). Runtime 60 seconds [ 253.379876][ T11] block nbd0: Possible stuck request ffff888025535400: control (read@2048,1024B). Runtime 60 seconds [ 253.383176][T12804] 2097051 pages RAM [ 253.390942][ T11] block nbd0: Possible stuck request ffff8880255355c0: control (read@3072,1024B). Runtime 60 seconds [ 253.453025][T12804] 0 pages HighMem/MovableOnly [ 253.467401][T12804] 425667 pages reserved [ 253.471707][T12804] 0 pages cma reserved [ 254.181119][T12901] netlink: 'syz.2.2026': attribute type 7 has an invalid length. [ 254.717989][T12939] team0: Device gtp0 is of different type [ 255.134615][T12961] openvswitch: netlink: Unknown key attributes 2 [ 255.543395][T12973] __nla_validate_parse: 13 callbacks suppressed [ 255.543416][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 255.856611][T12980] netlink: 'syz.3.2049': attribute type 16 has an invalid length. [ 255.871032][T12980] netlink: 'syz.3.2049': attribute type 17 has an invalid length. [ 255.888348][T12983] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2050'. [ 255.906980][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.938031][T12980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.975187][T12983] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 256.016313][T12991] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 256.049310][T12991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2051'. [ 256.717355][T13019] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2057'. [ 257.105473][T13043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.307847][T13048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 257.378457][T13049] netlink: 'syz.3.2064': attribute type 4 has an invalid length. [ 257.429749][T13054] netlink: 'syz.3.2064': attribute type 4 has an invalid length. [ 257.476650][T13049] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 257.484927][T13049] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2064'. [ 257.494782][T13049] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 257.907192][T13078] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2073'. [ 257.984785][T13078] netlink: 'syz.2.2073': attribute type 13 has an invalid length. [ 258.007785][T13078] macvtap0: entered allmulticast mode [ 258.049669][T13078] macvtap0: refused to change device tx_queue_len [ 258.050000][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 258.229339][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 258.253369][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2076'. [ 258.306895][T13097] sctp: [Deprecated]: syz.0.2080 (pid 13097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.306895][T13097] Use struct sctp_sack_info instead [ 258.888174][T13108] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 258.915730][T13108] netlink: 'syz.0.2083': attribute type 10 has an invalid length. [ 258.924691][T13108] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 258.976731][T13108] batman_adv: batadv0: Removing interface: dummy0 [ 258.994292][T13108] bond1: (slave gretap1): Releasing active interface [ 259.030043][T13108] bond3: (slave geneve3): Releasing backup interface [ 259.046712][ T8380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.087877][ T6721] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.112303][ T6721] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.121948][ T6721] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.132540][ T6721] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.335229][T13131] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.377196][ T6713] tipc: Subscription rejected, illegal request [ 259.446855][T13140] wlan1 speed is unknown, defaulting to 1000 [ 259.474822][ T8380] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 259.514294][T13140] wlan1 speed is unknown, defaulting to 1000 [ 259.520533][T13147] netlink: 'syz.4.2095': attribute type 11 has an invalid length. [ 259.543883][T13140] wlan1 speed is unknown, defaulting to 1000 [ 260.099933][T13140] infiniband syz0: set active [ 260.105313][T13140] infiniband syz0: added wlan1 [ 260.120335][ T8380] wlan1 speed is unknown, defaulting to 1000 [ 260.179072][T13140] RDS/IB: syz0: added [ 260.194821][T13140] smc: adding ib device