last executing test programs: 24.904545369s ago: executing program 1 (id=2988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) 24.683385526s ago: executing program 1 (id=2991): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x44) socket(0x8, 0x4, 0x3) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 23.626414233s ago: executing program 1 (id=3000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) 23.393940417s ago: executing program 1 (id=3005): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="620ad0ff45002c00620ad4ff00000000620ad8ff40060000620adcff7f000001620ae0ff7f000001620ae4ff12345678620ae8ff11223344620aecff00000000620af0ff60021000620af4ff00000000620af8ff02040040620afcff00000000bfa100000000000007010000d0ffffffbfa200000000000007020000e4ffffffb70300001800000085000000cc000000b70000000200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x22, 0x0, &(0x7f0000000400)="00000000000100000000000208004500002800000000400600007f0000017f000001", 0x0, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c6173740000000004000280140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xa, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xe14, 0x30, 0x8101, 0xe501, 0x1000, {}, [{0xe00, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1, 0x3}, {0x0, 0x1, 0x0, 0x465f}, 0x8001, 0x0, 0x5}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0xd90, 0x2, 0x0, 0x0, {{0xb}, {0xd64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x1}}}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x400}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa8a}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xb, 0x5, 0x1, {0x2, 0x1, 0x2, 0xff, 0x8, 0x9}, {0xd, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x4, 0xff, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff00000, 0xa0b7, 0x8, 0x242, 0x8000, 0x9, 0x100, 0x8001, 0xfcd, 0x5, 0x6, 0x2, 0x82, 0xd0, 0x7ff, 0x7, 0x8, 0x2, 0x9, 0x2, 0x0, 0x8, 0x3bc0, 0x487c3a4d, 0x1, 0x7fff, 0x2, 0x1000, 0x7, 0x9, 0x3, 0x5, 0x2, 0xffff, 0x0, 0x2, 0x1, 0xffffffff, 0x800, 0x5, 0xd1, 0x930, 0xf78d, 0x1, 0x1, 0x7, 0xc4e, 0x3, 0x2, 0x7ff, 0x5, 0x7f, 0x2, 0x100, 0x5, 0x6, 0x8, 0x40000, 0x3, 0x4, 0x7, 0x80000001, 0x7, 0x7f, 0xf, 0x5, 0x8d, 0x2, 0x6, 0xd97, 0xcb, 0xa, 0x7f, 0xffff, 0x5c, 0x1, 0x1, 0x100, 0xf7, 0x3, 0x8, 0x9, 0x200, 0x4, 0x4, 0x7ff, 0x200, 0x5, 0x8, 0x1, 0x7, 0x0, 0x5, 0xffff170a, 0x1, 0x3, 0x8, 0x9, 0x6, 0x80, 0x4c86, 0xc, 0x4, 0xffff, 0x33f, 0x5, 0x9, 0x6, 0x3, 0x8, 0x1, 0x1, 0x7, 0x3, 0x3, 0x4, 0x8000, 0x8, 0xb, 0x9, 0x401, 0x8, 0x3, 0x1, 0x5, 0x3ff, 0x0, 0x7, 0x800, 0x1, 0xfff, 0x3ff, 0x401, 0x8000, 0x10001, 0x10, 0x6221, 0x1, 0x58d, 0x3, 0x4, 0x3a, 0x8, 0x80, 0x9f08, 0x6, 0xc, 0x0, 0x8, 0x7, 0x800, 0x1, 0x7, 0xffffffff, 0x8, 0x0, 0x9, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x3, 0x3205, 0x5, 0x4, 0x7, 0xffff, 0xb4, 0x3ff, 0x400, 0xd87, 0x7, 0x7, 0x3, 0xd, 0x2, 0xfe, 0x10000, 0x8, 0x7, 0x9, 0x64, 0x9, 0xf75, 0x9, 0x7883, 0x4, 0x80000001, 0x9, 0xf471, 0x707, 0x401, 0xfffffa4e, 0x7, 0x0, 0x0, 0x2, 0x2, 0x7, 0x5, 0xff, 0x5, 0x0, 0x3, 0xd86, 0x0, 0x6, 0x1, 0x7, 0x6, 0x1, 0xfffffffa, 0x101, 0x8, 0x1, 0x59e2, 0x80, 0x80000001, 0x8, 0x3, 0x3b3c, 0x7, 0x0, 0x7ae, 0x0, 0x40, 0x7fffffff, 0x2d, 0x0, 0x9, 0xd, 0x0, 0x7ff, 0xfffffff7, 0x10001, 0x8000, 0x8aec, 0x0, 0x1, 0x7, 0xfffffff7, 0x1a4, 0x2, 0x5187, 0x7, 0x81, 0x200, 0x9, 0x7, 0xb6, 0xfffffff8, 0x0, 0x3, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x3, 0x8, 0xfffffffb, 0xfffffffc, {0xf, 0x0, 0x7, 0xfe45, 0xdee6, 0x400}, {0xd, 0x1, 0x0, 0x800, 0xe0, 0x8}, 0xffff, 0xa0, 0x1}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffff000, 0x101, 0xa, 0x0, 0x1400000, 0x1, 0xfffffff9, 0xff, 0x2, 0xf, 0x3, 0x80000001, 0x7, 0x4, 0x0, 0x1, 0x8, 0x0, 0x4, 0xa6c, 0x0, 0x1, 0xe6de, 0x1, 0xfffffffa, 0x0, 0x4, 0x7, 0x6, 0x4, 0x81b, 0x0, 0x9, 0x449, 0xfffffff8, 0x7, 0xfab, 0x7fff, 0xfffff000, 0xfffffe00, 0x9, 0x400, 0x3ff, 0x7fffffff, 0x10, 0xbbe, 0x8, 0x3, 0x4, 0x0, 0x7, 0x3, 0x3, 0x5, 0x8, 0x7, 0x4, 0x4, 0x6, 0x5, 0x467, 0xd0, 0xffffff37, 0x2, 0x4, 0x363, 0x2, 0x4, 0xff, 0x80000001, 0x4, 0x7, 0x6, 0x9, 0x4811, 0x4, 0x4, 0x800, 0x3ff, 0x10001, 0xfff, 0x10, 0x1ff, 0x9, 0x3, 0x3, 0x3, 0x5d4, 0x3, 0x3, 0x9, 0x0, 0x8, 0x5, 0x3c, 0x3, 0x8, 0xffffffff, 0x3, 0x2, 0x1, 0x6fd9, 0x2000000, 0x8, 0x8, 0x9, 0xc46, 0x5, 0xff, 0x237d, 0x38, 0x3, 0x8, 0x10001, 0x7, 0x40, 0x6, 0x101, 0x8000, 0x1, 0x37, 0xffff, 0xffff, 0x5, 0x5, 0x8001, 0xc195, 0x8000, 0x0, 0x8, 0x1d, 0x12000, 0xfff, 0x401, 0x0, 0x9, 0x3, 0x1, 0x0, 0x9, 0xfffffc7a, 0xfffffffa, 0x8000, 0xf55000, 0x0, 0x6, 0x8, 0xffffffff, 0x2, 0x1, 0x2, 0x80000001, 0x59, 0x5, 0x9, 0x2, 0x2, 0xffffff32, 0xffffffff, 0x7, 0x1ff, 0x1, 0x4, 0x0, 0x4, 0x16d, 0xd, 0x80, 0x1, 0x1275, 0xff, 0x3a0, 0x9, 0x6, 0x266, 0x1, 0x3, 0x1, 0xd5, 0x8, 0x7fffffff, 0x400, 0x8, 0x7, 0x3, 0x9, 0x7, 0xffff1e9b, 0xd0, 0x10001, 0x1, 0x8, 0x3, 0x7, 0x4, 0x10000, 0x3, 0x1, 0xffffffff, 0x8, 0x5, 0x6, 0x9, 0x8001, 0x8, 0x5327d699, 0xfff, 0x0, 0x2, 0x4, 0x72, 0x1000, 0x1, 0x0, 0x9, 0x3, 0x32, 0x1, 0x5, 0x5, 0xfffeffff, 0x80000, 0x85b3, 0x7, 0x1d94, 0x6, 0x8, 0x3b81, 0x0, 0x59, 0x12e0fcd7, 0x6, 0xfffffffa, 0x4, 0x9, 0x7, 0x2, 0x3, 0x232, 0x1, 0x3, 0xf, 0x5, 0x100, 0x0, 0x4, 0x9, 0x5, 0xffffffff, 0x3, 0x5, 0x101, 0x13e674a4, 0x9, 0x7fffffff, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x476e, 0x7, 0x9, 0xfffffffb, 0x6, {0x4, 0x1, 0x2, 0x1, 0xf14a, 0x4}, {0xf, 0x1, 0x3, 0x400, 0x1, 0x9}, 0xa3, 0x3, 0x101}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcee3, 0x2, 0x9, 0x42b9c477, 0xe0, 0x401, 0x5, 0x7fffffff, 0xd, 0x9, 0xfa1c, 0xfffff000, 0x1, 0x61a, 0x5f0, 0x7, 0xfffffe01, 0x3, 0x3, 0x3, 0x9, 0x2, 0x2, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3, 0xfffffffa, 0x5, 0x3, 0x4, 0x4, 0x3, 0x2c, 0x5, 0x2d, 0x9, 0xb3, 0x6, 0x2, 0xa, 0x8, 0x4, 0x9, 0x1ff, 0x8, 0x2, 0xfffffff9, 0x7, 0x47e, 0x3, 0x3, 0x5, 0xa, 0x3, 0x4, 0x6, 0x7ff, 0x5, 0x7, 0x71, 0x14000000, 0x6, 0xffff, 0x3, 0xb23, 0x4b, 0x3, 0x3, 0x6, 0x9, 0xfb, 0xbed9, 0x4, 0x3, 0x2, 0x4, 0x5, 0xf, 0x9, 0x19d, 0x280000, 0x0, 0x2, 0x7, 0xffff, 0x7, 0x4, 0xadd, 0x8, 0x5, 0x2, 0x34f, 0x7fff, 0x1ff, 0x6, 0xfffffffe, 0x3ff, 0x64, 0x3, 0x3, 0x2a, 0xfff, 0x4, 0x200, 0xffff0000, 0x1000, 0xfffffffe, 0x7ff, 0x3, 0x5, 0x388, 0x5, 0x8, 0x55, 0x0, 0x8001, 0x4, 0x2, 0x5, 0xd1a, 0x7f, 0x4, 0x0, 0x80000000, 0xb6fd, 0x6, 0x14d8, 0x8, 0x100, 0x80000000, 0xfffff001, 0x7, 0x3, 0xc783, 0x8, 0x4, 0x2, 0xa4, 0x3, 0x1000, 0x80000001, 0xbd42, 0x5, 0x39f8, 0x80000001, 0xfffffff3, 0x10000, 0x1, 0x6, 0x80000000, 0x1000, 0x3, 0x800, 0x7e41, 0x4, 0x9, 0x6, 0x7fff, 0x8, 0x26d, 0x5, 0xb, 0x7f, 0x733, 0x3, 0x6, 0x5, 0x4, 0xffff, 0x858f, 0xffffff7f, 0x4, 0x7f, 0x3, 0x6, 0xf, 0xa, 0x8, 0x3, 0x6, 0xfffffffd, 0x1cc2, 0x1, 0x5, 0x7fff, 0xa48, 0x7f, 0x6, 0x81, 0xfabc, 0x2041, 0x7, 0x9, 0x401, 0x8b25, 0x1, 0x2c5, 0x2, 0x6, 0x8, 0x9, 0x6814, 0x3, 0x8, 0x1000, 0x0, 0x3, 0x7fff, 0x6, 0x800, 0x5, 0x7, 0xbe93, 0x8, 0x8, 0x0, 0x9, 0xffff, 0x4, 0xaf, 0x4, 0xfffffffa, 0x6f4, 0x3cdf, 0x5, 0xd4, 0x4, 0xd317, 0x7fffffff, 0xfffffffc, 0x401, 0x8, 0x2, 0xe77, 0x7, 0x8, 0x0, 0x0, 0x9, 0x100, 0x2, 0x1ff, 0x3, 0x700, 0x5, 0x0, 0x200, 0x0, 0x3ff, 0xde0, 0x83, 0x7f, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe14}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000001c0)={0x1, '#'}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 22.118555961s ago: executing program 1 (id=3013): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x18, 0x5b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r4, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000000c0)="84f5c97030", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="299a58c9ecdb8bc09241cf8892cf773227a3f152d339b136f7f2e2d8536b98a0c2def3e7ee724e", 0x27}], 0x1}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001c80)="31bd34b3", 0x4}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}}, {{&(0x7f00000022c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002740)="433839d3126ce40b9dabd2e4b13f4228493005124bded4fef759ea296d36a8bdaf4da087c0614f9eea9f50bbf4b3024c6884901da371cded7bed9d8362c7b9cbb93537fff66ce5bd2b26b16b95de112560d4f83fbe64c2926e30077770e1cc4ca153ff4e951800765198717335574206e2a5ef8de62c", 0x76}], 0x5}}, {{0x0, 0x0, &(0x7f0000002900)}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002980)="ffb1af1aca93bea121278a009046c72060a06e26559871ffb0c11efbfe4a25925567d803ddae7a4d33a8a6c96713fe7160ed534664c77390d021877e0830413aa441175d8989d1a7592d95ef", 0x4c}], 0x1}}], 0x6, 0x4040801) pselect6(0xfedc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="010028bd70000000000001000000800008807cfdff7f24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b5400098028000080060001000a00000014200200fe880000000000000000000000000201050003000300000028000080060001000a000000140002000000000000000000000000000000000005000300010006001400020077673000000000000000000000000000080005"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x1b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 9.354369165s ago: executing program 2 (id=3107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c0001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 9.064975094s ago: executing program 2 (id=3109): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'erspan0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @random="0100003600"}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000010000104000000000000000000000000853d00000000000000000000120012000a00010076786c616e000000140002000a0001007b0000000800020001020304", 0x44}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd29, 0x7, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {0xffe0, 0xa}, {0xffff, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200"/28], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x56d, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r6, @ANYRES8=r10, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESHEX=r11, @ANYRES64, @ANYBLOB="b24dae960edc46da16299b6c4ab1d0fec8a7030a0bd78e169c1933f5f223dbf92fd0a2d9ba353a438fac396ccd6bb0ae16443a0583df65c55b7f71578f12b50e267ed67c6919520f38ab1023e63621d0c66bfa2113c1ee5d8148ec25353cab327524c163d31ae77952c632244d7d43153ef9754583fbedda790953318c6918a4a1c3342d75118535971d60a62f14777ed64a7d7dfe258c951d706e5f2fbcea7e1fb635fc2fcf28b51d7cdf5b7dd299bea81de9afc0ef7cbe343cdccb", @ANYRESDEC], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r13}, &(0x7f0000000140), &(0x7f0000000280)=r12}, 0x20) 3.440922035s ago: executing program 0 (id=3117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0xb8, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x88, 0x2, [@TCA_BASIC_EMATCHES={0x84, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x6c}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="53a080bfa372c9d6", @TCF_META_TYPE_VAR="8681828267c53a32", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="12140867a79804", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x8d8}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x80) 3.382442012s ago: executing program 4 (id=3119): pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000004c0)={0xe0000012}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 3.298775652s ago: executing program 2 (id=3121): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r2, 0x8008b705, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x891b, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) connect(r0, &(0x7f00000001c0)=@caif=@rfm={0x25, 0x8, "c8a0cb2cedd2dcec94b01822245f9a7c"}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003300)={0x128, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 2.754580986s ago: executing program 0 (id=3123): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x20040040, &(0x7f0000000580)={0xa, 0x4e21, 0xfffffffa, @empty, 0x9}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x1d8b}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x3}, 0x28) 2.499376651s ago: executing program 0 (id=3124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x70, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 2.47751503s ago: executing program 3 (id=3125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x7f, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') ioctl$NS_GET_OWNER_UID(r4, 0x8004b709, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000100)={'b', ' *:* ', 'rw\x00'}, 0x9) ioctl(r6, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000000), 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5f}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc) bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 2.197304416s ago: executing program 4 (id=3126): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00050006"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="400d00000000000030001280080001006873720024000280"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.07183297s ago: executing program 0 (id=3127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "948ef83bfd83487b", "6aac901ea32a8b27549576d4115cf3ec", "6eeaa3ed", "34cf7696d98271e2"}, 0x28) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x8e, "ab1c17ee0064125ed0e926e1b81a80541c4fd414f85fc5c91c4eab25ba9a159ad8d1bcd50e572c2949609aa1f28fb441dc854cafe5e76955237c9157ad2a678915833a659c137deaaf0c97d7cab89c39533434b8777f5e2db1357ce687fa015dcedda4c74a5e319f7fe53385c95e4edc39562d9b25e289f8c041968fbf70e698ffe68c9f986f732ecad9ba7f4ac3"}, &(0x7f0000000240)=0x96) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000280)={r2, 0xe2, "b3b3790324e5a9d918c7532a6b0571591cf279fe8b0cc4c3fb3933e6ffbdc24dba619fa6977b15a9ce1fa0accfdc6b3b9721cb3dc1d2b6327566dea41dd84df1672976d1b008aea5627927bb10f059afd4c5b3a4453136c9ad7e49e2c30b7931d0635287d207d203c3415bdddb6f5c339ae7c2837d4ebeb034db21bf3506bfb35b4981ee24dc33420c705d84a3141e49d27973359522aed4d52870e4caac6359de120adce5f596b8c45e2eb095cccb14ae9fe8653242da62d4cf65f218ad340d913aa558c83a85568409769772866796c63ba6bbc51bcc69d8c7cd201fb58d5ab533"}, &(0x7f0000000380)=0xea) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000003c0)={0x3, '\'\aG'}, 0x4) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r3) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r3) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000021) (async) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000800)={&(0x7f00000007c0)=[{0x100000000, 0xfffffffd}, {0x3, 0x2, 0x2}], 0x2, 0x10, 0x7, 0x5}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a40)={&(0x7f0000000840)="0090996900dd51d95dbb33d9b4d9baca72efdb5d504869b78bb25500e1226dd77d0db5193f5416cf57b118d9072036ffe2afe1df1e091a48990638611d177daa7208c55ec866", &(0x7f00000008c0)=""/37, &(0x7f0000000900)="4a1dd3176bad15bc8fe7d7cacf28c71f58125d7bd9758f6e177393ca6982ceb2aae5f8833ac2dc8cb8e877a46fa59c9164580eda52d1c97fbae333e73fff72bf87603ea61efd9f10d9b1c91e5ab499a66e5fe69f6916e0daeb65a535117531de10c9282f620d4385e34b1498126d71226826953bde6ddd56c78baeb7defa4c3c5b934b332ebc28161179b3a47c2310b044b19670a1fe374ee194", &(0x7f00000009c0)="c7ddee66ff8fb3bda79837c1425548811dfa3beb30cd9ed316bc123afb12cadfad0b1fa5053ac666c8457371e65aa4a9e3077b4514a3dc0ae5468cdbf1f5d7ca7d754a89084009c538a85bd208ee001e019a2827ad41098c5f58253319375318b470cac26a58ccad4c4933c908c4e8285e", 0x80000001, r1}, 0x38) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r3) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r9, &(0x7f0000000ac0)={0xa, 0x4e21, 0x7, @private0, 0x81}, 0x1c) (async, rerun: 64) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000b00)={0x2, 0x0, 0x1, 0x2, 0xa9, 0x5}) (rerun: 64) r10 = socket(0x15, 0x4, 0x6) (async) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r11, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x30}}, 0x40011) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r12, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x98d0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x75}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x20, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ec0)='GPL\x00', 0x0, 0x20, &(0x7f0000000f00)=""/32, 0x41100, 0x1d, '\x00', r13, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0x3, 0x282, 0x24ed5dbe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)=[0xffffffffffffffff, r1, r1], 0x0, 0x10, 0x6}, 0x94) 1.826066486s ago: executing program 4 (id=3128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a208800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.80769984s ago: executing program 3 (id=3129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000019c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffff20b}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e00}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x2000}}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.467221131s ago: executing program 3 (id=3130): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f00000002c0)}}], 0x2, 0x14) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000008010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4, 0x2}}, 0x2) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = getpid() ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000200)=r11) r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r13 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x5c}}, 0x10) sendmsg$netlink(r1, &(0x7f0000000600)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x34, 0x1, 0x1, [r6, r7, r3, r0, r1, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0xb8, 0x40004}, 0x20000000) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="25ff661f01a99eccf15623662256539c975b47af47a9", 0x16}], 0x1}}], 0x1, 0x44845) close(0x4) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) 1.466482482s ago: executing program 4 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000004c0)={0x0, 0x0, "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", "ebe723243592546954e31ff4818edbf5650b8d9f260579821530e8b2018c1f3193fcfde0d6ba9767caae852d4a3e78ca13bb0a361a1aa852fc0dd43854e8712b6fcc776a6647d5c3a92fec94153ac225f9f46edcac6a05d3cc51d354dc086ef35ff4f669986876536f7a53e0ebf6c2e49965f39925e9c370a884f4e6b68e7f8c2f93a14d23ec05c5959a0f0734772915205254e4624bb840294fee64a74c2d56b97d8d233e3887336cae2b48a7785eb3855e05db772943504ee7f7d647c95e85c641d454b92c33ecee1ad4611337f4b5b22445231d59c2f8b8a335ede32d31a41b1a10b65917848f9df4f2b0b7b4e54577e3da060d5fffc197a45d6105fdc6f0f4a15103141a3fd7b3a0aa50f58f756262636979091a85664dcbc895be8edf75c0fcda56b6ed75850c32c117d02aced93fadef95b02a67fb995cd1a5c245ba668033685427e6bd26da0fe844256a5d6ab904e51bd3785235c6019c455ab79a646c6d496a0972fdff7969b7209166172ccc7ef9282c73e745b69b9aa95c7a9e0daf1e3522fe06d7eb52576f300105d253f8cea7f229d47a9049a1860feeb43f802732e972bb842acb1f27e8d15d719277b50c591b6ac0eadb91d0e87e59f65027233bcc3179995f6d2d539758a0e33df02475fc301d88fa68ebed4ee68dc7cf2e59c2073c317083d0721dc8736bbc7bfa2eb93c723951f2fb6ba7bba76461d2414425690cc7802008263de0740c8a642011d78792b9b05c20919d4e4a3f606de54532337932acbf7f04f7223d7bf08e7ad69f0cd79ecf0ab3c6f35cab50bedb3c680e6c79968bbbd1deb7a91ce7ed3ab70dde9304da77fad859a9ba66d2a6d94852dc281aae28e1a718e6f61ed335acff6ffa0c6f6f83f51230611cb8acb197ab28ca5fd0e3c4dab1f33cc9e4e8d544b2c8ba54503ca659d3f82690c4197331411f70390e39fe9824c036359b4ab0d93874960f96dcc057f71df27bc4dacc64f16bab75f183e1135a56e5b0d4751bdbe98d16d4f11b3c0907f222394de61f6f6c83c5c31f1c224d8f02faf5835eb7ddf080ada76a87eab0ad20608170bf99133577bcdc7aaac0855ea997ef6220c214589f4a01e1360bd16fef1e13283e6b102b61e52c41beed9d4a3a65ff6281341520098b5650d2f4a577233ae4056aac95a994e65565ee225fa7a7b9a414603503522042157ad8964c53753c19ae1aaedd2f585ee2a71e1a4ead7804f9aff547083bacbb563235348f2e72e17bb4acb3aa6dfc4a50c25de4080144f179ece27a8bd658185f0ffa4abf740dc4e28c29a23cc4e5300e7c36f9cd33e3e06ab62e76deea45058c0d868c335e255d7b8f52e41546a6be001808dac0d160d5120d2bf2f8307065d4a2656a26c9f5f08e0d4e13298b08c338d2f8f2285c5f62523a53b872683b2bb7ecf497b39731890ae3379e3704226a2062efb1b6cfd40832dfe15210c941d1d7473a949b172e9215495971ea37936c7c7a7a9679ffc28676b30b7b5b34a05e1649c9b9558838894c8c2a51626fe311c788c056c51794ebad50c2e6a7c363d1598fb7e11dcb4f62600875337648788a4fdcfbf99e739056b125397eceef06e0f19c587b3ae04bc74e3910632d4e6edf3488def4b39426941ff6a53b2e800c0821ee926797cef5a19dc9aabdb7f3e5c591f59bb51b9e2bb7e1ca79645949a37834e9f430d226dd9d473d5c07bf30c76e1f3a3568334c451c7b4fc5ffe48541b22e6f9bfeecf0337c8dbebec29d21fad035b7663f1c1a05bed577e293c5f1455c13757951c52182ef266cae85fa92d8753af1ea8dbc73cd6724549411d6ac9b3100fd2347a9d4c250cd0dac45437c75b7c35b284eeff1fcdf668a65355b774d685d97b7849e6c21fcd45dd37ae8dff9637d336c174958832d0daa440741e31d8a7c4e727103e678165c6de9d51c1e7f404b034f3d3fc7623fc580cb898b1692796b86e8cc698e91a47eef9149aa2fd53321af89f5c575454a29d06d268337d9c530077d836bd7ce0b998aa33ae5c367626d0f11f20f3f8799b5fefeae10d736fa3f698ce80891da4566fb785794b2a88520530343de4a2bd74d3d8564436ceb1da0546ec496a52dc0d027036f6ce0cf91748b54a30031e2ac6870394a99f63959e02f0125b42adfe74aff191e57ab2254d84a6f4785a802eda554e28c6f40976482c07d1eebe2d149f77738a9577c6b9b4a09d7e3180aa9d45df8ffa576b4e1495928c64e18e4e28becb59d8ec0633b863b5689dfe1fdce7336281646e3230bb15072cb1fae7ae18d1144487c0c634d3dec6b002940d8eeabf63dbffa9e5ef057878698eb556e5977881ef2b5c11f820ef3e61c61cb2c150858896bed7d4a8deb7cea69de7dfefe91d75321cf956649a14df05d429bffc37c5b5b704afe4894c0f125f02ebd5ea1e8a22b3175f7886186d73a632a5b99e78c6a9f7a46469b92992179ce3d23291279105da0b2b2b24c20a67f482258bd394db7766231f078e8f08007f3ec72f5d28075132df03d7fbbca4f7be51dc4dfe2c0b2c4637368fb23573dcc7b426e6246492a025ca2bc37aeb79fb828b06a31fe4c98bc761c2e992f990be607c3d44b8637931cbb9dc670851601bf68e3681da3b703cf48637f06bf4ffcb4a84f0063ecf5dfe4ad11d9bb9845a23bff87937ce106e1a5561f29a7954d3a10b2aafd0228bcb8a28303761315b3b3afd487dd514dc002ed544d2d0f87e0a5aa6bbacdec28ea662c0453cc77ae0b1ee801b237012c0b3c1b5a62b2b3f0c5f0bf61612813161fe944318d697d89e0c4416230f5209d66696eb5bc8b8a02cd0cc007cdb9ed3e657bfce924761bceb349ab6e94b268743c4a7d8324ea8c777c272302b4f927c8d3d75bb048f558db560091f9022bfa8f887e74c23ec77479fb34db63eeae9f2548bc2a1cf825108144ab40105a8d993a9387af669f0ea8554f0b0e7dbf5698f1cf749b2ce3fdfe2aa424608a07f4b7f7efa7cc66559400ca654602e51c0d4705eeb61deea00ea25a98996cfc2df80251924ac2711d5170201b052059eb6964c5d87d1a4fae9c9443e05611f3cbb4a7d786b4b847fab8575d6edb7afeec6cbfdd39759f7c15b06996c2372f8a4cb79c605f127c72e776d728fe7ee908b02c198e3d50859866c6fff1dd31f1e8a23917be0c5da93ecfeb5ad510665d2cb79e4f9726855b2476db0e99f6b32821d3f9cef597efe7e9676f04074b9eb28aec93b1fa4b8f6b4c198a332ec46d85669eb4bca3232f48a5ae908a18cc7bf1c0b760cde232b3b0e9b9c729fa51359806bf88962b8fe836716293b8aaa3bd797e33839f124af0276219515ac8fbce5431d67d90e5a845d7cd1c5ce6eeabab184cfcfdc7386d03d4bda4d450cb1ae02b20a9fcef08b7b31a90569c32f9976515ae6a903e4c7b94a6642d54ff27c0d32ed0c41c68b05e95f4377e47cc2d4ec65dd5c8163ade6ba270560e6b3d6e5e2e445d670a1077e008be03fb1c6fb89277df7e8bb0a4924044c08d4ba30f1dcb397e719c2d0e1f70e3a6a5c10e5c4c2bede49be6a562d377afe0acb5e3000d89c03ae40909eb109a14daa8518563ef3fa11fe2efbf22b85cc3f43ab5de1d102634a064c1edbfbc3667eaceffcc7bf91e83cfe68fb1cadc8d6860d50f2c196add0edd21b6d7fe344ca0686c7543c9f607113c65bfacc6fba78cd25be77e616bf34e2c0e319cf7db5cc7744c4ca5c8d6f01fd1082afd4563bc03f61fc375373cee3da51a78f68d4fb7e1c51285184d4b00f6441ace482138c4e2cf12b6671d77a5d8756f3b03cbd2d32bfb4572d5a94f33ce51ee275d0e3724fac1d7357d727052af5065ca800e2a853808c5ea0e35a2b46013606bae10fe2dfdf65e129e760852ff730d768d0136dc03b5dddfbcc42a22eb9369db00f2e79d8a33554156513ca33de1af4f8d7de8882ff6db640c406fe903bf2751c8e625853a90ef58ba1c26266e2b6b998c2081cbd935dbb18d071b8e103c5091db7cfd0cbcff5194ffbd592a0f6c7120a670d73936a730c069022ad03a3a95bf056f25baa8c4df4883dcc0aa2f330f5f8da25deb8e7539caeb86ad0aa5d919a1e296436bc8148dd67fd38c4375856fbce7a1699305a9a5af4d8d04b8dffd5c7b46d9bf0367ca7fdaae139f8098fc03a26574b120fb5332a56f11c1341e56a9f3db1615c3fb8d1497cc9ea51d87ff276bb742b67dfcc7de331b6b1d1c6afb4d6391b87b2e5af5ac993ad95083e081bd5c5ab6c8b2488e4dfa45980e6e67adde9eb5da7dcb8267e232dfe484fe51bc578643b1507c91c2b29c0e83a0030112aac58a6ce88af9850446a27a9e9d2d602631613fc72e433d8c0bc873af9d06ecb61c3e1f61c58b67817fc0aad2550c81d87d9ffaece0b361c160f04ce9460eab5317837ae7861ae25c13c1778beb0b1f449eab15093994501665ac731b61c91223cf8146fe21dfc92b18e7fbace1aa0a9a07619ecdaa5696145a5278f210135c142087c42fd2f3dab9d2c9b76b129601b3337a7a26606cd440c3a3a51bb1bdfebbaf69601b3df2563ab007da040f612d8745ebb673dd3747daba5fa38fc4ee902a25b11affba731b8a536b585a5ac1847444f0e1705df36d7ac5e786da46c7fa50067d937baa815a45b418bc3de7e3d7e9e16987ada8c6c8dab8dc2e17534f3fe3b4947bd64a3d69f72f0e7ed64f5366dd2ad4b4f22093be70137c442fffb18dcbd541606dc525a24f2a82d1c5ae111363441d75fb647a69463d43ebcdbee8765cd9708697771408a317b12def2728bdfae1946b02177df547695430608faa32700d85d19b43c984a9d181d2998a8d35acb0f00212d756bb7bb81f038abc1efb9b75835eab89aaa72a1318aba3027d857cbb915efd6579249b23d4f488a54c2bc1b9a39f34ce244b1dc3a0634f4ae5cd5d4951c74caab22c212637b5e5aae87acf6adb2e223bf1c51e5a8eece7054a5d4d12c71aad046419cbd8e16f1039581e00ba1dafe5d828724729d987077242ca9db57a2fb376fdb300b4c5d9f15c3d8ccac4f87e4ba936db5fa757814b9f5276ab9af74bf8d2121b9d129b2c9b404ba1c96ee34fe24c153f58abedccc710806fea268c0a12b553729d95c2903f2d5cefb1181e9a407ecc5d9b2521c8e91f7b3ffca08ac1022839c7a5b19b5231f03ad383844d7cf6fb9d823be9e3f2ce8eefd164d24d4c00df80568f72443070a0764452eacf51c89e3ed83a3c63f258963df7783b70703f5fea6c081b5f01f2b1add09c003579e41848d5375c9a60e094c491ca6ccfacd9c91e3ab0c937bbc5195c089ddf9050e82b73de440921e3968fb583823009a9d978d2062070d381fcfa615e7ed4d6f6eca1df1deb94904c82a63b0c517a34440f51ac6835ebcef4"}) ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001800)={r11, 0x9}) 1.283201578s ago: executing program 3 (id=3132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x7f, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x6, 0x3c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800037f030303ee"], 0x30}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') ioctl$NS_GET_OWNER_UID(r3, 0x8004b709, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000001004001300000000000000000000000000000000005a5da91db7d796659a2402d1fd3051ce8afde87a05e5dc2c394745326bf0b4e50d87da5116df63560c70751a0566a9879f6581d7607a9e5fafcb9bdd1b175cae82497c7b394dccade14f37dfbf1ca23280ea7baaa3641a82658c22d18a5adcd3f829d5c17648cb08e043ca7bcb208cdea4c2725c3b54e500a18e498b09414ac08f06533df4438fd2d1e05bba9f02000000000000e1a0b8f18b49442774a204ea68acdce5a4d2e31b579b2e315a74b71e5651748c8af1e9bd00000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000100)={'b', ' *:* ', 'rw\x00'}, 0x9) ioctl(r5, 0x8914, &(0x7f0000000040)='dummy0\x00'/40) ioctl(r5, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r5, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r5, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000000), 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5f}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 1.111979817s ago: executing program 0 (id=3133): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000010000000000000000000800120002000200000000000000000030002bfe01"], 0xa0}}, 0x0) 1.098185066s ago: executing program 2 (id=3134): epoll_create1(0x80000) (async) r0 = epoll_create1(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x200000000000024d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@random={0xdd, 0x8, 'abcdefgh'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xe, 0x2a, [@random={0xdd, 0x8, 'abcdefgh'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r2, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) socket$l2tp(0x2, 0x2, 0x73) 847.564005ms ago: executing program 4 (id=3135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000005000000018010000776c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ffffc00000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 779.83196ms ago: executing program 2 (id=3136): pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000004c0)={0xe0000012}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0xb, 0x1}, {0xc}, {0x12}, {0x18}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 779.143373ms ago: executing program 0 (id=3137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f", @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @none, 0x9}, 0xa) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) recvmsg(r7, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000400)={r5, 0x8194, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x48}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0xd}, 0x94) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x25dfdbfd, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081d5}, 0x8840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80) 670.89673ms ago: executing program 3 (id=3138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2d8, 0xf, 0xa, 0x801, 0x70bd28, 0x25dfdbfd, {0x3, 0x0, 0x8}, [@generic="a595f98765a04db3b01ab620efd97005f61b9782b380ffe3a9f91843f2820a3231870542e83fe3ce418bfb5ce37107201610e97a15d9b8d062d739664da602751a4288dc0dfc39510d82dc02f5d581b5a13d57eba87e9c46c92c7b97f009e24bfc995a1ab719630db7b0c37dfafe283a38cb1d2af948d231f9801a40b2384f31137cd162c1d39a1bbc871eed4ce638bab1d7f92a056a6465b94961536a94acffa42f7aee8eeae393db78980dc2a47acbc19814367e2cc56234013ac7230ad0ecdd94f5adadf141b3c672544bf3abe59a16e1675e1cc4975c0ce22f3c8e111489f7bec3dcedad34d7f1003c2ac88a5df8cbf9", @generic="6684f11982b5609cde45f4b06d1c4a9e6459a902a96802a66e761c355a9c4b542e38d695d503b34ff9bdd50905b98cc825b0483c424e61570e7abd30f88a1fe38469c5d370abc58cdd8d556a6333b572516357261d892a1dff4b9c9d86d544657c44891afcaa712840acfa5f4133b1048ec868b84c6cdb13c4ec04750bb06b00f6baefb080fb331cd05fbbb9e850e261f219ed9c1aa7bc2777dabfb58b23e9c17d7c4308d8fd880e2d4e1260d564ac872edec46fb73862c84c021a0aab1f75273be998f9920682f5badccf7d0b603a8402b676985e118d8fe3657ffe833d42ab07fb38f672af82445afac199eb734850bc", @typed={0xdd, 0xe5, 0x0, 0x0, @binary="41c96960dfba793813ce62d01d204ae4b49b298eb8ffe3da3e4078c85294b79c0991c7ac9f3a116cf4df39d16b7ba31a02d60659bcb0a0b989841a2d6fd80cb797c80b160b963b2ae617396e1a55a2936754ff28d17a2a565d3bc06ab7b314e025caa7f300b6fb2510f1f032960e3ae5b330f4a3d01c994a9945a315f7c3e73203727161d1905f5e1ef61e8c7b4d99abe4c5fb7babdcdfa423f075cba36265bb1ac37cc4d681f5622aecf4023d6831e5fbcf89c5e5daf35d90e3f050b8c10d2a2374a7f1eb4e286baa97ffb364c6d68f8b48a149bd0f01801d"}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x5}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x13, r4, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x1, @none, 0x7f, 0x1}, 0xe) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071108400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000001000010600000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100"], 0x60}}, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000140)=""/126, &(0x7f0000000200)=0x7e) 507.002698ms ago: executing program 4 (id=3139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000004c0)={0x0, 0x0, "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", "ebe723243592546954e31ff4818edbf5650b8d9f260579821530e8b2018c1f3193fcfde0d6ba9767caae852d4a3e78ca13bb0a361a1aa852fc0dd43854e8712b6fcc776a6647d5c3a92fec94153ac225f9f46edcac6a05d3cc51d354dc086ef35ff4f669986876536f7a53e0ebf6c2e49965f39925e9c370a884f4e6b68e7f8c2f93a14d23ec05c5959a0f0734772915205254e4624bb840294fee64a74c2d56b97d8d233e3887336cae2b48a7785eb3855e05db772943504ee7f7d647c95e85c641d454b92c33ecee1ad4611337f4b5b22445231d59c2f8b8a335ede32d31a41b1a10b65917848f9df4f2b0b7b4e54577e3da060d5fffc197a45d6105fdc6f0f4a15103141a3fd7b3a0aa50f58f756262636979091a85664dcbc895be8edf75c0fcda56b6ed75850c32c117d02aced93fadef95b02a67fb995cd1a5c245ba668033685427e6bd26da0fe844256a5d6ab904e51bd3785235c6019c455ab79a646c6d496a0972fdff7969b7209166172ccc7ef9282c73e745b69b9aa95c7a9e0daf1e3522fe06d7eb52576f300105d253f8cea7f229d47a9049a1860feeb43f802732e972bb842acb1f27e8d15d719277b50c591b6ac0eadb91d0e87e59f65027233bcc3179995f6d2d539758a0e33df02475fc301d88fa68ebed4ee68dc7cf2e59c2073c317083d0721dc8736bbc7bfa2eb93c723951f2fb6ba7bba76461d2414425690cc7802008263de0740c8a642011d78792b9b05c20919d4e4a3f606de54532337932acbf7f04f7223d7bf08e7ad69f0cd79ecf0ab3c6f35cab50bedb3c680e6c79968bbbd1deb7a91ce7ed3ab70dde9304da77fad859a9ba66d2a6d94852dc281aae28e1a718e6f61ed335acff6ffa0c6f6f83f51230611cb8acb197ab28ca5fd0e3c4dab1f33cc9e4e8d544b2c8ba54503ca659d3f82690c4197331411f70390e39fe9824c036359b4ab0d93874960f96dcc057f71df27bc4dacc64f16bab75f183e1135a56e5b0d4751bdbe98d16d4f11b3c0907f222394de61f6f6c83c5c31f1c224d8f02faf5835eb7ddf080ada76a87eab0ad20608170bf99133577bcdc7aaac0855ea997ef6220c214589f4a01e1360bd16fef1e13283e6b102b61e52c41beed9d4a3a65ff6281341520098b5650d2f4a577233ae4056aac95a994e65565ee225fa7a7b9a414603503522042157ad8964c53753c19ae1aaedd2f585ee2a71e1a4ead7804f9aff547083bacbb563235348f2e72e17bb4acb3aa6dfc4a50c25de4080144f179ece27a8bd658185f0ffa4abf740dc4e28c29a23cc4e5300e7c36f9cd33e3e06ab62e76deea45058c0d868c335e255d7b8f52e41546a6be001808dac0d160d5120d2bf2f8307065d4a2656a26c9f5f08e0d4e13298b08c338d2f8f2285c5f62523a53b872683b2bb7ecf497b39731890ae3379e3704226a2062efb1b6cfd40832dfe15210c941d1d7473a949b172e9215495971ea37936c7c7a7a9679ffc28676b30b7b5b34a05e1649c9b9558838894c8c2a51626fe311c788c056c51794ebad50c2e6a7c363d1598fb7e11dcb4f62600875337648788a4fdcfbf99e739056b125397eceef06e0f19c587b3ae04bc74e3910632d4e6edf3488def4b39426941ff6a53b2e800c0821ee926797cef5a19dc9aabdb7f3e5c591f59bb51b9e2bb7e1ca79645949a37834e9f430d226dd9d473d5c07bf30c76e1f3a3568334c451c7b4fc5ffe48541b22e6f9bfeecf0337c8dbebec29d21fad035b7663f1c1a05bed577e293c5f1455c13757951c52182ef266cae85fa92d8753af1ea8dbc73cd6724549411d6ac9b3100fd2347a9d4c250cd0dac45437c75b7c35b284eeff1fcdf668a65355b774d685d97b7849e6c21fcd45dd37ae8dff9637d336c174958832d0daa440741e31d8a7c4e727103e678165c6de9d51c1e7f404b034f3d3fc7623fc580cb898b1692796b86e8cc698e91a47eef9149aa2fd53321af89f5c575454a29d06d268337d9c530077d836bd7ce0b998aa33ae5c367626d0f11f20f3f8799b5fefeae10d736fa3f698ce80891da4566fb785794b2a88520530343de4a2bd74d3d8564436ceb1da0546ec496a52dc0d027036f6ce0cf91748b54a30031e2ac6870394a99f63959e02f0125b42adfe74aff191e57ab2254d84a6f4785a802eda554e28c6f40976482c07d1eebe2d149f77738a9577c6b9b4a09d7e3180aa9d45df8ffa576b4e1495928c64e18e4e28becb59d8ec0633b863b5689dfe1fdce7336281646e3230bb15072cb1fae7ae18d1144487c0c634d3dec6b002940d8eeabf63dbffa9e5ef057878698eb556e5977881ef2b5c11f820ef3e61c61cb2c150858896bed7d4a8deb7cea69de7dfefe91d75321cf956649a14df05d429bffc37c5b5b704afe4894c0f125f02ebd5ea1e8a22b3175f7886186d73a632a5b99e78c6a9f7a46469b92992179ce3d23291279105da0b2b2b24c20a67f482258bd394db7766231f078e8f08007f3ec72f5d28075132df03d7fbbca4f7be51dc4dfe2c0b2c4637368fb23573dcc7b426e6246492a025ca2bc37aeb79fb828b06a31fe4c98bc761c2e992f990be607c3d44b8637931cbb9dc670851601bf68e3681da3b703cf48637f06bf4ffcb4a84f0063ecf5dfe4ad11d9bb9845a23bff87937ce106e1a5561f29a7954d3a10b2aafd0228bcb8a28303761315b3b3afd487dd514dc002ed544d2d0f87e0a5aa6bbacdec28ea662c0453cc77ae0b1ee801b237012c0b3c1b5a62b2b3f0c5f0bf61612813161fe944318d697d89e0c4416230f5209d66696eb5bc8b8a02cd0cc007cdb9ed3e657bfce924761bceb349ab6e94b268743c4a7d8324ea8c777c272302b4f927c8d3d75bb048f558db560091f9022bfa8f887e74c23ec77479fb34db63eeae9f2548bc2a1cf825108144ab40105a8d993a9387af669f0ea8554f0b0e7dbf5698f1cf749b2ce3fdfe2aa424608a07f4b7f7efa7cc66559400ca654602e51c0d4705eeb61deea00ea25a98996cfc2df80251924ac2711d5170201b052059eb6964c5d87d1a4fae9c9443e05611f3cbb4a7d786b4b847fab8575d6edb7afeec6cbfdd39759f7c15b06996c2372f8a4cb79c605f127c72e776d728fe7ee908b02c198e3d50859866c6fff1dd31f1e8a23917be0c5da93ecfeb5ad510665d2cb79e4f9726855b2476db0e99f6b32821d3f9cef597efe7e9676f04074b9eb28aec93b1fa4b8f6b4c198a332ec46d85669eb4bca3232f48a5ae908a18cc7bf1c0b760cde232b3b0e9b9c729fa51359806bf88962b8fe836716293b8aaa3bd797e33839f124af0276219515ac8fbce5431d67d90e5a845d7cd1c5ce6eeabab184cfcfdc7386d03d4bda4d450cb1ae02b20a9fcef08b7b31a90569c32f9976515ae6a903e4c7b94a6642d54ff27c0d32ed0c41c68b05e95f4377e47cc2d4ec65dd5c8163ade6ba270560e6b3d6e5e2e445d670a1077e008be03fb1c6fb89277df7e8bb0a4924044c08d4ba30f1dcb397e719c2d0e1f70e3a6a5c10e5c4c2bede49be6a562d377afe0acb5e3000d89c03ae40909eb109a14daa8518563ef3fa11fe2efbf22b85cc3f43ab5de1d102634a064c1edbfbc3667eaceffcc7bf91e83cfe68fb1cadc8d6860d50f2c196add0edd21b6d7fe344ca0686c7543c9f607113c65bfacc6fba78cd25be77e616bf34e2c0e319cf7db5cc7744c4ca5c8d6f01fd1082afd4563bc03f61fc375373cee3da51a78f68d4fb7e1c51285184d4b00f6441ace482138c4e2cf12b6671d77a5d8756f3b03cbd2d32bfb4572d5a94f33ce51ee275d0e3724fac1d7357d727052af5065ca800e2a853808c5ea0e35a2b46013606bae10fe2dfdf65e129e760852ff730d768d0136dc03b5dddfbcc42a22eb9369db00f2e79d8a33554156513ca33de1af4f8d7de8882ff6db640c406fe903bf2751c8e625853a90ef58ba1c26266e2b6b998c2081cbd935dbb18d071b8e103c5091db7cfd0cbcff5194ffbd592a0f6c7120a670d73936a730c069022ad03a3a95bf056f25baa8c4df4883dcc0aa2f330f5f8da25deb8e7539caeb86ad0aa5d919a1e296436bc8148dd67fd38c4375856fbce7a1699305a9a5af4d8d04b8dffd5c7b46d9bf0367ca7fdaae139f8098fc03a26574b120fb5332a56f11c1341e56a9f3db1615c3fb8d1497cc9ea51d87ff276bb742b67dfcc7de331b6b1d1c6afb4d6391b87b2e5af5ac993ad95083e081bd5c5ab6c8b2488e4dfa45980e6e67adde9eb5da7dcb8267e232dfe484fe51bc578643b1507c91c2b29c0e83a0030112aac58a6ce88af9850446a27a9e9d2d602631613fc72e433d8c0bc873af9d06ecb61c3e1f61c58b67817fc0aad2550c81d87d9ffaece0b361c160f04ce9460eab5317837ae7861ae25c13c1778beb0b1f449eab15093994501665ac731b61c91223cf8146fe21dfc92b18e7fbace1aa0a9a07619ecdaa5696145a5278f210135c142087c42fd2f3dab9d2c9b76b129601b3337a7a26606cd440c3a3a51bb1bdfebbaf69601b3df2563ab007da040f612d8745ebb673dd3747daba5fa38fc4ee902a25b11affba731b8a536b585a5ac1847444f0e1705df36d7ac5e786da46c7fa50067d937baa815a45b418bc3de7e3d7e9e16987ada8c6c8dab8dc2e17534f3fe3b4947bd64a3d69f72f0e7ed64f5366dd2ad4b4f22093be70137c442fffb18dcbd541606dc525a24f2a82d1c5ae111363441d75fb647a69463d43ebcdbee8765cd9708697771408a317b12def2728bdfae1946b02177df547695430608faa32700d85d19b43c984a9d181d2998a8d35acb0f00212d756bb7bb81f038abc1efb9b75835eab89aaa72a1318aba3027d857cbb915efd6579249b23d4f488a54c2bc1b9a39f34ce244b1dc3a0634f4ae5cd5d4951c74caab22c212637b5e5aae87acf6adb2e223bf1c51e5a8eece7054a5d4d12c71aad046419cbd8e16f1039581e00ba1dafe5d828724729d987077242ca9db57a2fb376fdb300b4c5d9f15c3d8ccac4f87e4ba936db5fa757814b9f5276ab9af74bf8d2121b9d129b2c9b404ba1c96ee34fe24c153f58abedccc710806fea268c0a12b553729d95c2903f2d5cefb1181e9a407ecc5d9b2521c8e91f7b3ffca08ac1022839c7a5b19b5231f03ad383844d7cf6fb9d823be9e3f2ce8eefd164d24d4c00df80568f72443070a0764452eacf51c89e3ed83a3c63f258963df7783b70703f5fea6c081b5f01f2b1add09c003579e41848d5375c9a60e094c491ca6ccfacd9c91e3ab0c937bbc5195c089ddf9050e82b73de440921e3968fb583823009a9d978d2062070d381fcfa615e7ed4d6f6eca1df1deb94904c82a63b0c517a34440f51ac6835ebcef4"}) ioctl$BTRFS_IOC_INO_LOOKUP(r10, 0xd0009412, &(0x7f0000001800)={r11, 0x9}) 243.275492ms ago: executing program 3 (id=3140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f00000008c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536002d346c6b0ce4840c4e5ad94a461cdbfee9bdb942352359a351d1ec", 0x4c, 0x810, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000300)={'c', ' *:* ', 'rm\x00'}, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x4, 0x117, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 21.530932ms ago: executing program 1 (id=3022): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x8001, 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x5b8, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x209692d2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x368, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbe, 0x3, "4f851b986845224b89bc372f1ed56eaab070b823b5bce804a88f66356c8c8d79027d44e9f2ff2c5661df0880d4b0bfa72d30cc1b7d95e7023179b8e67c4d2b79820e0d508b182f7186ce4d52314cf56cc8e54b9cbde12d75129e15db91583e366094342d0ea705d0268e0802743ca27ca38038b3ed4c954afc42274976e39a2417d1824c017ce28f54f76a015f81ca34316e34910acfc2a2994b9348cf1e332e97cfbaa6d4561bd230cba14918267f2c797e951c2a3a14c350f4"}, @TIPC_NLA_NODE_ID={0xce, 0x3, "f66bee150e8b03989ba89eb4b7776dd0f7e369c2a7214c21465afe3e607ee09c7ff5efeb0e68d5df7c692801b6b8d5834f8acd50d73c87e2ac50b510343d2723997d7271616c629a732fecf163a7f987e6431dc6046961636762cf507fa66a144aad62d13766903143200c716ee6856fccee6349a015adce62ffe356f330b7136ee858c81a568971499e1e96b44d87011c4ef45c98776d4f3063aa8447d0e5946e435cbe9b1d3d57d842b93cfa2867c63e8aa4f7c9f41f4c1d29f681955abcbbd565542eb696aa2f763e"}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "a4aa16457d75f559af6c274199f1dca3958c59e9def5fbd566c3b5b11a9d94974af1b2545627b120a38dd015667e70fefb3de639f3f24edafd1cab9ae7d95f49c68c94cea388d7b3dce3540d21dd371fc3b92f09b60f56eeac8e75ca472dcfb94b334dc0457107ee3c322e0906d6ee861a61046db5cb4d83a120bae3d801687abc8d51262fadd4fbcade25565d0d8e8f46aefe9ede695eb49c877f7ba74e575305f9a8b7c5964a3c8996bea844d5d64fe1668c1e0c73b10d594a462eae"}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "63e62372efe2cbd22e7f2e08d68638e65da1bbc2f70b6792c859b67a95052766117b8422e6e63f7825c888a26a44837497f7f64b812b26aacb315402eaeba280d1c39d99dca82f2514608bde1accb2fba25dace67b28fdbe598e8e5ea489e12816cb0c6a0d737b9e470958d3f42b7e1ec0fb5cf7d8afac90455108fa147f33f1d386893d4a1d2466217e81fd761b49d9964a85172cab47e4b38fec11698ef84b39d878b2ef3940d745e87b5b668806d92217614437"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "cc5fe5aba25fb1334570a36993ddcdcbdd8573b071a5c02b8aa50f9bc6e0f987ebd649"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x300}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x49, 0x3, "e889e72253f777b5bb05eaa13fa2b927b51619373385650e0dc940370a97b62b282789b2f9d5bc9d4b4fa17388df1c6d2fa817f77f18f2327cd4509b8680195ec4a44488c4"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}]}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x140d, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040081}, 0x4000000) socketpair(0x25, 0x6, 0x1, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r5, 0x300, 0x70bd29, 0x9, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x11bd}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0xf, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x17}, @local, 0x1, 0x80, 0x3, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8000, 0x748, 0x3, 0x5}}) sendmsg$nl_route(r6, &(0x7f0000000d80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)=@mpls_newroute={0x1d8, 0x18, 0x200, 0x70bd27, 0x25dfdbfc, {0x1c, 0x20, 0x0, 0x22, 0xfc, 0x3, 0xfe, 0xb5715f13018f45fc, 0x2000}, [@RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0xa}, {0x5}, {0x9}, {0x6}, {0xe, 0x0, 0x1}, {0x6}, {0x3, 0x0, 0x1}, {0x9}, {0x7}, {0x9b}, {0x7}, {0xd401, 0x0, 0x1}, {0x87, 0x0, 0x1}, {0x4ee7}, {0x10, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7}, {0x200, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x155, 0x0, 0x1}, {0x8}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1, 0x0, 0x1}, {0x6c}, {0x89}, {0x5}]}, @RTA_DST={0x8, 0x1, {0x8, 0x0, 0x1}}, @RTA_DST={0x8}, @RTA_NEWDST={0x84, 0x13, [{}, {0x7fff, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x8000}, {0x1}, {0xb, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7ff}, {0xf8}, {0x14}, {0x9fb, 0x0, 0x1}, {0xc00}, {0x5, 0x0, 0x1}, {0x10}, {0x9}, {0x7f}, {}, {0x7, 0x0, 0x1}, {0x6}, {0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x3ff}, {}, {0x3, 0x0, 