syz0 with port count 1 [ 260.233299][T13140] smc: ib device syz0 port 1 has pnetid [ 260.272602][ T10] wlan1 speed is unknown, defaulting to 1000 [ 260.279252][T13182] tipc: Enabled bearer , priority 0 [ 260.341656][T13140] wlan1 speed is unknown, defaulting to 1000 [ 260.343197][T13183] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 260.429802][T13182] netlink: 'syz.3.2106': attribute type 1 has an invalid length. [ 260.587488][T13183] tipc: Disabling bearer [ 260.882339][T13210] __nla_validate_parse: 12 callbacks suppressed [ 260.882364][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 261.197553][T13140] wlan1 speed is unknown, defaulting to 1000 [ 261.296903][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2118'. [ 261.475081][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2122'. [ 261.500828][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'. [ 261.571270][T13237] netlink: 'syz.4.2124': attribute type 28 has an invalid length. [ 261.603575][T13237] netlink: 'syz.4.2124': attribute type 3 has an invalid length. [ 261.625500][T13237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2124'. [ 261.668077][T13244] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2126'. [ 261.803565][T13140] wlan1 speed is unknown, defaulting to 1000 [ 262.271388][T13266] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2132'. [ 262.317663][T13140] wlan1 speed is unknown, defaulting to 1000 [ 262.604233][T13283] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 262.739161][T13283] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.866576][T13286] 8021q: adding VLAN 0 to HW filter on device bond6 [ 262.887262][T13286] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.905029][T13286] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 262.938788][T13288] tipc: Enabled bearer , priority 0 [ 262.950070][T13300] syzkaller0: entered promiscuous mode [ 262.960529][T13300] syzkaller0: entered allmulticast mode [ 263.053242][T13140] wlan1 speed is unknown, defaulting to 1000 [ 263.056907][T13290] tipc: Resetting bearer [ 263.096483][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 263.106651][T13287] tipc: Resetting bearer [ 263.134413][T13287] tipc: Disabling bearer [ 263.146709][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 263.169270][T13313] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2144'. [ 263.379070][T13307] macvtap2: entered promiscuous mode [ 263.384794][T13307] vlan0: entered promiscuous mode [ 263.391816][T13307] macvtap2: entered allmulticast mode [ 263.397510][T13307] vlan0: entered allmulticast mode [ 263.404984][T13307] veth0_vlan: entered allmulticast mode [ 263.416448][T13318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.802956][T13365] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 264.857075][T13365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.925713][T13365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.031272][T13375] : renamed from veth0_vlan [ 265.207793][T13365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.246751][T13365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.455652][T13365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.510933][T13365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.707720][T13365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.749934][T13365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.050165][T13407] __nla_validate_parse: 6 callbacks suppressed [ 266.050188][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'. [ 266.119113][ T6714] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.152836][ T6714] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.289595][ T154] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.313219][ T154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.369368][ T154] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.390902][ T154] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.416865][ T154] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.450717][ T154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.521526][T13416] dvmrp0: entered allmulticast mode [ 266.529699][T13416] dvmrp0: left allmulticast mode [ 