0x1}, {0x84dc, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x8, 0x0, 0x1}, {}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x7}, {0x8000, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0x1}, {0x8}, {0x6, 0x0, 0x1}, {}, {0x8ef5b, 0x0, 0x1}, {}, {}, {0xa64e, 0x0, 0x1}, {0xffff5, 0x0, 0x1}, {0x5}, {0x7ff, 0x0, 0x1}, {0x2}, {0x7}, {0x5}, {0x8}, {}, {0x2}, {0x6, 0x0, 0x1}, {0x9}, {0xffff0}, {0x6}, {0x4, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x400}, {0x7d9}, {0x7}, {0xffffd, 0x0, 0x1}, {0x2}, {0x401}]}, @RTA_DST={0x8, 0x1, {0x4, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r7}, @RTA_OIF={0x8, 0x4, r8}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x800}, 0xc0) close(r6) syz_emit_ethernet(0x46, &(0x7f0000000dc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, &(0x7f0000000e40)={0x0, 0x1, [0x20a, 0xd1d, 0x404, 0x94b]}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x30}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6a}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x3b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000f80)={0x62, 0x0, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000fc0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001000)=0x28) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x140, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xa}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100000001}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc40b}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8000000000000001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x140, r1, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x58, 0x3, "36968696ac4dbff719e29576ff292ebe39c088e9dc0e3aea0bb085db8a0ec8072470502e1a8991fcef98b6840e22192bac34ef76886a6813b429a3a520513a8f9661046f8e067884edf7ce82c9283a5112d600e1"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5e55e831dc85b695a65c492db4fafdd41c08afa9848ecc81da793cd5d99a342d810469ac"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x140}}, 0x4004050) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001640)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001480)={0x178, 0x1403, 0x100, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x30000040}, 0x48891) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000001e40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e00)={&(0x7f00000016c0)={0x710, 0x1, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5}, 0x8, 0x5, 0xdc9, 0xe, 0x1, 'syz0\x00', "679987e133a1db5565bb74b995eb5b1aed7b76e2b74af87abfffc2836a1d466d", "bd3c4a063c4ce03ff1c3c34c2f7383fbfb928c451b140110dd990e0fc81eb017", [{0x65, 0x8, {0x0, 0x5}}, {0x3, 0x9, {0x2, 0x6}}, {0x3, 0xa878, {0x1, 0xffffff00}}, {0x7, 0xa8ce, {0x1, 0x11}}, {0x8, 0xa694, {0x0, 0x7}}, {0x0, 0x1, {0x3, 0x745}}, {0x2, 0xfff, {0x3, 0x7}}, {0x6, 0x1, {0x1, 0x6}}, {0x2, 0xe, {0x3, 0x3}}, {0x3d38, 0x9, {0x3}}, {0x0, 0x0, {0x1, 0x5}}, {0x6, 0x10, {0x3, 0x5}}, {0xd3, 0x4, {0x2}}, {0x16, 0x200, {0x0, 0x9}}, {0x0, 0x2, {0x2, 0x2}}, {0x4, 0x7, {0x1, 0x401}}, {0x0, 0x4, {0x2, 0x49f}}, {0x8, 0x7, {0x1, 0x6}}, {0x0, 0x7fff, {0x0, 0x760f483b}}, {0x3, 0xb, {0x3, 0x5}}, {0x101, 0x0, {0x1, 0x7fff}}, {0x81, 0x200, {0x1, 0x3}}, {0x4ca1, 0x9, {0x2, 0x8}}, {0x64, 0x7fff, {0x1, 0x401}}, {0x7f, 0xf66, {0x2, 0x4}}, {0x7, 0x8, {0x2, 0x6}}, {0x6, 0x9, {0x3, 0x4}}, {0x5, 0x6, {0x1, 0x3a}}, {0x1, 0x2, {0x1, 0x7}}, {0x8, 0xdb, {0x0, 0x5}}, {0x8001, 0x6, {0x2, 0x8}}, {0x2, 0x5, {0x2, 0x7fff}}, {0x800, 0x9, {0x1, 0x6}}, {0x9e8, 0x1, {0x0, 0x8}}, {0xd, 0x0, {0x1, 0x3}}, {0x40, 0x40, {0x3, 0x7}}, {0x5, 0x7, {0x3, 0x7}}, {0x6, 0x8, {0x3, 0x30}}, {0x6, 0xfa04, {0x2, 0x7}}, {0xef5, 0x8, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x4835}, 0x7, 0xa, 0x7, 0xffff, 0x15, 'syz0\x00', "4c3d277b829763a1935bf0d5fc0beec64f3d59431c211512e3fcdc51dbda8350", "55ab42b0189cf0a33bab812de3e58cd9bc38589976fa7207d8bd560b40faf430", [{0xb, 0xff, {0x2, 0x7fff}}, {0xcd, 0x1, {0x0, 0x4}}, {0x9, 0x800, {0x2, 0x3ff}}, {0x10, 0x401, {0x2, 0x5}}, {0x8, 0x7ff, {0x2, 0x1000}}, {0xfffc, 0x8001, {0x1}}, {0x6, 0x738, {0x2, 0x2}}, {0x7, 0x80, {0x0, 0xfffffe01}}, {0xc, 0x5, {0x3, 0x6}}, {0xda54, 0x800, {0x1}}, {0x6, 0x4, {0x0, 0x401}}, {0x9, 0x81, {0x2, 0x1}}, {0x6, 0x8, {0x3, 0x1}}, {0x9, 0x347, {0x2}}, {0x1bca, 0x9, {0x0, 0x6}}, {0x3, 0x3d, {0x2, 0x1}}, {0xb, 0x0, {0x1, 0x9}}, {0xffff, 0x7b53, {0x2, 0x1}}, {0x9, 0x0, {0x2, 0x4}}, {0xfffd, 0x4, {0x1, 0x7}}, {0xfff5, 0x5, {0x3, 0x5}}, {0x8, 0x1, {0x2, 0x7fff}}, {0xc322, 0x40, {0x2, 0x9}}, {0x5, 0xc513, {0x1, 0x80000000}}, {0x200, 0x4, {0x0, 0xa}}, {0x0, 0x88b5, {0x2, 0x91}}, {0xc, 0x2, {0x0, 0x611}}, {0x1, 0x7fff, {0x0, 0x9}}, {0x4, 0x3, {0x1, 0xfffffff9}}, {0x0, 0x9, {0x2, 0xbf}}, {0x1, 0x5, {0x1, 0x6}}, {0x4, 0x0, {0x1, 0x1}}, {0x6, 0x2, {0x1, 0x3}}, {0x6, 0x8001, {0x0, 0x6}}, {0xf6b9, 0x7, {0x2, 0x7}}, {0x101, 0x3, {0x2, 0x8000}}, {0x100, 0x401, {0x3, 0xee3}}, {0xfffe, 0x5, {0x0, 0x5}}, {0x800, 0x57bd, {0x3, 0x401}}, {0x79a7, 0x9, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x4, 0x1, 0xd, 0x3ff, 0x17, 'syz0\x00', "5f057ff4ad8b89659f3104d21819c5e6e8d7a88bca3c58274785a22e3e719414", "9ffe696d422c634f376248960d269bc0b57582357e019bc3d5fb3d04b442f9dd", [{0x0, 0x8b}, {0x1, 0x800, {0x1, 0x8}}, {0x6, 0x1, {0x1, 0x820}}, {0x4, 0x4, {0x1, 0x8}}, {0xc545, 0x7, {0x3, 0xffffffff}}, {0x75, 0x6, {0x1, 0x606}}, {0xc, 0x0, {0x3, 0x80000001}}, {0x6, 0x5, {0x2, 0x6}}, {0x9, 0x0, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x45f8}}, {0x7f, 0x7, {0x3, 0xe}}, {0x5, 0xffff, {0x3, 0x81}}, {0x5, 0x33f3, {0x1, 0x5451}}, {0x9, 0x1, {0x3, 0x1}}, {0x83, 0x7, {0x2, 0x3ff}}, {0x1ff, 0x5, {0x0, 0x7}}, {0x8, 0x61c8, {0x2, 0x80}}, {0x9, 0x7, {0x0, 0x4}}, {0x5, 0x5, {0x3, 0x1}}, {0x3ff, 0x9, {0x1, 0x3ff800}}, {0x7ff, 0xc000, {0x0, 0x4}}, {0x8, 0x8, {0x0, 0x401}}, {0xa0, 0x81, {0x2, 0x7}}, {0x8b6, 0x0, {0x1, 0x7}}, {0x1, 0xca60, {0x3, 0x8000}}, {0x3, 0x7, {0x2, 0x8}}, {0x3, 0x3, {0x2, 0x8000}}, {0x4, 0x76dc, {0x2, 0x290}}, {0x7fff, 0x0, {0x2, 0x5}}, {0x3, 0x59, {0x2, 0xfffffff8}}, {0xd0d, 0x101, {0x2, 0x1000}}, {0xc5, 0x3}, {0xffff, 0x4, {0x1, 0x3}}, {0x8, 0xc441, {0x1, 0x40}}, {0x2000, 0xfffa, {0x1, 0x6}}, {0xbe3, 0x5, {0x1, 0xb}}, {0x401, 0x4, {0x2, 0x1}}, {0xe7, 0x6, {0x1, 0x7}}, {0x2, 0x7, {0x3, 0x2}}, {0x9, 0x81c5, {0x0, 0x80}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x800}, 0x14) write(r0, &(0x7f0000001e80)="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", 0x1000) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002e80), r3) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r9, &(0x7f0000002ec0)={0x2, 0x4e24, @multicast1}, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002f40), r4) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x60, r10, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x36}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{&(0x7f0000003080)=@generic, 0x80, &(0x7f0000003200)=[{&(0x7f0000003100)=""/155, 0x9b}, {&(0x7f00000031c0)=""/10, 0xa}], 0x2, &(0x7f0000003240)=""/151, 0x97}, 0xfff}, {{&(0x7f0000003300)=@x25={0x9, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003380)=""/191, 0xbf}, {&(0x7f0000003440)=""/139, 0x8b}], 0x2, &(0x7f0000003540)=""/68, 0x44}, 0x2}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000035c0)=""/35, 0x23}, {&(0x7f0000003600)=""/168, 0xa8}, {&(0x7f00000036c0)=""/115, 0x73}, {&(0x7f0000003740)=""/192, 0xc0}, {&(0x7f0000003800)=""/11, 0xb}, {&(0x7f0000003840)=""/189, 0xbd}, {&(0x7f0000003900)=""/110, 0x6e}, {&(0x7f0000003980)}, {&(0x7f00000039c0)=""/47, 0x2f}], 0x9, &(0x7f0000003ac0)=""/206, 0xce}, 0xfffffff9}, {{&(0x7f0000003bc0)=@nfc, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003c40)=""/205, 0xcd}, {&(0x7f0000003d40)=""/26, 0x1a}, {&(0x7f0000003d80)=""/104, 0x68}, {&(0x7f0000003e00)=""/79, 0x4f}, {&(0x7f0000003e80)=""/48, 0x30}, {&(0x7f0000003ec0)=""/236, 0xec}, {&(0x7f0000003fc0)=""/237, 0xed}, {&(0x7f00000040c0)=""/193, 0xc1}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x9, &(0x7f0000005280)=""/201, 0xc9}, 0x5c}, {{&(0x7f0000005380)=@nl=@unspec, 0x80, &(0x7f0000005640)=[{&(0x7f0000005400)=""/117, 0x75}, {&(0x7f0000005480)=""/140, 0x8c}, {&(0x7f0000005540)=""/236, 0xec}], 0x3, &(0x7f0000005680)=""/15, 0xf}, 0x2}, {{&(0x7f00000056c0)=@generic, 0x80, &(0x7f0000006a80)=[{&(0x7f0000005740)=""/74, 0x4a}, {&(0x7f00000057c0)=""/81, 0x51}, {&(0x7f0000005840)=""/114, 0x72}, {&(0x7f00000058c0)=""/215, 0xd7}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/167, 0xa7}], 0x6, &(0x7f0000006b00)=""/27, 0x1b}, 0x6b1a}, {{&(0x7f0000006b40)=@xdp, 0x80, &(0x7f0000006e40)=[{&(0x7f0000006bc0)=""/108, 0x6c}, {&(0x7f0000006c40)=""/176, 0xb0}, {&(0x7f0000006d00)=""/117, 0x75}, {&(0x7f0000006d80)=""/145, 0x91}], 0x4, &(0x7f0000006e80)=""/13, 0xd}, 0xfffffffd}], 0x7, 0x10000, &(0x7f0000007080)={0x0, 0x989680}) 0s ago: executing program 2 (id=3141): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000900)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x5, &(0x7f0000000580)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r6, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r9, r7, 0x4, r7}, 0x2) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r10, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x140d, 0x302, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x64008894}, 0x800) (async) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) (async) bind$can_raw(r11, &(0x7f0000000480), 0x10) close(r11) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f0000000f00)={{}, 0x3, 0x858, 0x32a}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$TUNSETGROUP(r12, 0x400454ce, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): 61.644526][T11582] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 261.644546][T11582] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 261.644592][T11582] ? alloc_inode+0x6a/0x1b0 [ 261.644617][T11582] ? alloc_inode+0x6a/0x1b0 [ 261.644650][T11582] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 261.644670][T11582] alloc_inode+0x6a/0x1b0 [ 261.644700][T11582] new_inode+0x1f/0x170 [ 261.644733][T11582] __debugfs_create_file+0xb8/0x400 [ 261.644772][T11582] debugfs_create_file_full+0x3f/0x60 [ 261.644810][T11582] ref_tracker_dir_debugfs+0x197/0x360 [ 261.644839][T11582] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 261.644895][T11582] ? __kvmalloc_node_noprof+0x52f/0x820 [ 261.644921][T11582] ? __kvmalloc_node_noprof+0x345/0x820 [ 261.644950][T11582] ? __raw_spin_lock_init+0x45/0x100 [ 261.644984][T11582] alloc_netdev_mqs+0x275/0x1240 [ 261.645006][T11582] ? __pfx_snprintf+0x10/0x10 [ 261.645032][T11582] ? __pfx_vlan_setup+0x10/0x10 [ 261.645065][T11582] rtnl_create_link+0x321/0xd70 [ 261.645095][T11582] rtnl_newlink_create+0x258/0x7b0 [ 261.645135][T11582] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 261.645175][T11582] ? __pfx___mutex_lock+0x10/0x10 [ 261.645208][T11582] ? ns_capable+0x89/0xe0 [ 261.645240][T11582] rtnl_newlink+0x167a/0x1c30 [ 261.645287][T11582] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.645314][T11582] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 261.645337][T11582] ? netlink_deliver_tap+0x19c/0x1b0 [ 261.645358][T11582] ? netlink_unicast+0x781/0x940 [ 261.645376][T11582] ? netlink_sendmsg+0x813/0xb40 [ 261.645398][T11582] ? sock_sendmsg_nosec+0x14e/0x190 [ 261.645420][T11582] ? ____sys_sendmsg+0x54e/0x850 [ 261.645448][T11582] ? ___sys_sendmsg+0x2a5/0x360 [ 261.645476][T11582] ? __x64_sys_sendmsg+0x1b1/0x290 [ 261.645506][T11582] ? do_syscall_64+0x166/0x520 [ 261.645524][T11582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.645616][T11582] ? kasan_quarantine_put+0xbb/0x1f0 [ 261.645640][T11582] ? lockdep_hardirqs_on+0x7b/0x110 [ 261.645678][T11582] ? nlmon_xmit+0xb0/0x100 [ 261.645701][T11582] ? kmem_cache_free+0x182/0x650 [ 261.645734][T11582] ? __lock_acquire+0x747/0x2de0 [ 261.645767][T11582] ? __dev_queue_xmit+0x29b/0x3920 [ 261.645792][T11582] ? __local_bh_enable_ip+0xd6/0x140 [ 261.645821][T11582] ? lockdep_hardirqs_on+0x7b/0x110 [ 261.645885][T11582] ? __pfx_rtnl_newlink+0x10/0x10 [ 261.645913][T11582] rtnetlink_rcv_msg+0x802/0xc00 [ 261.645949][T11582] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 261.645977][T11582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.646011][T11582] ? __copy_skb_header+0xa3/0x4a0 [ 261.646057][T11582] netlink_rcv_skb+0x226/0x4a0 [ 261.646083][T11582] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 261.646116][T11582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.646168][T11582] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.646192][T11582] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.646223][T11582] netlink_unicast+0x7bd/0x940 [ 261.646256][T11582] netlink_sendmsg+0x813/0xb40 [ 261.646292][T11582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.646326][T11582] ? apparmor_socket_sendmsg+0x98/0x360 [ 261.646373][T11582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.646396][T11582] sock_sendmsg_nosec+0x14e/0x190 [ 261.646425][T11582] ____sys_sendmsg+0x54e/0x850 [ 261.646464][T11582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.646506][T11582] ? import_iovec+0x73/0xa0 [ 261.646540][T11582] ___sys_sendmsg+0x2a5/0x360 [ 261.646578][T11582] ? __lock_acquire+0x747/0x2de0 [ 261.646606][T11582] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.646680][T11582] ? __fget_files+0x2a/0x420 [ 261.646710][T11582] ? __fget_files+0x3a2/0x420 [ 261.646766][T11582] __x64_sys_sendmsg+0x1b1/0x290 [ 261.646800][T11582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.646856][T11582] do_syscall_64+0x166/0x520 [ 261.646875][T11582] ? trace_irq_disable+0x3b/0x140 [ 261.646897][T11582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.646919][T11582] ? clear_bhb_loop+0x70/0xc0 [ 261.646947][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.646969][T11582] RIP: 0033:0x7f0c4739e199 [ 261.646989][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.647008][T11582] RSP: 002b:00007f0c482ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.647032][T11582] RAX: ffffffffffffffda RBX: 00007f0c47625fa0 RCX: 00007f0c4739e199 [ 261.647048][T11582] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 261.647063][T11582] RBP: 00007f0c482ed090 R08: 0000000000000000 R09: 0000000000000000 [ 261.647077][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.647090][T11582] R13: 00007f0c47626038 R14: 00007f0c47625fa0 R15: 00007ffd8d8412e8 [ 261.647125][T11582] [ 261.665508][T11582] debugfs: out of free dentries, can not create file 'netdev@ffff88807ec40700' [ 261.686964][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 262.278602][T11597] netlink: 'syz.0.1504': attribute type 2 has an invalid length. [ 262.278627][T11597] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 262.280642][T11597] batadv_slave_0: Caught tx_queue_len zero misconfig [ 262.428026][T11607] netlink: 'syz.0.1509': attribute type 3 has an invalid length. [ 262.500034][T11607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.510067][T11607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.462478][T11661] No such timeout policy "syz1" [ 265.830441][T11674] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 265.859109][T11691] vxcan0: entered allmulticast mode [ 265.959912][T11697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.035094][T11698] netlink: 'syz.4.1524': attribute type 49 has an invalid length. [ 266.257700][T11706] __nla_validate_parse: 4 callbacks suppressed [ 266.257730][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1528'. [ 266.674432][T11694] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 266.677178][T11734] bridge0: port 3(.`) entered blocking state [ 266.677239][T11734] bridge0: port 3(.`) entered disabled state [ 266.677374][T11734] .`: entered allmulticast mode [ 266.677385][T11734] bond_slave_0: entered allmulticast mode [ 266.677398][T11734] bond_slave_1: entered allmulticast mode [ 266.677414][T11734] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 266.806839][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1534'. [ 267.061651][T11747] vxcan2: entered allmulticast mode [ 267.096732][T11752] netlink: 524 bytes leftover after parsing attributes in process `syz.0.1541'. [ 267.112927][T11753] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 267.113227][T11754] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 267.221089][T11754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.349509][T11769] Bluetooth: MGMT ver 1.23 [ 267.502964][T11770] tipc: Started in network mode [ 267.502995][T11770] tipc: Node identity 52a11b2506e1, cluster identity 4711 [ 267.503985][T11770] tipc: Enabled bearer , priority 0 [ 267.561310][T11777] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 267.811536][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 267.878895][T11766] tipc: Disabling bearer [ 267.909660][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.909681][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.103702][T11795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1551'. [ 268.238758][T11804] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 268.418203][T11810] vxcan2: entered allmulticast mode [ 268.677778][T11816] x_tables: duplicate entry at hook 3 [ 268.688690][T11816] x_tables: duplicate underflow at hook 2 [ 268.935378][T11836] geneve2: entered promiscuous mode [ 269.027574][T11841] xt_policy: output policy not valid in PREROUTING and INPUT [ 269.180365][T11844] netlink: 'syz.0.1567': attribute type 12 has an invalid length. [ 269.282018][T11837] vxcan2: entered allmulticast mode [ 269.646246][T11871] FAULT_INJECTION: forcing a failure. [ 269.646246][T11871] name failslab, interval 1, probability 0, space 0, times 0 [ 269.646282][T11871] CPU: 1 UID: 0 PID: 11871 Comm: syz.1.1572 Not tainted syzkaller #0 PREEMPT(full) [ 269.646307][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.646321][T11871] Call Trace: [ 269.646329][T11871] [ 269.646338][T11871] dump_stack_lvl+0xe8/0x150 [ 269.646379][T11871] should_fail_ex+0x410/0x560 [ 269.646411][T11871] should_failslab+0xa8/0x100 [ 269.646442][T11871] __kmalloc_cache_noprof+0xa3/0x600 [ 269.646467][T11871] ? nft_trans_rule_add+0x59/0x440 [ 269.646489][T11871] ? nft_trans_rule_add+0x59/0x440 [ 269.646520][T11871] nft_trans_rule_add+0x59/0x440 [ 269.646556][T11871] nf_tables_newrule+0x1b50/0x28a0 [ 269.646607][T11871] ? __pfx_nf_tables_newrule+0x10/0x10 [ 269.646639][T11871] ? lock_acquire+0x115/0x350 [ 269.646662][T11871] ? nfnl_pernet+0x23/0x240 [ 269.646707][T11871] ? __nla_parse+0x40/0x60 [ 269.646753][T11871] nfnetlink_rcv+0x1288/0x28c0 [ 269.646810][T11871] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 269.646877][T11871] ? skb_clone+0x246/0x3a0 [ 269.646924][T11871] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.646947][T11871] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.646977][T11871] netlink_unicast+0x7bd/0x940 [ 269.647009][T11871] netlink_sendmsg+0x813/0xb40 [ 269.647044][T11871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.647076][T11871] ? apparmor_socket_sendmsg+0x98/0x360 [ 269.647104][T11871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.647126][T11871] sock_sendmsg_nosec+0x14e/0x190 [ 269.647153][T11871] ____sys_sendmsg+0x54e/0x850 [ 269.647190][T11871] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.647230][T11871] ? import_iovec+0x73/0xa0 [ 269.647261][T11871] ___sys_sendmsg+0x2a5/0x360 [ 269.647290][T11871] ? __lock_acquire+0x747/0x2de0 [ 269.647317][T11871] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.647386][T11871] ? __fget_files+0x2a/0x420 [ 269.647415][T11871] ? __fget_files+0x3a2/0x420 [ 269.647455][T11871] __x64_sys_sendmsg+0x1b1/0x290 [ 269.647489][T11871] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.647543][T11871] do_syscall_64+0x166/0x520 [ 269.647571][T11871] ? trace_irq_disable+0x3b/0x140 [ 269.647592][T11871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.647614][T11871] ? clear_bhb_loop+0x70/0xc0 [ 269.647641][T11871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.647662][T11871] RIP: 0033:0x7efc52b9e199 [ 269.647683][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.647702][T11871] RSP: 002b:00007efc53b0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.647725][T11871] RAX: ffffffffffffffda RBX: 00007efc52e25fa0 RCX: 00007efc52b9e199 [ 269.647742][T11871] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 269.647756][T11871] RBP: 00007efc53b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 269.647770][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.647783][T11871] R13: 00007efc52e26038 R14: 00007efc52e25fa0 R15: 00007fff25ce9b28 [ 269.647818][T11871] [ 269.962029][T11866] vxcan2: entered allmulticast mode [ 270.331967][T11891] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1580'. [ 270.353597][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1579'. [ 270.419478][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1580'. [ 270.886674][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1588'. [ 270.933820][T11920] syzkaller0: entered promiscuous mode [ 270.933844][T11920] syzkaller0: entered allmulticast mode [ 271.291173][T11932] openvswitch: netlink: Message has 8 unknown bytes. [ 271.291209][T11932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.316841][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1594'. [ 271.626870][T11944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1595'. [ 272.061162][T11952] x_tables: duplicate underflow at hook 1 [ 272.268086][T11963] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 