266.547415][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 266.588662][T13419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.811447][T13435] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 266.822800][T13435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2179'. [ 266.957084][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2181'. [ 266.980307][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 266.981843][T13443] netlink: 'syz.1.2182': attribute type 6 has an invalid length. [ 267.254778][T13453] tipc: Enabled bearer , priority 0 [ 267.318727][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2188'. [ 267.372387][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'. [ 267.463977][T13464] netlink: 'syz.2.2189': attribute type 1 has an invalid length. [ 267.549616][T13464] netlink: 'syz.2.2189': attribute type 1 has an invalid length. [ 267.557919][T13464] netlink: 'syz.2.2189': attribute type 2 has an invalid length. [ 267.921307][T13486] netlink: 'syz.1.2199': attribute type 5 has an invalid length. [ 267.949606][T13486] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2199'. [ 268.028583][T13493] netlink: 'syz.0.2201': attribute type 10 has an invalid length. [ 268.060256][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2200'. [ 268.081897][T13493] team0: Device ipvlan1 failed to register rx_handler [ 268.159662][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 268.170425][T13501] netlink: 'syz.3.2204': attribute type 1 has an invalid length. [ 268.268253][T13506] netlink: 'syz.0.2206': attribute type 29 has an invalid length. [ 268.515374][T13520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 268.740190][T13538] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 268.907292][T13548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.975389][T13551] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 268.990211][ T6715] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.024789][ T6715] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.034942][ T6715] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.065913][ T6715] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.107493][T13560] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.136429][T13558] netlink: 'syz.1.2221': attribute type 12 has an invalid length. [ 269.225321][T13570] ================================================================== [ 269.233620][T13570] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 269.241533][T13570] Read of size 1 at addr ffff88805990c330 by task syz.3.2224/13570 [ 269.249429][T13570] [ 269.251757][T13570] CPU: 0 UID: 0 PID: 13570 Comm: syz.3.2224 Not tainted syzkaller #0 PREEMPT(full) [ 269.251776][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.251786][T13570] Call Trace: [ 269.251792][T13570] [ 269.251799][T13570] dump_stack_lvl+0x189/0x250 [ 269.251820][T13570] ? __kasan_check_byte+0x12/0x40 [ 269.251843][T13570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.251860][T13570] ? lock_release+0x4b/0x3e0 [ 269.251886][T13570] ? __virt_addr_valid+0x4a5/0x5c0 [ 269.251906][T13570] print_report+0xca/0x240 [ 269.251921][T13570] ? xfrm_state_find+0x2cf2/0x5400 [ 269.251935][T13570] kasan_report+0x118/0x150 [ 269.251956][T13570] ? xfrm_state_find+0x2cf2/0x5400 [ 269.251973][T13570] xfrm_state_find+0x2cf2/0x5400 [ 269.251991][T13570] ? __pfx___find_rr_leaf+0x10/0x10 [ 269.252016][T13570] ? xfrm_state_find+0x1da/0x5400 [ 269.252033][T13570] ? __pfx_xfrm_state_find+0x10/0x10 [ 269.252054][T13570] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 269.252084][T13570] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 269.252104][T13570] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 269.252124][T13570] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 269.252157][T13570] ? xfrm_expand_policies+0x41f/0x6a0 [ 269.252178][T13570] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 269.252202][T13570] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 269.252226][T13570] xfrm_lookup_route+0x3c/0x1c0 [ 269.252243][T13570] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 269.252264][T13570] sctp_v6_get_dst+0x7cc/0x1bc0 [ 269.252285][T13570] ? crng_make_state+0x13a/0x700 [ 