272.573880][T11963] syzkaller1: entered promiscuous mode [ 272.573906][T11963] syzkaller1: entered allmulticast mode [ 272.641634][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 272.676140][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 272.767188][T11978] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 272.814472][T11979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1602'. [ 272.986119][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1602'. [ 273.255457][T12009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.288591][T12009] batman_adv: batadv0: Adding interface: veth0 [ 273.288610][T12009] batman_adv: batadv0: The MTU of interface veth0 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.288768][T12009] batman_adv: batadv0: Interface activated: veth0 [ 273.321293][T12009] batman_adv: batadv0: Interface deactivated: veth0 [ 273.321376][T12009] batman_adv: batadv0: Removing interface: veth0 [ 273.398391][T12018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1607'. [ 273.516526][T12021] xt_policy: output policy not valid in PREROUTING and INPUT [ 274.000844][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1615'. [ 274.204102][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 274.204471][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 274.750400][T12074] bond0: (slave gretap0): Opening slave failed [ 274.883189][T12080] xt_policy: output policy not valid in PREROUTING and INPUT [ 275.122136][T12089] xt_policy: output policy not valid in PREROUTING and INPUT [ 275.671388][T12117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 275.726964][T12117] syzkaller1: entered promiscuous mode [ 275.726998][T12117] syzkaller1: entered allmulticast mode [ 275.891384][T12124] netlink: 'syz.2.1634': attribute type 39 has an invalid length. [ 275.891422][T12124] gre0: left promiscuous mode [ 276.764438][T12152] syzkaller0: entered promiscuous mode [ 276.764464][T12152] syzkaller0: entered allmulticast mode [ 277.140245][T12177] __nla_validate_parse: 1 callbacks suppressed [ 277.140284][T12177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1650'. [ 279.137243][T12204] xt_policy: output policy not valid in PREROUTING and INPUT [ 279.222342][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 279.222425][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 279.243066][T12208] ¬0Ù: renamed from bond_slave_1 [ 279.419988][T12213] netlink: 'syz.3.1661': attribute type 25 has an invalid length. [ 279.516372][T12217] ip_tables: iptables: counters copy to user failed while replacing table [ 279.567122][T12226] can: request_module (can-proto-0) failed. [ 279.683339][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.688909][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 279.815995][T12238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1665'. [ 280.140105][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 280.236958][T12256] veth1: left allmulticast mode [ 280.418835][T12265] x_tables: duplicate underflow at hook 2 [ 280.714485][T12278] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 280.753240][T12279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1676'. [ 280.754424][T12279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1676'. [ 280.937495][T12285] syzkaller1: entered promiscuous mode [ 280.937522][T12285] syzkaller1: entered allmulticast mode [ 281.377230][T12289] vxcan0: entered allmulticast mode [ 281.435451][T12299] xt_policy: output policy not valid in PREROUTING and INPUT [ 281.727401][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 282.256310][T12338] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1683'. [ 282.410060][T12344] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) ! [ 282.575660][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1691'. [ 282.603071][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 282.603458][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'. [ 282.610074][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 282.685771][T12353] ip6erspan0: entered promiscuous mode [ 282.757638][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 282.786922][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1691'. [ 282.865919][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1695'. [ 282.922775][T12373] bridge0: left promiscuous mode [ 283.320740][T12375] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.327885][T12375] bridge0: entered promiscuous mode [ 283.401878][T12388] openvswitch: netlink: Multiple metadata blocks provided [ 283.532727][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1702'. [ 283.590499][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1703'. [ 286.671963][T12440] netlink: 'syz.2.1716': attribute type 10 has an invalid length. [ 287.436882][T12490] __nla_validate_parse: 9 callbacks suppressed [ 287.436904][T12490] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1730'. [ 287.436935][T12490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1730'. [ 287.436953][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 287.492542][T12490] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 287.532666][T12491] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:1 [ 287.873787][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.873829][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.873861][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.873892][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.874032][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.874065][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.874096][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.874126][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.874154][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.874185][T12479] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 287.970860][T12482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1729'. [ 288.420665][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 288.441699][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1740'. [ 288.756801][T12546] IPVS: Error connecting to the multicast addr [ 288.775903][T12544] tipc: Enabled bearer , priority 0 [ 288.825707][T12551] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 288.877915][T12542] tipc: Resetting bearer [ 288.927722][T12542] tipc: Disabling bearer [ 289.387598][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 289.387749][T12576] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1751'. [ 289.389006][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 289.389090][T12576] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1751'. [ 289.437820][T12571] vxcan0: entered allmulticast mode [ 289.920205][T12594] FAULT_INJECTION: forcing a failure. [ 289.920205][T12594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.920239][T12594] CPU: 1 UID: 0 PID: 12594 Comm: syz.1.1754 Not tainted syzkaller #0 PREEMPT(full) [ 289.920262][T12594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 289.920275][T12594] Call Trace: [ 289.920283][T12594] [ 289.920292][T12594] dump_stack_lvl+0xe8/0x150 [ 289.920328][T12594] should_fail_ex+0x410/0x560 [ 289.920359][T12594] _copy_from_user+0x2d/0xb0 [ 289.920389][T12594] ___sys_sendmsg+0x1c6/0x360 [ 289.920419][T12594] ? __lock_acquire+0x747/0x2de0 [ 289.920447][T12594] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.920483][T12594] ? kstrtouint+0x6e/0xe0 [ 289.920533][T12594] ? __fget_files+0x2a/0x420 [ 289.920562][T12594] ? __fget_files+0x3a2/0x420 [ 289.920604][T12594] __sys_sendmmsg+0x273/0x4d0 [ 289.920640][T12594] ? __pfx___sys_sendmmsg+0x10/0x10 [ 289.920682][T12594] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 289.920719][T12594] ? ksys_write+0x242/0x270 [ 289.920754][T12594] ? __pfx_ksys_write+0x10/0x10 [ 289.920798][T12594] __x64_sys_sendmmsg+0xa0/0xc0 [ 289.920832][T12594] do_syscall_64+0x166/0x520 [ 289.920851][T12594] ? trace_irq_disable+0x3b/0x140 [ 289.920873][T12594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.920895][T12594] ? clear_bhb_loop+0x70/0xc0 [ 289.920922][T12594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.920943][T12594] RIP: 0033:0x7efc52b9e199 [ 289.920964][T12594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.920982][T12594] RSP: 002b:00007efc53b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.921005][T12594] RAX: ffffffffffffffda RBX: 00007efc52e25fa0 RCX: 00007efc52b9e199 [ 289.921022][T12594] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 289.921036][T12594] RBP: 00007efc53b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 289.921049][T12594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.921061][T12594] R13: 00007efc52e26038 R14: 00007efc52e25fa0 R15: 00007fff25ce9b28 [ 289.921102][T12594] [ 290.627227][T12610] vxcan2: entered allmulticast mode [ 291.408306][T12653] veth0_to_bond: Caught tx_queue_len zero misconfig [ 292.485341][T12706] lo: entered allmulticast mode [ 292.512533][T12698] vxcan2: entered allmulticast mode [ 292.585727][T12701] lo: left allmulticast mode [ 292.648156][T12711] __nla_validate_parse: 7 callbacks suppressed [ 292.648177][T12711] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1778'. [ 293.094199][T12726] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 293.207801][T12726] bond3 (unregistering): Released all slaves [ 294.016313][T12761] netlink: 'syz.1.1789': attribute type 1 has an invalid length. [ 294.080123][T12761] bond3: option mode: invalid value (10) [ 294.090196][T12761] bond3 (unregistering): Released all slaves [ 294.236806][T12779] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1792'. [ 294.312112][T12766] vxcan4: entered allmulticast mode [ 294.672920][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 294.694051][T12784] bridge0: entered promiscuous mode [ 294.715922][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1794'. [ 295.524247][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 295.524336][T12826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1801'. [ 295.524370][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 295.649258][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1804'. [ 295.919463][T12854] IPVS: Error connecting to the multicast addr [ 295.933887][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 295.949974][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1807'. [ 297.279733][T12926] syzkaller0: entered allmulticast mode [ 297.549280][T12941] IPVS: Error connecting to the multicast addr [ 297.771566][T12948] __nla_validate_parse: 4 callbacks suppressed [ 297.771590][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 297.800946][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 297.818909][T12954] xt_policy: output policy not valid in PREROUTING and INPUT [ 297.899434][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1824'. [ 298.064823][T12971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1827'. [ 298.112356][T12970] syzkaller0: entered promiscuous mode [ 298.112380][T12970] syzkaller0: entered allmulticast mode [ 298.346733][T12972] netlink: 'syz.0.1827': attribute type 5 has an invalid length. [ 299.023272][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 299.048496][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1837'. [ 299.099448][T13027] IPVS: Error connecting to the multicast addr [ 299.109542][T13027] net_ratelimit: 6532 callbacks suppressed [ 299.109563][T13027] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 299.449596][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1844'. [ 299.501690][T13040] netlink: 4624 bytes leftover after parsing attributes in process `syz.4.1844'. [ 299.653951][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'. [ 299.771005][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'. [ 299.800693][T13049] .`: (slave bond_slave_1): Releasing backup interface [ 299.810961][T13049] bond_slave_1 (unregistering): left promiscuous mode [ 299.810987][T13049] bond_slave_1 (unregistering): left allmulticast mode [ 300.447340][T13095] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 300.447384][T13095] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 300.447982][T13096] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 300.448001][T13096] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 300.503612][T13094] netlink: 'syz.3.1849': attribute type 5 has an invalid length. [ 302.458903][T13089] geneve3: entered promiscuous mode [ 302.730578][T13126] openvswitch: netlink: Unknown nsh attribute 0 [ 302.834219][T13130] __nla_validate_parse: 3 callbacks suppressed [ 302.834242][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 302.876266][T13130] ip6tnl2: entered allmulticast mode [ 302.928987][T13137] IPVS: Error connecting to the multicast addr [ 303.189766][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'. [ 303.290018][T13153] x_tables: ip_tables: DSCP target: only valid in mangle table, not [ 303.296535][T13154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.336669][T13165] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 303.338210][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1864'. [ 303.400871][T13165] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.467650][T13164] bond3: (slave geneve3): making interface the new active one [ 303.498023][T13164] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 304.170725][T13194] bridge_slave_0: Caught tx_queue_len zero misconfig [ 304.245436][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 304.245473][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1872'. [ 304.247416][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1876'. [ 304.303699][T13194] bridge4: entered promiscuous mode [ 304.303722][T13194] bridge4: entered allmulticast mode [ 304.387984][T13210] gretap0: left promiscuous mode [ 304.388216][T13210] netlink: 964 bytes leftover after parsing attributes in process `syz.1.1878'. [ 304.512684][T13214] netlink: 'syz.3.1879': attribute type 14 has an invalid length. [ 304.573137][T13219] IPVS: Error connecting to the multicast addr [ 304.592457][T13216] vxcan2: entered allmulticast mode [ 304.829865][T13228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1883'. [ 304.965615][T13233] xt_policy: output policy not valid in PREROUTING and INPUT [ 305.020984][T13236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1884'. [ 305.243183][T13247] netlink: 'syz.2.1889': attribute type 10 has an invalid length. [ 305.243207][T13247] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1889'. [ 305.278133][T13247] team0: Port device wg2 added [ 305.375279][T13251] xt_policy: output policy not valid in PREROUTING and INPUT [ 305.580033][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.580344][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.580662][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.580987][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.598833][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.604304][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.610274][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.620362][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.623425][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.633687][T13263] ip_tables: iptables: counters copy to user failed while replacing table [ 305.811123][T13267] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 305.844112][T13267] bond6 (unregistering): Released all slaves [ 305.955024][T13274] xt_policy: output policy not valid in PREROUTING and INPUT [ 306.299887][T13280] gretap1: entered promiscuous mode [ 307.100600][T13314] IPVS: Error connecting to the multicast addr [ 307.638910][T13329] vxcan2: entered allmulticast mode [ 307.949350][T13339] __nla_validate_parse: 9 callbacks suppressed [ 307.949369][T13339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1913'. [ 308.027411][T13335] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.027625][T13335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.077280][T13335] bridge0: port 3(.`) entered blocking state [ 308.077408][T13335] bridge0: port 3(.`) entered forwarding state [ 308.167395][T13335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.204634][T13335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.211086][T13335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.310854][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 308.868512][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1919'. [ 308.890549][T13359] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1918'. [ 309.122947][T13367] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1921'. [ 309.181835][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'. [ 309.318760][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 309.344841][T13372] bond3 (unregistering): Released all slaves [ 309.386554][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1924'. [ 309.711078][T13390] xt_policy: output policy not valid in PREROUTING and INPUT [ 310.249456][T13409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1933'. [ 310.264469][T13411] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 310.264496][T13411] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1934'. [ 310.375936][T13413] vxcan6: entered allmulticast mode [ 310.616216][T13428] IPVS: Error connecting to the multicast addr [ 310.748577][T13436] netlink: 'syz.0.1943': attribute type 4 has an invalid length. [ 310.748602][T13436] netlink: 'syz.0.1943': attribute type 7 has an invalid length. [ 310.909078][T13445] net_ratelimit: 25 callbacks suppressed [ 310.909098][T13445] openvswitch: netlink: Missing key (keys=40, expected=100) [ 311.332840][T13462] netlink: 'syz.1.1946': attribute type 4 has an invalid length. [ 311.370909][T13462] netlink: 'syz.1.1946': attribute type 4 has an invalid length. [ 311.700567][T13478] vxcan6: entered allmulticast mode [ 312.398345][T13507] xt_policy: output policy not valid in PREROUTING and INPUT [ 312.643421][T13530] IPVS: Error connecting to the multicast addr [ 312.669017][T13530] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 312.961095][T13540] vxcan4: entered allmulticast mode [ 313.096694][T13548] __nla_validate_parse: 5 callbacks suppressed [ 313.096715][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1966'. [ 313.286914][T13555] ip_tables: iptables: counters copy to user failed while replacing table [ 313.488489][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 313.806719][T13575] xt_policy: output policy not valid in PREROUTING and INPUT [ 314.070992][T13581] netlink: 'syz.1.1975': attribute type 2 has an invalid length. [ 314.071015][T13581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1975'. [ 314.109558][T13581] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 314.159342][T13585] vxcan6: entered allmulticast mode [ 314.559193][T13618] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 314.569337][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 314.590920][T13615] xt_policy: output policy not valid in PREROUTING and INPUT [ 314.596463][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 314.622795][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 314.623260][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 314.624945][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 314.643851][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 314.684314][T13607] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 315.410990][T13646] netlink: zone id is out of range [ 315.411009][T13646] netlink: zone id is out of range [ 315.411018][T13646] netlink: zone id is out of range [ 315.411027][T13646] netlink: zone id is out of range [ 315.411036][T13646] netlink: zone id is out of range [ 315.411045][T13646] netlink: zone id is out of range [ 315.411058][T13646] netlink: zone id is out of range [ 316.042010][T13668] vxcan2: entered allmulticast mode [ 316.644549][T13690] smbdirect: ib_dev[sy] removed [ 316.676743][T13699] xt_policy: output policy not valid in PREROUTING and INPUT [ 316.677468][T13688] x_tables: duplicate underflow at hook 1 [ 317.053454][T13711] vxcan6: entered allmulticast mode [ 317.661000][T13740] xt_policy: output policy not valid in PREROUTING and INPUT [ 317.890988][T13742] netlink: 'syz.3.2015': attribute type 4 has an invalid length. [ 317.910616][T13742] net_ratelimit: 151 callbacks suppressed [ 317.910636][T13742] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 318.001764][T13751] xt_policy: output policy not valid in PREROUTING and INPUT [ 318.695227][T13822] xt_policy: output policy not valid in PREROUTING and INPUT [ 319.064722][T13853] __nla_validate_parse: 43 callbacks suppressed [ 319.064744][T13853] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2024'. [ 319.129938][T13859] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 319.256986][T13860] IPVS: Scheduler module ip_vs_sip not found [ 319.391788][T13859] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 319.391818][T13859] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 319.395083][T13860] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 319.395108][T13860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 319.729429][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2030'. [ 319.914621][T13885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2031'. [ 319.925776][T13880] xt_policy: output policy not valid in PREROUTING and INPUT [ 319.949190][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2033'. [ 320.326676][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 320.443856][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 320.444073][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 320.444291][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 320.444474][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 320.445948][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 320.818010][ T31] audit: type=1800 audit(1791321777.700:3): pid=13910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2039" name=CB dev="tmpfs" ino=1966 res=0 errno=0 [ 321.636374][T13944] xt_policy: output policy not valid in PREROUTING and INPUT [ 321.684566][T13926] bridge0: port 3(.