269.252303][T13570] ? __pfx_crng_make_state+0x10/0x10 [ 269.252323][T13570] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 269.252343][T13570] ? __asan_memset+0x22/0x50 [ 269.252366][T13570] ? dst_release+0x72/0x1b0 [ 269.252385][T13570] sctp_transport_route+0x118/0x2f0 [ 269.252405][T13570] sctp_assoc_add_peer+0x657/0x13b0 [ 269.252426][T13570] sctp_connect_new_asoc+0x30a/0x690 [ 269.252444][T13570] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 269.252459][T13570] ? __local_bh_enable_ip+0x12d/0x1c0 [ 269.252476][T13570] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 269.252493][T13570] ? security_sctp_bind_connect+0x7e/0x2e0 [ 269.252515][T13570] sctp_sendmsg+0x155c/0x2810 [ 269.252541][T13570] ? __pfx_sctp_sendmsg+0x10/0x10 [ 269.252556][T13570] ? aa_sk_perm+0x81e/0x950 [ 269.252578][T13570] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.252601][T13570] ? sock_rps_record_flow+0x19/0x410 [ 269.252621][T13570] ? inet_sendmsg+0x2f4/0x370 [ 269.252641][T13570] __sock_sendmsg+0x19c/0x270 [ 269.252661][T13570] ____sys_sendmsg+0x52d/0x830 [ 269.252679][T13570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.252697][T13570] ? import_iovec+0x74/0xa0 [ 269.252716][T13570] ___sys_sendmsg+0x21f/0x2a0 [ 269.252733][T13570] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.252763][T13570] ? __fget_files+0x2a/0x420 [ 269.252776][T13570] ? __fget_files+0x3a0/0x420 [ 269.252792][T13570] __sys_sendmmsg+0x227/0x430 [ 269.252810][T13570] ? __pfx___sys_sendmmsg+0x10/0x10 [ 269.252829][T13570] ? preempt_schedule_irq+0xde/0x150 [ 269.252860][T13570] __x64_sys_sendmmsg+0xa0/0xc0 [ 269.252877][T13570] do_syscall_64+0xfa/0x3b0 [ 269.252891][T13570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.252905][T13570] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.252919][T13570] ? clear_bhb_loop+0x60/0xb0 [ 269.252935][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.252948][T13570] RIP: 0033:0x7f1031d8ebe9 [ 269.252963][T13570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.252976][T13570] RSP: 002b:00007f1032be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.252994][T13570] RAX: ffffffffffffffda RBX: 00007f1031fc5fa0 RCX: 00007f1031d8ebe9 [ 269.253005][T13570] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000004 [ 269.253014][T13570] RBP: 00007f1031e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 269.253024][T13570] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 269.253033][T13570] R13: 00007f1031fc6038 R14: 00007f1031fc5fa0 R15: 00007fffc49af1f8 [ 269.253050][T13570] [ 269.253057][T13570] [ 269.655505][T13570] Allocated by task 11767: [ 269.659933][T13570] kasan_save_track+0x3e/0x80 [ 269.664622][T13570] __kasan_slab_alloc+0x6c/0x80 [ 269.669479][T13570] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 269.674937][T13570] xfrm_state_alloc+0x24/0x2f0 [ 269.679698][T13570] __find_acq_core+0x8a7/0x1c00 [ 269.684551][T13570] xfrm_find_acq+0x78/0xa0 [ 269.688965][T13570] xfrm_alloc_userspi+0x6b3/0xc90 [ 269.694172][T13570] xfrm_user_rcv_msg+0x7a0/0xab0 [ 269.699117][T13570] netlink_rcv_skb+0x205/0x470 [ 269.704056][T13570] xfrm_netlink_rcv+0x79/0x90 [ 269.708822][T13570] netlink_unicast+0x82c/0x9e0 [ 269.713598][T13570] netlink_sendmsg+0x805/0xb30 [ 269.718357][T13570] __sock_sendmsg+0x21c/0x270 [ 269.723127][T13570] ____sys_sendmsg+0x505/0x830 [ 269.727915][T13570] ___sys_sendmsg+0x21f/0x2a0 [ 269.732622][T13570] __x64_sys_sendmsg+0x19b/0x260 [ 269.737903][T13570] do_syscall_64+0xfa/0x3b0 [ 269.742403][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.748643][T13570] [ 269.750970][T13570] Freed by task 10: [ 269.754776][T13570] kasan_save_track+0x3e/0x80 [ 269.759457][T13570] kasan_save_free_info+0x46/0x50 [ 269.764570][T13570] __kasan_slab_free+0x5b/0x80 [ 269.769344][T13570] kmem_cache_free+0x18f/0x400 [ 269.774248][T13570] xfrm_state_gc_task+0x52d/0x6b0 [ 269.779446][T13570] process_scheduled_works+0xae1/0x17b0 [ 269.785006][T13570] worker_thread+0x8a0/0xda0 [ 269.789664][T13570] kthread+0x70e/0x8a0 [ 269.793732][T13570] ret_from_fork+0x3fc/0x770 [ 269.798329][T13570] ret_from_fork_asm+0x1a/0x30 [ 269.803093][T13570] [ 269.805413][T13570] The buggy address belongs to the object at ffff88805990c000 [ 