`) entered disabled state [ 321.684862][T13926] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.948043][T13926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.982723][T13926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.027779][T13926] 0·: left allmulticast mode [ 322.027807][T13926] hsr_slave_0: left allmulticast mode [ 322.116166][T13926] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 322.157826][T13926] vxlan0: left allmulticast mode [ 322.170933][T13926] vxlan1: left allmulticast mode [ 322.182211][T13926] vxlan2: left allmulticast mode [ 322.187630][T13926] vxlan4: left allmulticast mode [ 322.197384][T13926] ip6gre1: left allmulticast mode [ 322.240392][T13926] batman_adv: batadv0: Interface deactivated: gretap1 [ 322.418951][T13949] IPVS: Error connecting to the multicast addr [ 322.677132][T13966] xt_policy: output policy not valid in PREROUTING and INPUT [ 322.841634][ T9562] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.841668][ T9562] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 322.841693][ T9562] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.841735][ T9562] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.841758][ T9562] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 322.841783][ T9562] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.841821][ T9562] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.841846][ T9562] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 322.841871][ T9562] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.841907][ T9562] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.841933][ T9562] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 322.841959][ T9562] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.311367][T13998] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 323.406168][T13998] bond3: entered promiscuous mode [ 323.406238][T13998] bond3: entered allmulticast mode [ 323.406637][T13998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.717141][T14016] ip_tables: iptables: counters copy to user failed while replacing table [ 324.123012][T14042] lo: left promiscuous mode [ 324.126688][T14042] tunl0: left promiscuous mode [ 324.130392][T14042] gre0: left promiscuous mode [ 324.163740][T14042] ip_vti0: left promiscuous mode [ 324.167074][T14042] ip6_vti0: left promiscuous mode [ 324.170917][T14042] sit0: left promiscuous mode [ 324.206870][T14042] ip6tnl0: left promiscuous mode [ 324.211013][T14042] ip6gre0: left promiscuous mode [ 324.233692][T14042] syz_tun: left promiscuous mode [ 324.237557][T14042] ip6gretap0: left promiscuous mode [ 324.243457][T14042] bridge0: left promiscuous mode [ 324.263752][T14042] bridge0: port 3(.`) entered blocking state [ 324.263872][T14042] bridge0: port 3(.`) entered forwarding state [ 324.265984][T14042] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.270077][T14042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.618145][T14042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.634031][T14042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.641317][T14042] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.662362][T14042] veth1_macvtap: left promiscuous mode [ 324.663679][T14042] veth0_macvtap: left promiscuous mode [ 324.664989][T14042] veth0_macvtap: entered promiscuous mode [ 324.666212][T14042] veth1_macvtap: entered promiscuous mode [ 324.697919][T14042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.699804][T14042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.701195][T14042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.725707][T14042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.757182][T14042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.761053][T14042] batman_adv: batadv0: Interface activated: gretap1 [ 324.783970][T14042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.785367][T14042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 324.823059][T14063] netlink: 'syz.0.2074': attribute type 2 has an invalid length. [ 324.873830][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.873971][ T9562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.025048][ T6620] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.025093][ T6620] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 325.025125][ T6620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.025547][ T6620] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.030082][ T6620] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 325.030121][ T6620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.049488][ T6620] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.049526][ T6620] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 325.049558][ T6620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.097217][ T6620] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.097319][ T6620] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 325.097397][ T6620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.309580][T14074] __nla_validate_parse: 67 callbacks suppressed [ 325.309607][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 325.357287][T14074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2079'. [ 325.389417][T14071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2078'. [ 325.522207][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 325.785175][T14091] IPVS: Error connecting to the multicast addr [ 325.804659][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 325.838523][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2085'. [ 326.603457][T14123] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2094'. [ 326.822224][T14137] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 326.857861][T14139] xt_policy: output policy not valid in PREROUTING and INPUT [ 326.875219][T14137] bridge0: left promiscuous mode [ 327.576701][T14169] IPVS: Error connecting to the multicast addr [ 327.576951][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2106'. [ 327.676438][T14179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2107'. [ 328.102720][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2117'. [ 328.299677][T14219] x_tables: duplicate underflow at hook 1 [ 328.329262][ T8723] bridge0: entered promiscuous mode [ 328.873461][T14246] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 328.895151][T14247] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 328.932930][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.932983][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933017][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933050][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933084][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933233][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933268][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933302][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933334][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 328.933366][T14238] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 329.004584][T14246] bridge0: port 3(.`) entered disabled state [ 329.007885][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.354001][T14252] vxcan4: entered allmulticast mode [ 329.447643][T14249] vxcan2: entered allmulticast mode [ 330.133482][T14292] lo: entered promiscuous mode [ 330.150882][T14292] tunl0: entered promiscuous mode [ 330.166013][T14292] gre0: entered promiscuous mode [ 330.195222][T14292] gretap0: entered promiscuous mode [ 330.247326][T14292] ip_vti0: entered promiscuous mode [ 330.260619][T14292] ip6_vti0: entered promiscuous mode [ 330.271984][T14292] sit0: entered promiscuous mode [ 330.295358][T14292] ip6tnl0: entered promiscuous mode [ 330.309508][T14292] ip6gre0: entered promiscuous mode [ 330.323984][T14292] syz_tun: entered promiscuous mode [ 330.339456][T14292] ip6gretap0: entered promiscuous mode [ 330.559458][T14315] __nla_validate_parse: 8 callbacks suppressed [ 330.559482][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 330.959813][T14327] vxcan2: entered allmulticast mode [ 331.169405][T14336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2151'. [ 331.310445][T14349] netlink: 'syz.1.2155': attribute type 10 has an invalid length. [ 331.328441][T14349] syz_tun: entered allmulticast mode [ 331.329202][T14349] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 332.060855][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 332.134893][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2160'. [ 332.169079][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2162'. [ 333.001681][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2169'. [ 333.116875][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 333.167310][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2168'. [ 333.518338][T14432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.028224][T14465] block nbd1: server does not support multiple connections per device. [ 334.028677][T14465] block nbd1: shutting down sockets [ 334.336784][T14479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 334.336812][T14479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 335.122285][T14522] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 335.186102][T14527] bridge0: port 1(bond0) entered blocking state [ 335.186397][T14527] bridge0: port 1(bond0) entered disabled state [ 335.188204][T14527] bond0: entered allmulticast mode [ 335.190071][T14527] bond0: entered promiscuous mode [ 335.370939][T14534] FAULT_INJECTION: forcing a failure. [ 335.370939][T14534] name failslab, interval 1, probability 0, space 0, times 0 [ 335.370985][T14534] CPU: 0 UID: 0 PID: 14534 Comm: syz.2.2206 Not tainted syzkaller #0 PREEMPT(full) [ 335.371010][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.371041][T14534] Call Trace: [ 335.371049][T14534] [ 335.371058][T14534] dump_stack_lvl+0xe8/0x150 [ 335.371094][T14534] should_fail_ex+0x410/0x560 [ 335.371124][T14534] should_failslab+0xa8/0x100 [ 335.371156][T14534] __kmalloc_noprof+0xfe/0x720 [ 335.371177][T14534] ? tls_sw_sendmsg+0x189/0x2c00 [ 335.371199][T14534] ? tls_sw_sendmsg+0x5d6/0x2c00 [ 335.371219][T14534] ? tls_sw_sendmsg+0x5d6/0x2c00 [ 335.371262][T14534] tls_sw_sendmsg+0x5d6/0x2c00 [ 335.371285][T14534] ? __lock_acquire+0x747/0x2de0 [ 335.371343][T14534] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 335.371372][T14534] ? sock_rps_record_flow+0x19/0x350 [ 335.371398][T14534] ? inet_send_prepare+0x5b/0x260 [ 335.371424][T14534] ? inet6_sendmsg+0x101/0x120 [ 335.371446][T14534] ? __pfx_inet6_sendmsg+0x10/0x10 [ 335.371466][T14534] sock_sendmsg_nosec+0x90/0x190 [ 335.371491][T14534] sock_write_iter+0x2de/0x3e0 [ 335.371514][T14534] ? __pfx_sock_write_iter+0x10/0x10 [ 335.371554][T14534] do_iter_readv_writev+0x612/0x8c0 [ 335.371579][T14534] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 335.371604][T14534] ? bpf_lsm_file_permission+0x9/0x20 [ 335.371632][T14534] ? security_file_permission+0x75/0x260 [ 335.371655][T14534] ? rw_verify_area+0x203/0x4c0 [ 335.371689][T14534] vfs_writev+0x343/0x990 [ 335.371722][T14534] ? __pfx_vfs_writev+0x10/0x10 [ 335.371761][T14534] ? __fget_files+0x2a/0x420 [ 335.371794][T14534] ? __fget_files+0x3a2/0x420 [ 335.371820][T14534] ? __fget_files+0x2a/0x420 [ 335.371857][T14534] do_writev+0x154/0x2e0 [ 335.371883][T14534] ? __pfx_do_writev+0x10/0x10 [ 335.371918][T14534] do_syscall_64+0x166/0x520 [ 335.371937][T14534] ? trace_irq_disable+0x3b/0x140 [ 335.371983][T14534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.372006][T14534] ? clear_bhb_loop+0x70/0xc0 [ 335.372033][T14534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.372054][T14534] RIP: 0033:0x7f0c4739e199 [ 335.372074][T14534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.372093][T14534] RSP: 002b:00007f0c482ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 335.372116][T14534] RAX: ffffffffffffffda RBX: 00007f0c47625fa0 RCX: 00007f0c4739e199 [ 335.372132][T14534] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 335.372146][T14534] RBP: 00007f0c482ed090 R08: 0000000000000000 R09: 0000000000000000 [ 335.372160][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.372173][T14534] R13: 00007f0c47626038 R14: 00007f0c47625fa0 R15: 00007ffd8d8412e8 [ 335.372209][T14534] [ 335.750402][T14545] __nla_validate_parse: 4 callbacks suppressed [ 335.750423][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2211'. [ 335.923095][T14552] xt_l2tp: invalid flags combination: 8 [ 336.094983][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 337.322323][T14477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.585962][T14576] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2220'. [ 337.588922][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 337.590344][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 337.592156][T14576] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 337.628478][T14576] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2220'. [ 337.818259][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2224'. [ 337.849115][T14591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2226'. [ 338.179851][T14613] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 338.318333][T14613] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 338.862551][T14629] vxcan2: entered allmulticast mode [ 339.047342][T14638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2238'. [ 339.197379][T14646] net_ratelimit: 3261 callbacks suppressed [ 339.197466][T14646] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 339.409975][T14656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2247'. [ 339.428756][T14658] xt_TCPMSS: Only works on TCP SYN packets [ 339.485134][T14659] xt_policy: output policy not valid in PREROUTING and INPUT [ 339.692635][T14676] netlink: 'syz.2.2250': attribute type 10 has an invalid length. [ 339.925938][T14680] vxcan0: entered allmulticast mode [ 340.770279][T14720] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 340.830275][T14720] bond4 (unregistering): Released all slaves [ 340.920727][T14731] xt_policy: output policy not valid in PREROUTING and INPUT [ 341.066746][T14742] __nla_validate_parse: 3 callbacks suppressed [ 341.066768][T14742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'. [ 341.335389][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2272'. [ 341.517684][T14765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2278'. [ 341.588188][T14769] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 341.732608][T14778] tipc: Enabled bearer , priority 0 [ 341.738099][T14778] syzkaller0: mtu less than device minimum [ 341.997328][T14791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2288'. [ 342.184984][T14802] netlink: 'syz.1.2292': attribute type 3 has an invalid length. [ 342.225352][T14804] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2291'. [ 342.436104][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 342.709493][T14827] sctp: [Deprecated]: syz.1.2299 (pid 14827) Use of int in maxseg socket option. [ 342.709493][T14827] Use struct sctp_assoc_value instead [ 342.860798][ T5811] tipc: Node number set to 16842751 [ 343.117062][T14842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2305'. [ 343.549446][T14862] syzkaller0: entered promiscuous mode [ 343.549472][T14862] syzkaller0: entered allmulticast mode [ 343.583337][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2314'. [ 343.654917][T14871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2314'. [ 344.031141][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 344.031179][T14889] netlink: 'syz.3.2323': attribute type 18 has an invalid length. [ 344.130856][T14893] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 344.223630][T14893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 344.376656][T14900] netlink: 'syz.0.2324': attribute type 10 has an invalid length. [ 344.428947][T14910] netlink: 'syz.0.2324': attribute type 10 has an invalid length. [ 344.596041][T14899] bridge0: port 3(.`) entered blocking state [ 344.596172][T14899] bridge0: port 3(.`) entered forwarding state [ 344.596507][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.596649][T14899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.957007][T14900] : left promiscuous mode [ 344.989900][T14916] lo: left promiscuous mode [ 345.013343][T14916] tunl0: left promiscuous mode [ 345.159675][T14916] erspan0: left promiscuous mode [ 345.174341][T14916] ip_vti0: left promiscuous mode [ 345.178058][T14916] ip6_vti0: left promiscuous mode [ 345.193850][T14916] sit0: left promiscuous mode [ 345.231382][T14916] ip6tnl0: left promiscuous mode [ 345.235653][T14916] ip6gre0: left promiscuous mode [ 345.237737][T14916] syz_tun: left promiscuous mode [ 345.240995][T14916] ip6gretap0: left promiscuous mode [ 345.282576][T14916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.358284][T14916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.385199][T14916] vxlan0: left promiscuous mode [ 345.387974][T14916] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 345.918709][T14946] pim6reg: entered allmulticast mode [ 345.935506][T14946] pim6reg: left allmulticast mode [ 346.104738][T14952] xt_policy: output policy not valid in PREROUTING and INPUT [ 346.317814][T14968] openvswitch: netlink: Multiple metadata blocks provided [ 346.331180][T14968] __nla_validate_parse: 6 callbacks suppressed [ 346.331202][T14968] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2340'. [ 346.660300][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2340'. [ 346.675603][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 346.735837][T14984] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 346.775251][T14994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2345'. [ 347.157703][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2347'. [ 347.298429][T15022] xt_policy: output policy not valid in PREROUTING and INPUT [ 347.911813][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 347.987591][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2356'. [ 348.013162][T15047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 348.204595][T15057] netlink: 'syz.4.2359': attribute type 1 has an invalid length. [ 348.204620][T15057] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2359'. [ 348.398807][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'. [ 349.026709][T15096] xt_policy: output policy not valid in PREROUTING and INPUT [ 349.854323][T15114] ip_tables: iptables: counters copy to user failed while replacing table [ 349.876862][T15117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.723181][T15155] netlink: 'syz.4.2383': attribute type 12 has an invalid length. [ 350.841120][T15148] vxcan2: entered allmulticast mode [ 351.032474][T15167] macsec1: entered promiscuous mode [ 351.377315][T15181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 351.838215][T15196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.939539][T15196] bond6 (unregistering): Released all slaves [ 352.179003][T15209] __nla_validate_parse: 13 callbacks suppressed [ 352.179028][T15209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2395'. [ 352.179048][T15209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2395'. [ 352.503003][T15213] vxcan2: entered allmulticast mode [ 353.144044][T15227] bridge0: port 3(.`) entered disabled state [ 353.144417][T15227] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.673765][T15227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.711586][T15227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.944719][T15227] batman_adv: batadv0: Interface deactivated: gretap1 [ 354.361196][T15274] tipc: Enabling of bearer rejected, already enabled [ 354.371865][ T6204] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.371900][ T6204] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 354.371929][ T6204] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.371987][ T6204] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.372015][ T6204] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 354.372043][ T6204] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.372083][ T6204] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.372111][ T6204] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 354.372138][ T6204] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.372178][ T6204] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.372206][ T6204] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 354.372233][ T6204] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.422391][T15277] syzkaller0: entered promiscuous mode [ 354.422430][T15277] syzkaller0: entered allmulticast mode [ 354.580612][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 354.677657][T15287] syzkaller0: mtu less than device minimum [ 355.136837][T15330] bridge0: port 1(macsec2) entered blocking state [ 355.139103][T15330] bridge0: port 1(macsec2) entered disabled state [ 355.139258][T15330] macsec2: entered allmulticast mode [ 355.139276][T15330] bridge0: entered allmulticast mode [ 355.168000][T15330] macsec2: left allmulticast mode [ 355.168025][T15330] bridge0: left allmulticast mode [ 355.402367][T15342] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 355.429679][T15336] vxcan0: entered allmulticast mode [ 356.127170][T15391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2434'. [ 356.127199][T15393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2434'. [ 356.141791][T15393] sctp: [Deprecated]: syz.2.2434 (pid 15393) Use of int in max_burst socket option. [ 356.141791][T15393] Use struct sctp_assoc_value instead [ 356.144032][T15391] sctp: [Deprecated]: syz.2.2434 (pid 15391) Use of int in max_burst socket option. [ 356.144032][T15391] Use struct sctp_assoc_value instead [ 356.975852][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2445'. [ 358.897856][T15423] vxcan0: entered allmulticast mode [ 358.912724][T15424] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 358.969806][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 359.074052][T15441] vcan0: entered promiscuous mode [ 359.095800][T15441] team0: entered promiscuous mode [ 359.095827][T15441] team_slave_0: entered promiscuous mode [ 359.096017][T15441] team_slave_1: entered promiscuous mode [ 359.098322][T15441] nlmon0: entered promiscuous mode [ 359.098732][T15441] batadv0: entered promiscuous mode [ 359.099149][T15441] vxcan0: entered promiscuous mode [ 359.101035][T15441] vxcan1: entered promiscuous mode [ 359.105567][T15441] veth0: entered promiscuous mode [ 359.110499][T15441] veth1: entered promiscuous mode [ 359.112948][T15441] wg0: entered promiscuous mode [ 359.117009][T15441] wg1: entered promiscuous mode [ 359.118363][T15441] wg2: entered promiscuous mode [ 359.119626][T15441] veth0_to_bridge: entered promiscuous mode [ 359.120833][T15441] bridge_slave_0: entered promiscuous mode [ 359.123367][T15441] veth1_to_bridge: entered promiscuous mode [ 359.126230][T15441] veth0_to_bond: entered promiscuous mode [ 359.127773][T15441] veth1_to_bond: entered promiscuous mode [ 359.129421][T15441] veth0_to_team: entered promiscuous mode [ 359.131229][T15441] veth1_to_team: entered promiscuous mode [ 359.132470][T15441] veth0_to_batadv: entered promiscuous mode [ 359.132885][T15441] batadv_slave_0: entered promiscuous mode [ 359.137641][T15441] veth1_to_batadv: entered promiscuous mode [ 359.141163][T15441] batadv_slave_1: entered promiscuous mode [ 359.188669][T15441] xfrm0: entered promiscuous mode [ 359.203926][T15441] veth0_to_hsr: entered promiscuous mode [ 359.523139][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 359.561271][T15467] xt_policy: output policy not valid in PREROUTING and INPUT [ 359.856145][T15466] bond3 (unregistering): Released all slaves [ 359.933815][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.933864][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.933914][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934110][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934149][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934185][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934220][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934256][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934291][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 359.934326][T15454] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 360.430842][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2456'. [ 360.467815][T15490] ip6erspan0: entered allmulticast mode [ 360.538526][T15500] bond0: left allmulticast mode [ 360.538558][T15500] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 360.554374][T15500] bond0: left promiscuous mode [ 360.554403][T15500] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 360.554948][T15500] bridge0: port 1(bond0) entered disabled state [ 360.604606][T15500] team0: Port device wg2 removed [ 360.727729][T15511] vxcan2: entered allmulticast mode [ 361.874985][T15568] vxcan0: entered allmulticast mode [ 362.099171][T15583] netlink: 'syz.1.2477': attribute type 3 has an invalid length. [ 362.099200][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 362.123460][T15583] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2477'. [ 362.123494][T15583] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2477'. [ 362.142728][T15583] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 362.157648][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 362.701629][T15617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2487'. [ 362.796381][T15624] xt_ipcomp: unknown flags 1D [ 362.815367][T15616] vxcan2: entered allmulticast mode [ 362.916992][T15624] tipc: New replicast peer: 255.255.255.255 [ 362.930454][T15624] tipc: Enabled bearer , priority 10 [ 362.933941][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2491'. [ 363.034768][T15629] netlink: 'syz.4.2494': attribute type 1 has an invalid length. [ 363.158061][T15629] bond6: entered promiscuous mode [ 363.169040][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 363.169459][T15629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.286478][T15629] bond6: (slave bridge2): making interface the new active one [ 363.286503][T15629] bridge2: entered promiscuous mode [ 363.289205][T15629] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 363.573254][T15660] block nbd0: Unsupported socket: should be TCP or UNIX. [ 363.709710][T15665] xt_policy: output policy not valid in PREROUTING and INPUT [ 364.040400][T15669] vxcan0: entered allmulticast mode [ 364.068329][T15675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2507'. [ 364.105913][ T6598] tipc: Node number set to 4172041810 [ 364.295689][T15685] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2510'. [ 364.670573][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 364.785048][T15713] syzkaller0: left promiscuous mode [ 364.785073][T15713] syzkaller0: left allmulticast mode [ 365.327929][T15745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2530'. [ 365.329503][T15741] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2529'. [ 365.357651][T15742] hsr0: entered promiscuous mode [ 365.447292][T15748] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 365.572914][T15738] hsr0: left promiscuous mode [ 365.813783][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 365.848374][T15762] lo: entered promiscuous mode [ 365.860183][T15762] tunl0: entered promiscuous mode [ 365.896404][T15762] gre0: entered promiscuous mode [ 366.025573][T15764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.140498][T15762] erspan0: entered promiscuous mode [ 366.163571][T15762] ip_vti0: entered promiscuous mode [ 366.207930][T15762] ip6_vti0: entered promiscuous mode [ 366.256012][T15762] sit0: entered promiscuous mode [ 366.359171][T15791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2543'. [ 366.473140][T15762] ip6tnl0: entered promiscuous mode [ 366.974791][T15762] ip6gre0: entered promiscuous mode [ 367.005230][T15762] syz_tun: entered promiscuous mode [ 367.027553][T15762] ip6gretap0: entered promiscuous mode [ 367.221865][T15799] syzkaller0: entered promiscuous mode [ 367.221893][T15799] syzkaller0: entered allmulticast mode [ 367.475011][T15836] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 367.475038][T15836] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2548'. [ 367.475072][T15836] NCSI netlink: No device for ifindex 0 [ 367.605684][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2550'. [ 367.775617][T15853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2552'. [ 367.790655][T15849] xt_policy: output policy not valid in PREROUTING and INPUT [ 367.992688][T15858] bond3: option lacp_active: invalid value (5) [ 368.001209][T15858] bond3 (unregistering): Released all slaves [ 368.118339][T15875] netlink: 'syz.2.2558': attribute type 1 has an invalid length. [ 368.118367][T15875] netlink: 'syz.2.2558': attribute type 2 has an invalid length. [ 368.790345][T15898] bridge0: port 3(.`) entered blocking state [ 368.790473][T15898] bridge0: port 3(.`) entered forwarding state [ 368.792528][T15898] 8021q: adding VLAN 0 to HW filter on device .` [ 369.066510][T15898] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.153758][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.154951][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.168700][T15898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.276448][T15898] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 369.307421][T15898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.368111][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.368241][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.379357][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.379714][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.492038][ T760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.492093][ T760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.492133][ T760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.492168][ T760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.810338][T15950] __nla_validate_parse: 8 callbacks suppressed [ 369.810361][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 369.841052][T15950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2572'. [ 370.082602][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 370.343211][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2578'. [ 370.399278][T15978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2578'. [ 370.783324][T15994] xt_policy: output policy not valid in PREROUTING and INPUT [ 371.265247][T16012] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 371.639794][T16031] netlink: 'syz.2.2592': attribute type 4 has an invalid length. [ 371.639822][T16031] netlink: 'syz.2.2592': attribute type 8 has an invalid length. [ 371.639837][T16031] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 371.639851][T16031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2592'. [ 371.639868][T16031] NCSI netlink: No device for ifindex 48485 [ 371.689359][T16029] batman_adv: batadv0: Adding interface: syzkaller0 [ 371.689380][T16029] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.689415][T16029] batman_adv: batadv0: Interface activated: syzkaller0 [ 371.753655][T16036] xt_policy: output policy not valid in PREROUTING and INPUT [ 371.864252][T16031] syzkaller0: entered promiscuous mode [ 371.864280][T16031] syzkaller0: entered allmulticast mode [ 372.120667][T16027] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 372.238653][T16027] batman_adv: batadv0: Removing interface: syzkaller0 [ 372.429647][T16058] tipc: Enabling of bearer rejected, failed to enable media [ 372.585264][ T52] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 372.784732][T16079] xt_hashlimit: size too large, truncated to 1048576 [ 372.866596][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 373.350649][T16110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2610'. [ 373.400650][T16113] net_ratelimit: 6534 callbacks suppressed [ 373.400671][T16113] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 373.637515][T16123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2614'. [ 373.722839][T16128] veth1_to_batadv: entered promiscuous mode [ 373.723653][T16128] macvtap0: entered allmulticast mode [ 373.723675][T16128] veth1_to_batadv: entered allmulticast mode [ 373.728394][T16128] veth1_to_batadv: left allmulticast mode [ 373.728423][T16128] veth1_to_batadv: left promiscuous mode [ 373.943741][T16138] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 374.026611][T16145] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2619'. [ 374.661618][T16183] lo: left promiscuous mode [ 375.169094][T16206] __nla_validate_parse: 5 callbacks suppressed [ 375.169117][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2636'. [ 375.169134][T16206] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.214835][T16206] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2636'. [ 375.231599][T16206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2636'. [ 375.276272][T16206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2636'. [ 375.403647][T16214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2640'. [ 375.980771][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 376.263415][T16267] trusted_key: syz.3.2657 sent an empty control message without MSG_MORE. [ 376.462461][T16274] xt_policy: output policy not valid in PREROUTING and INPUT [ 376.700525][ T31] audit: type=1800 audit(1791321833.580:4): pid=16280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2661" name="memory.events" dev="tmpfs" ino=2868 res=0 errno=0 [ 376.732255][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2663'. [ 376.831736][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2665'. [ 376.871126][T16293] openvswitch: netlink: Message has 24 unknown bytes. [ 377.058959][T16302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2669'. [ 377.188591][T16305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2669'. [ 377.240780][T16308] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 377.983062][T16346] openvswitch: netlink: EtherType 500 is less than min 600 [ 378.200861][T16347] vxcan0: entered allmulticast mode [ 378.238058][T16352] netlink: Failed to add GPL helper -22 [ 378.238115][T16352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.440625][T16369] xfrm0: Caught tx_queue_len zero misconfig [ 378.944632][T16401] netlink: 'syz.0.2693': attribute type 1 has an invalid length. [ 379.083531][T16396] bridge6: entered promiscuous mode [ 379.446697][T16417] openvswitch: netlink: Key type 10246 is out of range max 32 [ 379.878948][T16437] lo: entered promiscuous mode [ 380.391676][T16477] openvswitch: netlink: Invalid VLAN frame [ 380.479251][T16484] __nla_validate_parse: 15 callbacks suppressed [ 380.479271][T16484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2712'. [ 381.090999][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 381.106791][T16513] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2717'. [ 381.193437][T16525] openvswitch: netlink: Key type 10246 is out of range max 32 [ 381.264477][T16526] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 381.305194][T16526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2721'. [ 381.435051][T16534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2725'. [ 381.548864][T16539] netlink: 'syz.1.2729': attribute type 1 has an invalid length. [ 381.550141][T16538] netlink: 'syz.1.2729': attribute type 1 has an invalid length. [ 381.641128][T16541] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2729'. [ 381.674185][T16538] veth0_to_bond: left promiscuous mode [ 381.709041][T16538] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 381.769156][T16538] macvlan0: entered promiscuous mode [ 381.769180][T16538] macvlan0: entered allmulticast mode [ 381.785361][T16538] bond3: entered promiscuous mode [ 381.812864][T16538] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 381.820028][T16538] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 381.837762][T16538] bond3: left promiscuous mode [ 381.947706][T16556] openvswitch: netlink: Invalid VLAN frame [ 382.211659][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 382.214186][T16570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2737'. [ 382.325394][T16574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2738'. [ 382.470088][T16582] netlink: 'syz.1.2741': attribute type 8 has an invalid length. [ 382.470114][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 382.647643][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2746'. [ 382.720968][T16598] openvswitch: netlink: Invalid VLAN frame [ 382.787633][T16599] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 383.298185][T16626] openvswitch: netlink: Unexpected mask (mask=d0, allowed=10058) [ 383.375337][T16633] netlink: 'syz.3.2764': attribute type 3 has an invalid length. [ 383.394984][T16631] pim6reg: entered allmulticast mode [ 383.397790][T16631] pim6reg: left allmulticast mode [ 383.426711][T16637] veth0: Caught tx_queue_len zero misconfig [ 383.722899][T16649] netlink: 'syz.0.2769': attribute type 1 has an invalid length. [ 384.148326][T16674] ip_tables: iptables: counters copy to user failed while replacing table [ 384.150817][T16674] xt_hashlimit: size too large, truncated to 1048576 [ 384.321045][T16681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 384.535462][T16691] netlink: 'syz.2.2783': attribute type 1 has an invalid length. [ 384.598919][T16692] Bluetooth: MGMT ver 1.23 [ 384.621237][T16691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.181635][T16740] tipc: New replicast peer: 127.0.0.1 [ 385.182179][T16740] tipc: Enabled bearer , priority 10 [ 385.251538][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 385.468000][T16749] IPv6: Can't replace route, no match found [ 385.486613][T16749] __nla_validate_parse: 10 callbacks suppressed [ 385.486637][T16749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2799'. [ 385.486658][T16749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.487790][T16749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.490999][T16749] batman_adv: batadv0: Removing interface: gretap1 [ 385.833167][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'. [ 385.835693][T16762] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.865384][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 385.869841][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 385.892285][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 385.917259][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 385.939838][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 385.957768][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 386.005940][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 386.035816][T16763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2803'. [ 386.134905][ T6604] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 386.301563][ T6588] tipc: Node number set to 2572886634 [ 386.478324][T16792] netlink: 'syz.0.2810': attribute type 33 has an invalid length. [ 386.564727][T16795] vlan0: entered promiscuous mode [ 386.564754][T16795] geneve0: entered promiscuous mode [ 386.566691][T16795] vlan0: entered allmulticast mode [ 386.566713][T16795] geneve0: entered allmulticast mode [ 386.734712][T16806] tunl0: Caught tx_queue_len zero misconfig [ 386.735094][T16806] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 386.918706][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.918754][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.918790][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.918824][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.918981][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.919018][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.919053][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.919096][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 386.919130][T16803] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 387.263713][ T31] audit: type=1800 audit(1791321844.150:5): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2823" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2711 res=0 errno=0 [ 388.087972][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.100939][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.109571][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.123161][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.127488][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.404745][T16856] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 388.408077][T16856] bond4 (unregistering): Released all slaves [ 388.456881][T16858] bridge0: port 4(macsec2) entered blocking state [ 388.457021][T16858] bridge0: port 4(macsec2) entered disabled state [ 388.457119][T16858] macsec2: entered allmulticast mode [ 388.457131][T16858] bridge0: entered allmulticast mode [ 388.459571][T16858] macsec2: left allmulticast mode [ 388.459587][T16858] bridge0: left allmulticast mode [ 388.514435][T16843] syzkaller1: entered promiscuous mode [ 388.514460][T16843] syzkaller1: entered allmulticast mode [ 388.730921][T16867] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 389.160205][T16882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.366795][T16882] batman_adv: batadv0: Interface deactivated: macvlan2 [ 389.379463][T16882] batman_adv: batadv0: Interface deactivated: macvlan0 [ 389.402005][T16882] batman_adv: batadv0: Interface deactivated: gretap1 [ 389.491637][ T9562] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.491675][ T9562] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.491715][ T9562] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.491742][ T9562] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.491777][ T9562] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.491821][ T9562] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.491856][ T9562] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.491884][ T9562] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.698700][T16903] netlink: 'syz.1.2843': attribute type 10 has an invalid length. [ 390.212110][ T52] Bluetooth: hci5: command tx