269.805413][T13570] which belongs to the cache xfrm_state of size 928 [ 269.819373][T13570] The buggy address is located 816 bytes inside of [ 269.819373][T13570] freed 928-byte region [ffff88805990c000, ffff88805990c3a0) [ 269.833167][T13570] [ 269.835487][T13570] The buggy address belongs to the physical page: [ 269.841898][T13570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805990e640 pfn:0x5990c [ 269.852046][T13570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 269.860543][T13570] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 269.868268][T13570] page_type: f5(slab) [ 269.872254][T13570] raw: 00fff00000000040 ffff88801b376140 dead000000000122 0000000000000000 [ 269.880836][T13570] raw: ffff88805990e640 00000000800f0009 00000000f5000000 0000000000000000 [ 269.889420][T13570] head: 00fff00000000040 ffff88801b376140 dead000000000122 0000000000000000 [ 269.898086][T13570] head: ffff88805990e640 00000000800f0009 00000000f5000000 0000000000000000 [ 269.906839][T13570] head: 00fff00000000002 ffffea0001664301 00000000ffffffff 00000000ffffffff [ 269.915943][T13570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 269.924609][T13570] page dumped because: kasan: bad access detected [ 269.931099][T13570] page_owner tracks the page as allocated [ 269.936811][T13570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6626, tgid 6625 (syz.2.193), ts 118765441443, free_ts 114381552782 [ 269.956000][T13570] post_alloc_hook+0x240/0x2a0 [ 269.960793][T13570] get_page_from_freelist+0x21e4/0x22c0 [ 269.966338][T13570] __alloc_frozen_pages_noprof+0x181/0x370 [ 269.972231][T13570] alloc_pages_mpol+0x232/0x4a0 [ 269.977086][T13570] allocate_slab+0x8a/0x370 [ 269.981586][T13570] ___slab_alloc+0xbeb/0x1420 [ 269.986272][T13570] kmem_cache_alloc_noprof+0x283/0x3c0 [ 269.991732][T13570] xfrm_state_alloc+0x24/0x2f0 [ 269.996496][T13570] xfrm_add_sa+0x17d1/0x4070 [ 270.001091][T13570] xfrm_user_rcv_msg+0x7a0/0xab0 [ 270.006026][T13570] netlink_rcv_skb+0x205/0x470 [ 270.010796][T13570] xfrm_netlink_rcv+0x79/0x90 [ 270.015478][T13570] netlink_unicast+0x82c/0x9e0 [ 270.020241][T13570] netlink_sendmsg+0x805/0xb30 [ 270.025022][T13570] __sock_sendmsg+0x21c/0x270 [ 270.029714][T13570] ____sys_sendmsg+0x505/0x830 [ 270.034547][T13570] page last free pid 5869 tgid 5869 stack trace: [ 270.040888][T13570] __free_frozen_pages+0xbc4/0xd30 [ 270.046018][T13570] __slab_free+0x303/0x3c0 [ 270.050440][T13570] qlist_free_all+0x97/0x140 [ 270.055065][T13570] kasan_quarantine_reduce+0x148/0x160 [ 270.060617][T13570] __kasan_slab_alloc+0x22/0x80 [ 270.065501][T13570] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 270.070970][T13570] getname_flags+0xb8/0x540 [ 270.075496][T13570] do_sys_openat2+0xbc/0x1c0 [ 270.080087][T13570] __x64_sys_openat+0x138/0x170 [ 270.084938][T13570] do_syscall_64+0xfa/0x3b0 [ 270.089442][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.095338][T13570] [ 270.097678][T13570] Memory state around the buggy address: [ 270.103478][T13570] ffff88805990c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.111627][T13570] ffff88805990c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.119691][T13570] >ffff88805990c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 270.128008][T13570] ^ [ 270.133681][T13570] ffff88805990c380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 270.142014][T13570] ffff88805990c400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 270.150067][T13570] ================================================================== [ 270.160357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.174474][T13570] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 270.181754][T13570] CPU: 1 UID: 0 PID: 13570 Comm: syz.3.2224 Not tainted syzkaller #0 PREEMPT(full) [ 270.191138][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.201377][T13570] Call Trace: [ 270.204805][T13570] [ 270.207747][T13570] dump_stack_lvl+0x99/0x250 [ 270.212349][T13570] ? __asan_memcpy+0x40/0x70 [ 270.216939][T13570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.222140][T13570] ? __pfx__printk+0x10/0x10 [ 270.226740][T13570] vpanic+0x281/0x750 [ 270.230732][T13570] ? preempt_schedule+0xae/0xc0 [ 270.235606][T13570] ? __pfx_vpanic+0x10/0x10 [ 270.240106][T13570] ? preempt_schedule_common+0x83/0xd0 [ 270.245757][T13570] ? preempt_schedule+0xae/0xc0 [ 270.250669][T13570] ? __pfx_preempt_schedule+0x10/0x10 [ 270.256050][T13570] panic+0xb9/0xc0 [ 270.259784][T13570] ? __pfx_panic+0x10/0x10 [ 270.264197][T13570] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 270.270124][T13570] ? xfrm_state_find+0x2cf2/0x5400 [ 270.275237][T13570] check_panic_on_warn+0x89/0xb0 [ 270.280551][T13570] ? xfrm_state_find+0x2cf2/0x5400 [ 270.285678][T13570] end_report+0x78/0x160 [ 270.289949][T13570] kasan_report+0x129/0x150 [ 270.294471][T13570] ? xfrm_state_find+0x2cf2/0x5400 [ 270.299680][T13570] xfrm_state_find+0x2cf2/0x5400 [ 270.304652][T13570] ? __pfx___find_rr_leaf+0x10/0x10 [ 270.309869][T13570] ? xfrm_state_find+0x1da/0x5400 [ 270.314895][T13570] ? __pfx_xfrm_state_find+0x10/0x10 [ 270.320390][T13570] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 270.326585][T13570] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 270.333204][T13570] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 270.339638][T13570] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 270.345784][T13570] ? xfrm_expand_policies+0x41f/0x6a0 [ 270.351170][T13570] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 270.356572][T13570] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 270.362389][T13570] xfrm_lookup_route+0x3c/0x1c0 [ 270.367247][T13570] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 270.372280][T13570] sctp_v6_get_dst+0x7cc/0x1bc0 [ 270.377139][T13570] ? crng_make_state+0x13a/0x700 [ 270.382165][T13570] ? __pfx_crng_make_state+0x10/0x10 [ 270.387459][T13570] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 270.392754][T13570] ? __asan_memset+0x22/0x50 [ 270.397373][T13570] ? dst_release+0x72/0x1b0 [ 270.401884][T13570] sctp_transport_route+0x118/0x2f0 [ 270.407111][T13570] sctp_assoc_add_peer+0x657/0x13b0 [ 270.412316][T13570] sctp_connect_new_asoc+0x30a/0x690 [ 270.417625][T13570] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 270.423518][T13570] ? __local_bh_enable_ip+0x12d/0x1c0 [ 270.428894][T13570] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 270.434461][T13570] ? security_sctp_bind_connect+0x7e/0x2e0 [ 270.440274][T13570] sctp_sendmsg+0x155c/0x2810 [ 270.444960][T13570] ? __pfx_sctp_sendmsg+0x10/0x10 [ 270.450004][T13570] ? aa_sk_perm+0x81e/0x950 [ 270.454518][T13570] ? __pfx_aa_sk_perm+0x10/0x10 [ 270.459375][T13570] ? sock_rps_record_flow+0x19/0x410 [ 270.464857][T13570] ? inet_sendmsg+0x2f4/0x370 [ 270.469544][T13570] __sock_sendmsg+0x19c/0x270 [ 270.474226][T13570] ____sys_sendmsg+0x52d/0x830 [ 270.479005][T13570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.484383][T13570] ? import_iovec+0x74/0xa0 [ 270.488893][T13570] ___sys_sendmsg+0x21f/0x2a0 [ 270.493574][T13570] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.498894][T13570] ? __fget_files+0x2a/0x420 [ 270.503482][T13570] ? __fget_files+0x3a0/0x420 [ 270.508162][T13570] __sys_sendmmsg+0x227/0x430 [ 270.512929][T13570] ? __pfx___sys_sendmmsg+0x10/0x10 [ 270.518132][T13570] ? preempt_schedule_irq+0xde/0x150 [ 270.523434][T13570] __x64_sys_sendmmsg+0xa0/0xc0 [ 270.528282][T13570] do_syscall_64+0xfa/0x3b0 [ 270.532788][T13570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.538853][T13570] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.545020][T13570] ? clear_bhb_loop+0x60/0xb0 [ 270.549699][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.555678][T13570] RIP: 0033:0x7f1031d8ebe9 [ 270.560100][T13570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.579799][T13570] RSP: 002b:00007f1032be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.588395][T13570] RAX: ffffffffffffffda RBX: 00007f1031fc5fa0 RCX: 00007f1031d8ebe9 [ 270.596470][T13570] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000004 [ 270.604539][T13570] RBP: 00007f1031e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 270.612506][T13570] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 270.620475][T13570] R13: 00007f1031fc6038 R14: 00007f1031fc5fa0 R15: 00007fffc49af1f8 [ 270.628452][T13570] [ 270.631805][T13570] Kernel Offset: disabled [ 270.636120][T13570] Rebooting in 86400 seconds..