timeout [ 390.548345][T16944] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 390.550142][T16944] __nla_validate_parse: 65 callbacks suppressed [ 390.550162][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 390.578785][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2856'. [ 390.657433][T16951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2858'. [ 391.052372][T16965] pim6reg: entered allmulticast mode [ 391.164622][T16979] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 391.380773][T16850] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.380888][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.381066][T16850] bridge_slave_0: entered allmulticast mode [ 391.412735][T16850] bridge_slave_0: entered promiscuous mode [ 391.423543][T16850] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.429985][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.430171][T16850] bridge_slave_1: entered allmulticast mode [ 391.453480][T16850] bridge_slave_1: entered promiscuous mode [ 391.524573][T16850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.530710][T16850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.588136][T16945] net_ratelimit: 3263 callbacks suppressed [ 391.588158][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588196][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588233][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588265][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588302][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588336][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588369][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588401][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588435][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.588571][T16961] pim6reg: left allmulticast mode [ 391.597782][T16945] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 391.910873][T16850] team0: Port device team_slave_0 added [ 391.957009][T16850] team0: Port device team_slave_1 added [ 392.140955][T16850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.140975][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.141005][T16850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.157642][T16850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.157694][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.157763][T16850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.291572][ T52] Bluetooth: hci5: command tx timeout [ 392.293999][T17010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2868'. [ 392.417854][T16850] hsr_slave_0: entered promiscuous mode [ 392.418965][T16850] hsr_slave_1: entered promiscuous mode [ 392.419733][T16850] debugfs: 'hsr0' already exists in 'hsr' [ 392.419753][T16850] Cannot create hsr debugfs directory [ 392.864763][T17026] vlan1: entered allmulticast mode [ 392.880945][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'. [ 392.989652][T17009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.219226][T17042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'. [ 393.219256][T17042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2872'. [ 393.266178][T16850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.266222][T16850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.384325][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2873'. [ 393.626946][T17059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2876'. [ 393.734458][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 393.865124][T16850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.865165][T16850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.074075][T16850] .`: (slave netdevsim1): Releasing backup interface [ 394.078089][T16850] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 394.119212][T16850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.119251][T16850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.335210][T17083] netlink: 'syz.3.2881': attribute type 1 has an invalid length. [ 394.371826][ T52] Bluetooth: hci5: command tx timeout [ 395.040267][T16850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.040309][T16850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.105750][T17101] bridge0: port 1(bond0) entered blocking state [ 395.105899][T17101] bridge0: port 1(bond0) entered disabled state [ 395.106063][T17101] bond0: entered allmulticast mode [ 395.106087][T17101] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 395.141912][T17101] bond0: entered promiscuous mode [ 395.141943][T17101] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 395.583819][T16850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.594053][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.600442][T16850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.630012][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.630998][T16850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.668274][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.669427][T16850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.704237][T16850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.845007][T17115] vxcan0: entered allmulticast mode [ 395.882532][T17138] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 395.923550][T17138] bond5: entered promiscuous mode [ 395.923969][T17138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.106488][T16850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.143458][T16850] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.161146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.161279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.200300][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.200420][ T6620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.285751][T17155] __nla_validate_parse: 2 callbacks suppressed [ 396.285773][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'. [ 396.451767][ T52] Bluetooth: hci5: command tx timeout [ 396.542299][T17165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2899'. [ 396.593425][T17150] net_ratelimit: 9273 callbacks suppressed [ 396.593451][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593492][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593527][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593562][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593596][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593631][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593665][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593699][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593733][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.593907][T17150] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 396.932262][T17172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2901'. [ 397.264882][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 397.323334][T17189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2904'. [ 397.515375][T17201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2906'. [ 397.515416][T17201] netlink: 468 bytes leftover after parsing attributes in process `syz.4.2906'. [ 397.543328][T17201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2906'. [ 397.626719][T17204] xt_policy: output policy not valid in PREROUTING and INPUT [ 397.983192][T17226] bridge0: port 2(bridge_slave_0) entered blocking state [ 397.983376][T17226] bridge0: port 2(bridge_slave_0) entered disabled state [ 397.983554][T17226] bridge_slave_0: entered allmulticast mode [ 397.989325][T17226] bridge_slave_0: entered promiscuous mode [ 398.028429][T17222] xt_policy: output policy not valid in PREROUTING and INPUT [ 398.105203][T16850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.221778][T17236] netlink: 22844 bytes leftover after parsing attributes in process `syz.4.2913'. [ 398.426920][T16850] veth0_vlan: entered promiscuous mode [ 398.465601][T16850] veth1_vlan: entered promiscuous mode [ 398.610429][T16850] veth0_macvtap: entered promiscuous mode [ 398.639583][T16850] veth1_macvtap: entered promiscuous mode [ 398.737164][T16850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.780251][T16850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.911526][ T6620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.911580][ T6620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.979872][ T6204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.104262][ T760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.240322][ T9578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.240346][ T9578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.461315][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.461339][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.479810][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2923'. [ 399.955932][T17282] netlink: 'syz.4.2924': attribute type 8 has an invalid length. [ 400.460012][T17305] netlink: 'syz.3.2930': attribute type 62 has an invalid length. [ 400.988877][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.006555][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.007946][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.035100][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.037943][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.647129][T17326] net_ratelimit: 2258 callbacks suppressed [ 401.647155][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647194][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647229][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647495][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647536][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647571][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647606][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647655][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647691][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 401.647725][T17326] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 402.325484][T17356] __nla_validate_parse: 5 callbacks suppressed [ 402.325507][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2941'. [ 402.428225][T17358] lo: entered promiscuous mode [ 402.434148][T17358] tunl0: entered promiscuous mode [ 402.440587][T17358] gre0: entered promiscuous mode [ 402.479543][T17358] gretap0: entered promiscuous mode [ 402.507149][T17358] erspan0: entered promiscuous mode [ 402.527433][T17358] ip_vti0: entered promiscuous mode [ 402.531278][T17358] ip6_vti0: entered promiscuous mode [ 402.548138][T17358] sit0: entered promiscuous mode [ 402.563011][T17358] ip6tnl0: entered promiscuous mode [ 402.567161][T17358] ip6gre0: entered promiscuous mode [ 402.579250][T17358] syz_tun: entered promiscuous mode [ 402.600057][T17358] ip6gretap0: entered promiscuous mode [ 402.618217][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.618665][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.620374][T17358] bridge0: entered promiscuous mode [ 402.770792][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2947'. [ 403.093750][ T5617] Bluetooth: hci0: command tx timeout [ 403.221044][T17393] xt_policy: output policy not valid in PREROUTING and INPUT [ 403.525463][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 403.635946][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 403.704233][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.733303][T17418] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2957'. [ 403.766381][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2958'. [ 403.871825][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.873698][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.876198][T17323] bridge_slave_0: entered allmulticast mode [ 403.924207][T17323] bridge_slave_0: entered promiscuous mode [ 403.938741][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.938918][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.939086][T17323] bridge_slave_1: entered allmulticast mode [ 403.956245][T17323] bridge_slave_1: entered promiscuous mode [ 404.047991][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 404.085397][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2957'. [ 404.137435][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.140477][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.194916][T17323] team0: Port device team_slave_0 added [ 404.197926][T17323] team0: Port device team_slave_1 added [ 404.242171][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.242192][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.242221][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.244854][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.244870][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.244897][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.385441][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 404.402663][T17323] hsr_slave_0: entered promiscuous mode [ 404.403780][T17323] hsr_slave_1: entered promiscuous mode [ 404.404544][T17323] debugfs: 'hsr0' already exists in 'hsr' [ 404.404564][T17323] Cannot create hsr debugfs directory [ 404.806649][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 404.915622][T17460] bridge0: entered promiscuous mode [ 405.173162][ T5617] Bluetooth: hci0: command tx timeout [ 405.245397][T17323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.245437][T17323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.298407][T17477] xt_policy: output policy not valid in PREROUTING and INPUT [ 405.415468][T17323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.415509][T17323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.581931][T17323] bond0: (slave netdevsim1): Releasing backup interface [ 405.599768][T17323] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 405.599805][T17323] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 405.620747][T17323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.620786][T17323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.843038][T17323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.843079][T17323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.405631][T17323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 406.409998][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.411258][T17323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.453215][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.454229][T17323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.484975][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.508137][T17323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.523287][T17323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.557335][T17514] xt_policy: output policy not valid in PREROUTING and INPUT [ 406.595848][T17509] Bluetooth: MGMT ver 1.23 [ 406.610792][T17511] syzkaller0: entered promiscuous mode [ 406.610819][T17511] syzkaller0: entered allmulticast mode [ 406.724218][T17511] tipc: Enabled bearer , priority 0 [ 406.761058][T17510] tipc: Resetting bearer [ 406.864620][T17510] tipc: Disabling bearer [ 406.907562][T17528] net_ratelimit: 9830 callbacks suppressed [ 406.907585][T17528] openvswitch: netlink: Geneve option length err (len 283, max 255). [ 406.932889][T17529] xt_policy: output policy not valid in PREROUTING and INPUT [ 407.000662][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.154668][T17539] xt_policy: output policy not valid in PREROUTING and INPUT [ 407.170777][T17323] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.195859][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.195979][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.251631][ T5617] Bluetooth: hci0: command tx timeout [ 407.295690][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.295766][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.450495][T17547] xt_policy: output policy not valid in PREROUTING and INPUT [ 407.712099][T17557] 8021q: VLANs not supported on ip_vti0 [ 407.751135][T17557] IPVS: stopping master sync thread 13618 ... [ 407.875883][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.875936][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.875971][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.876128][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.876165][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.876200][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.876235][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.876270][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 407.876305][T17549] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 408.104448][T17573] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 408.105501][T17572] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 408.150755][T17572] __nla_validate_parse: 7 callbacks suppressed [ 408.150775][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 408.150801][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2998'. [ 408.166081][T17574] vxcan4: entered allmulticast mode [ 408.602748][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 408.603481][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3002'. [ 408.885796][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.335912][ T52] Bluetooth: hci0: command tx timeout [ 409.499120][T17323] veth0_vlan: entered promiscuous mode [ 409.513761][T17323] veth1_vlan: entered promiscuous mode [ 409.578695][T17323] veth0_macvtap: entered promiscuous mode [ 409.627751][T17323] veth1_macvtap: entered promiscuous mode [ 409.697878][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.747557][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.883235][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.985699][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.986066][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.986525][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.027061][T17641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.165751][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.165776][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.215303][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 410.215342][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 410.215362][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3016'. [ 410.319626][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.319649][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.404587][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 410.500797][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 410.549914][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3018'. [ 410.832894][T17663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.837516][T17663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.935910][T17663] bond2: left allmulticast mode [ 410.935938][T17663] bond2: left promiscuous mode [ 411.052298][ T760] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.052338][ T760] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.052376][ T760] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.052404][ T760] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.052442][ T760] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.052469][ T760] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.052504][ T760] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.052532][ T760] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.110676][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.015302][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.019273][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.020138][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.049782][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.058611][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.472338][ T5631] .`: (slave syz_tun): Releasing backup interface [ 412.494153][ T5631] syz_tun (unregistering): left allmulticast mode [ 413.025298][T17753] bridge0: port 4(netdevsim0) entered blocking state [ 413.025407][T17753] bridge0: port 4(netdevsim0) entered disabled state [ 413.084169][T17753] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 413.534683][T17778] __nla_validate_parse: 10 callbacks suppressed [ 413.534706][T17778] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3038'. [ 414.008631][T17801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'. [ 414.067945][T17791] bridge0: port 3(bond0) entered blocking state [ 414.068039][T17791] bridge0: port 3(bond0) entered disabled state [ 414.068949][T17791] bond0: entered allmulticast mode [ 414.068971][T17791] bond_slave_0: entered allmulticast mode [ 414.068991][T17791] bond_slave_1: entered allmulticast mode [ 414.115370][T17791] bond0: entered promiscuous mode [ 414.115391][T17791] bond_slave_0: entered promiscuous mode [ 414.118314][T17791] bond_slave_1: entered promiscuous mode [ 414.133366][ T5617] Bluetooth: hci1: command tx timeout [ 414.314618][T17801] hsr_slave_1 (unregistering): left promiscuous mode [ 414.630254][ T13] .`: left allmulticast mode [ 414.630277][ T13] bond_slave_0: left allmulticast mode [ 414.630481][ T13] bond_slave_1: left allmulticast mode [ 414.632710][ T13] bridge0: port 3(.`) entered disabled state [ 414.700808][ T13] bridge_slave_1: left allmulticast mode [ 414.701058][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.827091][T17831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.059295][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 415.176758][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.178509][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.179541][ T13] .` (unregistering): Released all slaves [ 415.206408][ T13] bond1 (unregistering): Released all slaves [ 415.362221][ T13] bond0 (unregistering): Released all slaves [ 415.374853][ T13] bond2 (unregistering): Released all slaves [ 415.398563][ T13] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 415.414910][ T13] bond3 (unregistering): Released all slaves [ 415.603284][ T13] tipc: Disabling bearer [ 415.603533][ T13] tipc: Left network mode [ 415.717266][ T13] IPVS: stopping master sync thread 12278 ... [ 416.215356][ T5617] Bluetooth: hci1: command tx timeout [ 416.281963][T17866] netlink: 'syz.3.3055': attribute type 62 has an invalid length. [ 416.375843][T17870] netlink: 'syz.2.3058': attribute type 3 has an invalid length. [ 416.548489][T17861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3055'. [ 416.548638][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3055'. [ 416.739284][T17855] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 416.769467][T17883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3059'. [ 416.883740][T17899] ipt_REJECT: TCP_RESET invalid for non-tcp [ 417.132930][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.133040][T17718] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.133205][T17718] bridge_slave_0: entered allmulticast mode [ 417.164404][T17718] bridge_slave_0: entered promiscuous mode [ 417.189195][T17718] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.189835][T17718] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.190019][T17718] bridge_slave_1: entered allmulticast mode [ 417.214560][T17718] bridge_slave_1: entered promiscuous mode [ 417.265279][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 417.288401][T17718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.329356][T17718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.389993][T17916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 417.523213][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 417.525722][T17718] team0: Port device team_slave_0 added [ 417.606363][T17718] team0: Port device team_slave_1 added [ 417.607071][T17926] lo: entered promiscuous mode [ 417.626746][T17926] tunl0: entered promiscuous mode [ 417.637536][T17926] gre0: entered promiscuous mode [ 417.670847][T17926] gretap0: entered promiscuous mode [ 417.695075][T17926] erspan0: entered promiscuous mode [ 417.709502][T17926] ip_vti0: entered promiscuous mode [ 417.719595][T17930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3069'. [ 417.720975][T17926] ip6_vti0: entered promiscuous mode [ 417.751724][T17926] sit0: entered promiscuous mode [ 417.760950][T17926] ip6tnl0: entered promiscuous mode [ 417.777571][T17926] ip6gre0: entered promiscuous mode [ 417.793550][T17926] syz_tun: entered promiscuous mode [ 417.799792][T17926] ip6gretap0: entered promiscuous mode [ 417.809910][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.811854][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.826631][T17926] bridge0: entered promiscuous mode [ 417.909221][T17718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.909242][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.909273][T17718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.959084][T17718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.959104][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.959133][T17718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.135345][T17718] hsr_slave_0: entered promiscuous mode [ 418.136474][T17718] hsr_slave_1: entered promiscuous mode [ 418.137265][T17718] debugfs: 'hsr0' already exists in 'hsr' [ 418.137285][T17718] Cannot create hsr debugfs directory [ 418.293532][ T5617] Bluetooth: hci1: command tx timeout [ 418.713821][T17964] net_ratelimit: 3261 callbacks suppressed [ 418.713845][T17964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.157696][T17977] tipc: Started in network mode [ 419.157730][T17977] tipc: Node identity 7f000001, cluster identity 4711 [ 419.158863][T17977] tipc: New replicast peer: 127.0.0.1 [ 419.184679][T17977] tipc: Enabled bearer , priority 10 [ 419.227104][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 419.272002][T17977] netlink: 'syz.4.3078': attribute type 1 has an invalid length. [ 419.378065][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 419.497152][T17977] 8021q: adding VLAN 0 to HW filter on device bond7 [ 419.828782][T18000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3082'. [ 419.890734][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 420.076839][T18008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'. [ 420.156041][T18011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3084'. [ 420.283294][T13951] tipc: Node number set to 2130706433 [ 420.380688][ T5617] Bluetooth: hci1: command tx timeout [ 420.679178][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'. [ 420.818615][T18051] netlink: 'syz.3.3091': attribute type 21 has an invalid length. [ 420.818640][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 421.046290][ T13] team0 (unregistering): Port device team_slave_1 removed [ 421.076564][ T13] team0 (unregistering): Port device team_slave_0 removed [ 421.428598][T18051] netlink: 'syz.3.3091': attribute type 21 has an invalid length. [ 421.428623][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 421.739710][T17718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 421.770373][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.820588][T17718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 421.866884][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.867866][T17718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 421.905175][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.963003][T18087] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3100'. [ 421.964933][T17718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 421.970029][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 422.010296][T17718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.249310][ T13] IPVS: stop unused estimator thread 0... [ 422.973463][T18123] syzkaller0: entered promiscuous mode [ 422.973489][T18123] syzkaller0: entered allmulticast mode [ 422.998419][T17718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.971672][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 426.051681][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 428.414524][T17718] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.439425][ T760] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.439538][ T760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.489687][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.489797][ T9562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.978832][T18210] __nla_validate_parse: 1 callbacks suppressed [ 428.978858][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'. [ 429.057160][T18210] vcan0: entered promiscuous mode [ 429.110769][T18210] team0: entered promiscuous mode [ 429.110795][T18210] team_slave_0: entered promiscuous mode [ 429.111001][T18210] team_slave_1: entered promiscuous mode [ 429.124077][T18210] dummy0: entered promiscuous mode [ 429.124835][T18210] nlmon0: entered promiscuous mode [ 429.125974][T18210] batadv0: entered promiscuous mode [ 429.126931][T18210] veth0: entered promiscuous mode [ 429.128017][T18210] veth1: entered promiscuous mode [ 429.204665][T18210] wg0: entered promiscuous mode [ 429.205118][T18210] wg1: entered promiscuous mode [ 429.205562][T18210] wg2: entered promiscuous mode [ 429.205881][T18210] veth0_to_bridge: entered promiscuous mode [ 429.237572][T18210] veth1_to_bridge: entered promiscuous mode [ 429.237855][T18210] bridge_slave_1: entered promiscuous mode [ 429.238119][T18210] veth0_to_bond: entered promiscuous mode [ 429.238381][T18210] bond_slave_0: entered promiscuous mode [ 429.252058][T18210] veth1_to_bond: entered promiscuous mode [ 429.253444][T18210] bond_slave_1: entered promiscuous mode [ 429.296145][T18210] veth0_to_batadv: entered promiscuous mode [ 429.296559][T18210] batadv_slave_0: entered promiscuous mode [ 429.300822][T18210] xfrm0: entered promiscuous mode [ 429.301345][T18210] veth0_to_hsr: entered promiscuous mode [ 429.567317][T18214] vxcan6: entered allmulticast mode [ 429.689022][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 429.770249][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3125'. [ 429.879348][T18240] netlink: NAT attribute has 1 unknown bytes [ 429.879389][T18240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.908055][T18240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3126'. [ 429.909810][T18240] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 429.909839][T18240] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 429.910910][T18240] batman_adv: batadv0: Adding interface: wlan0 [ 429.910925][T18240] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.910959][T18240] batman_adv: batadv0: Interface activated: wlan0 [ 430.159162][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.159238][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.160097][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.184248][T18201] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 430.184288][T18201] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 430.184332][T18201] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 430.258631][T17718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.295919][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.300146][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.390565][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.480286][T17718] veth0_vlan: entered promiscuous mode [ 430.500633][T17718] veth1_vlan: entered promiscuous mode [ 430.513167][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.517945][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.574233][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3130'. [ 430.574977][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.608691][T18258] xt_policy: output policy not valid in PREROUTING and INPUT [ 430.640482][T18201] wlan1 speed is unknown, defaulting to 1000 [ 430.661244][T17718] veth0_macvtap: entered promiscuous mode [ 430.684019][T17718] veth1_macvtap: entered promiscuous mode [ 430.884953][T17718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.927202][T17718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.999723][ T1166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.004242][ T1166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.004370][ T1166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.004460][ T1166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.387004][T18287] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3137'. [ 431.468027][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.468051][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.561345][T18296] xt_policy: output policy not valid in PREROUTING and INPUT [ 431.664973][T18295] policy can only be matched on NF_INET_PRE_ROUTING [ 431.664990][T18295] unable to load match [ 431.666222][ T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.666242][ T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.724254][T18284] vxcan2: entered allmulticast mode [ 431.955610][T18305] netlink: 'syz.3.3140': attribute type 1 has an invalid length. [ 431.955640][T18305] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3140'. [ 432.193194][T18305] ------------[ cut here ]------------ [ 432.193212][T18305] ODEBUG: free active (active state 0) object: ffff8880297b6900 object type: timer_list hint: mac802154_scan_worker+0x0/0xe60 [ 432.193272][T18305] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: syz.3.3140/18305 [ 432.223392][T18305] Modules linked in: [ 432.227380][T18305] CPU: 1 UID: 0 PID: 18305 Comm: syz.3.3140 Not tainted syzkaller #0 PREEMPT(full) [ 432.236944][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 432.247121][T18305] RIP: 0010:debug_print_object+0x18a/0x230 [ 432.253041][T18305] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 fd cb 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 13 a1 8e 0b 48 83 c4 10 5b 41 5c [ 432.272849][T18305] RSP: 0018:ffffc900041cf238 EFLAGS: 00010246 [ 432.278998][T18305] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 432.287739][T18305] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff9084cac0 [ 432.297142][T18305] RBP: ffffffff8c6db940 R08: ffff8880297b6900 R09: ffffffff8c0f9700 [ 432.306338][T18305] R10: dffffc0000000000 R11: ffffffff81b3e490 R12: 0000000000000000 [ 432.314506][T18305] R13: ffffffff9084cac0 R14: ffff8880297b6900 R15: ffffffff8c0f83a0 [ 432.323791][T18305] FS: 00007f10201f66c0(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 432.332917][T18305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.339578][T18305] CR2: 0000563df261e950 CR3: 00000000592e0000 CR4: 00000000003526f0 [ 432.347675][T18305] Call Trace: [ 432.351020][T18305] [ 432.354024][T18305] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 432.359896][T18305] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 432.365911][T18305] debug_check_no_obj_freed+0x2e3/0x450 [ 432.373408][T18305] kfree+0x13e/0x650 [ 432.377361][T18305] ? device_release+0xc4/0x1f0 [ 432.382623][T18305] ? destroy_workqueue+0xb30/0xc60 [ 432.388309][T18305] ? __pfx_wpan_phy_release+0x10/0x10 [ 432.394160][T18305] device_release+0xc4/0x1f0 [ 432.398820][T18305] kobject_put+0x222/0x550 [ 432.403339][T18305] ? mutex_destroy+0x39/0xf0 [ 432.408000][T18305] hwsim_del_radio_nl+0x110/0x150 [ 432.413137][T18305] genl_family_rcv_msg_doit+0x233/0x340 [ 432.418917][T18305] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.425112][T18305] ? bpf_lsm_capable+0x9/0x20 [ 432.429849][T18305] ? security_capable+0x7e/0x2c0 [ 432.434859][T18305] genl_rcv_msg+0x614/0x7a0 [ 432.439422][T18305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.444637][T18305] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 432.450255][T18305] netlink_rcv_skb+0x226/0x4a0 [ 432.455704][T18305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.460788][T18305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.466198][T18305] ? down_read+0x2be/0x330 [ 432.470664][T18305] genl_rcv+0x28/0x40 [ 432.474734][T18305] netlink_unicast+0x7bd/0x940 [ 432.479555][T18305] netlink_sendmsg+0x813/0xb40 [ 432.484480][T18305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.490341][T18305] ? apparmor_socket_sendmsg+0x98/0x360 [ 432.496490][T18305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.501878][T18305] sock_sendmsg_nosec+0x14e/0x190 [ 432.506987][T18305] ____sys_sendmsg+0x54e/0x850 [ 432.511896][T18305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.517253][T18305] ? import_iovec+0x73/0xa0 [ 432.521852][T18305] ___sys_sendmsg+0x2a5/0x360 [ 432.526616][T18305] ? __lock_acquire+0x747/0x2de0 [ 432.532363][T18305] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.537643][T18305] ? futex_wait+0x2a2/0x390 [ 432.542387][T18305] ? __fget_files+0x2a/0x420 [ 432.547070][T18305] ? __fget_files+0x3a2/0x420 [ 432.551855][T18305] __x64_sys_sendmsg+0x1b1/0x290 [ 432.556892][T18305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.562512][T18305] do_syscall_64+0x166/0x520 [ 432.567138][T18305] ? trace_irq_disable+0x3b/0x140 [ 432.572353][T18305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.578465][T18305] ? clear_bhb_loop+0x70/0xc0 [ 432.583236][T18305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.589594][T18305] RIP: 0033:0x7f1021f9e199 [ 432.594459][T18305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.614269][T18305] RSP: 002b:00007f10201f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.622788][T18305] RAX: ffffffffffffffda RBX: 00007f1022225fa0 RCX: 00007f1021f9e199 [ 432.630806][T18305] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000005 [ 432.638864][T18305] RBP: 00007f10220358e0 R08: 0000000000000000 R09: 0000000000000000 [ 432.646945][T18305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.655035][T18305] R13: 00007f1022226038 R14: 00007f1022225fa0 R15: 00007ffd1652b938 [ 432.663146][T18305] [ 432.666258][T18305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 432.673573][T18305] CPU: 1 UID: 0 PID: 18305 Comm: syz.3.3140 Not tainted syzkaller #0 PREEMPT(full) [ 432.682980][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 432.693092][T18305] Call Trace: [ 432.696411][T18305] [ 432.699380][T18305] vpanic+0x56d/0xa60 [ 432.703436][T18305] ? __pfx__printk+0x10/0x10 [ 432.708075][T18305] ? __pfx_vpanic+0x10/0x10 [ 432.712625][T18305] ? is_bpf_text_address+0x292/0x2b0 [ 432.717953][T18305] ? is_bpf_text_address+0x26/0x2b0 [ 432.723202][T18305] panic+0xc5/0xd0 [ 432.726971][T18305] ? __pfx_panic+0x10/0x10 [ 432.731454][T18305] __warn+0x315/0x4c0 [ 432.735492][T18305] ? debug_print_object+0xec/0x230 [ 432.740658][T18305] ? debug_print_object+0xec/0x230 [ 432.745822][T18305] __report_bug+0x276/0x570 [ 432.750385][T18305] ? debug_print_object+0xec/0x230 [ 432.755549][T18305] ? __pfx___report_bug+0x10/0x10 [ 432.760641][T18305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.766652][T18305] report_bug_entry+0x19b/0x290 [ 432.771560][T18305] ? debug_print_object+0x18a/0x230 [ 432.776810][T18305] ? debug_print_object+0x18f/0x230 [ 432.782060][T18305] handle_bug+0xce/0x200 [ 432.786351][T18305] exc_invalid_op+0x1a/0x50 [ 432.790924][T18305] asm_exc_invalid_op+0x1a/0x20 [ 432.795806][T18305] RIP: 0010:debug_print_object+0x18a/0x230 [ 432.801660][T18305] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 fd cb 4c fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 13 a1 8e 0b 48 83 c4 10 5b 41 5c [ 432.821302][T18305] RSP: 0018:ffffc900041cf238 EFLAGS: 00010246 [ 432.827419][T18305] RAX: 1ffffffff181f074 RBX: dffffc0000000000 RCX: 0000000000000000 [ 432.835435][T18305] RDX: ffffffff8c6db940 RSI: ffffffff8c6db3c0 RDI: ffffffff9084cac0 [ 432.843454][T18305] RBP: ffffffff8c6db940 R08: ffff8880297b6900 R09: ffffffff8c0f9700 [ 432.851475][T18305] R10: dffffc0000000000 R11: ffffffff81b3e490 R12: 0000000000000000 [ 432.859573][T18305] R13: ffffffff9084cac0 R14: ffff8880297b6900 R15: ffffffff8c0f83a0 [ 432.867594][T18305] ? __pfx_timer_debug_hint+0x10/0x10 [ 432.873031][T18305] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 432.878898][T18305] ? __pfx_mac802154_scan_worker+0x10/0x10 [ 432.884766][T18305] debug_check_no_obj_freed+0x2e3/0x450 [ 432.890384][T18305] kfree+0x13e/0x650 [ 432.894331][T18305] ? device_release+0xc4/0x1f0 [ 432.899143][T18305] ? destroy_workqueue+0xb30/0xc60 [ 432.904297][T18305] ? __pfx_wpan_phy_release+0x10/0x10 [ 432.909700][T18305] device_release+0xc4/0x1f0 [ 432.914352][T18305] kobject_put+0x222/0x550 [ 432.918798][T18305] ? mutex_destroy+0x39/0xf0 [ 432.923426][T18305] hwsim_del_radio_nl+0x110/0x150 [ 432.928501][T18305] genl_family_rcv_msg_doit+0x233/0x340 [ 432.934090][T18305] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.940205][T18305] ? bpf_lsm_capable+0x9/0x20 [ 432.944903][T18305] ? security_capable+0x7e/0x2c0 [ 432.949871][T18305] genl_rcv_msg+0x614/0x7a0 [ 432.954407][T18305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.959460][T18305] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 432.965047][T18305] netlink_rcv_skb+0x226/0x4a0 [ 432.969831][T18305] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.974885][T18305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.980204][T18305] ? down_read+0x2be/0x330 [ 432.984646][T18305] genl_rcv+0x28/0x40 [ 432.988653][T18305] netlink_unicast+0x7bd/0x940 [ 432.993448][T18305] netlink_sendmsg+0x813/0xb40 [ 432.998245][T18305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.003554][T18305] ? apparmor_socket_sendmsg+0x98/0x360 [ 433.009130][T18305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.014440][T18305] sock_sendmsg_nosec+0x14e/0x190 [ 433.019493][T18305] ____sys_sendmsg+0x54e/0x850 [ 433.024294][T18305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.029616][T18305] ? import_iovec+0x73/0xa0 [ 433.034174][T18305] ___sys_sendmsg+0x2a5/0x360 [ 433.038887][T18305] ? __lock_acquire+0x747/0x2de0 [ 433.043856][T18305] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.049088][T18305] ? futex_wait+0x2a2/0x390 [ 433.053650][T18305] ? __fget_files+0x2a/0x420 [ 433.058264][T18305] ? __fget_files+0x3a2/0x420 [ 433.062977][T18305] __x64_sys_sendmsg+0x1b1/0x290 [ 433.067963][T18305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.073477][T18305] do_syscall_64+0x166/0x520 [ 433.078087][T18305] ? trace_irq_disable+0x3b/0x140 [ 433.083127][T18305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.089215][T18305] ? clear_bhb_loop+0x70/0xc0 [ 433.093919][T18305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.099833][T18305] RIP: 0033:0x7f1021f9e199 [ 433.104272][T18305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.123894][T18305] RSP: 002b:00007f10201f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.132331][T18305] RAX: ffffffffffffffda RBX: 00007f1022225fa0 RCX: 00007f1021f9e199 [ 433.140342][T18305] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000005 [ 433.148332][T18305] RBP: 00007f10220358e0 R08: 0000000000000000 R09: 0000000000000000 [ 433.156319][T18305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.164333][T18305] R13: 00007f1022226038 R14: 00007f1022225fa0 R15: 00007ffd1652b938 [ 433.172341][T18305] [ 433.175545][T18305] Kernel Offset: disabled [ 433.179882][T18305] Rebooting in 86400 seconds..