last executing test programs: 1.743979448s ago: executing program 1 (id=2232): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r3, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x1, 0x2, {@ip4=@remote}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c044}, 0x4048003) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf251a000000060021006200000008002280"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 1.629079771s ago: executing program 1 (id=2235): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000500)={0x1}, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x47a}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x10001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4884}, 0x4000) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) close(r6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) 1.470060027s ago: executing program 3 (id=2239): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.33053477s ago: executing program 3 (id=2241): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x23, 0x5, 0x0) (async) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x48, 0x9100, 'veth0_macvtap\x00', 'bond0\x00', 'pimreg\x00', 'gre0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1a6) (async, rerun: 32) setsockopt$llc_int(r1, 0x10c, 0xe, 0x0, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r4, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (rerun: 32) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x82}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x96d160c200d1a4a7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040) 1.282200307s ago: executing program 1 (id=2242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.091351242s ago: executing program 0 (id=2244): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 1.090121503s ago: executing program 2 (id=2245): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) write(r0, &(0x7f0000000040), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@iter={&(0x7f0000000080)=@map_fd=0x1, 0x10}}, 0x20) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x3, @empty, 0x7}}, 0x5, 0x2}, 0x90) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={r4, @in={{0x2, 0x4e21, @loopback}}, [0x8, 0x8, 0x1, 0x4, 0x1ef, 0x4, 0x7, 0xffffffffffffffff, 0x6, 0x4, 0x1, 0xd6b, 0x4, 0x7fff, 0x3]}, &(0x7f0000000480)=0x100) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000004c0)=0x65d, 0x4) r7 = openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000540)={r4, @in6={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}, 0x6, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000600)={r4, @in={{0x2, 0x4e21, @local}}, 0x9, 0xcf4, 0x4, 0x6, 0x732}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000700)={r9, 0xc}, &(0x7f0000000740)=0x8) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000780)={0x1, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$cgroup_ro(r2, &(0x7f00000007c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r11 = accept$phonet_pipe(r10, 0x0, &(0x7f0000000800)) sendfile(r11, r7, &(0x7f0000000840)=0xf139, 0x14) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r11, 0x8982, &(0x7f0000000880)={0x1, 'vlan0\x00', {}, 0x1ff}) r12 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r12, 0x119, 0x1, &(0x7f00000008c0)=0x40, 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000000900)={0x7f, "57e7c8"}, 0x6) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000940)={r9, 0x63, "323b78ee689e810dc0cf29d2cab7a4626f8f557ebc21412098387cd5cbc9f8647eeb268ce23a76425ec4c24e85a0e0fd0986e5f5f9af78e8bafca12806d5b9c7c40a6cc51a4ef0e3e47204a10d15ef46f7304e63b143989b40d28854a99dd4c7346f35"}, &(0x7f00000009c0)=0x6b) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000a00)={r5, 0x2, 0x20}, &(0x7f0000000a40)=0xc) 1.079402549s ago: executing program 4 (id=2246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1d, 0x0, 0x8, 0x2af, 0x1108, r0, 0x80000000, '\x00', r2, r3, 0x1, 0x4, 0x2}, 0x50) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) write$cgroup_subtree(r7, &(0x7f0000000000), 0xfe3a) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000080)) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x9, '\x00', r10, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @dev}, &(0x7f0000000200)=0xc) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) 1.074462067s ago: executing program 3 (id=2247): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0xc8, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0xfffc, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x180}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x80}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "26449dc7c4df1dff"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xa}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "2e0e6b1ea21277a2"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "1bf3a8076b87801c"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "60740395f443a827"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "26916e2cfae24ab9"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xfb}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x14) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r10, @ANYRES32=0x0], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000000400)={0x1c, r11, 0x911, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c854}, 0x4000) 955.093222ms ago: executing program 2 (id=2248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="fd84185564da9d3ac2f006dd0eedbbe02994ca640c014df77dd5337b02a0751f2191bd0dae151dab4be7b7c14cb4cf2518b0b24ee8eb52ef3c881c3121f87ddc5e03fb7ab1e655bd7e1e7b5f0ea68801949133ffbdb6e2fae2aa926a8449a3b53dd3316e330833db649b27fd8c5522f58575e6cceac379d19bd891040b9039662e39a0ef20d260c383ff5787610fe4df03fbd026f17b2eaef5f7d9c3a482f9ceb7e12fbf161270bb954cf0aa628fb9730c", 0xb1}, {&(0x7f0000000400)="7f28d8d76aa31619c4736d68433a61d1eeb000553c8d5d84cb31cf74", 0x1c}, {&(0x7f0000000440)="2221893df79acc8ef5bb179bb68d7a7c9f8d105debbafe01eb63f4c2d687cca301d4a990b1ca0b5b20a7c5e263aec8ae932f4ed700da1c2576bec42e8c839fbefb9c18d4b86819d8ac32c4de53ac36d91fcae4118321ef19963dec96c3da53664538cfb53b023d59015affae8c253ff596", 0x71}], 0x3}, 0x20000800) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "3ca526a384d26a8c", "137ebdde369ff19e99e004548781fdb9", "9db8ff58", "ea0307e100008000"}, 0x28) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "4e361edd41b29bf9", "64b7c93aedc7ba4b28ff4932f7280910", "e4732345", "313d1ae507d7d021"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="64030000", @ANYRES16=r4, @ANYBLOB="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"], 0x364}, 0x1, 0x0, 0x0, 0x40}, 0x4090) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x24}}, 0x0) 911.308511ms ago: executing program 4 (id=2249): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="49a355efbce6e7796614d72e518a6929", 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3253}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x8e, &(0x7f0000000280)=""/142, 0x40f00, 0x324e852bca4a1fba, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x7, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000140), &(0x7f0000000480)=r2}, 0x20) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000500)=0x2, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000580)={&(0x7f0000000540)}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000005c0)="ee20452c416987139a0c400faef0a78d", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000680)=0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000006c0)=0x9, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r7) sendto$inet6(r0, &(0x7f0000000880)="461c5af74ab4fae95b809b34350eca1f34108ea3fd5025cf8531df8b06b16537770435016fef5f5a1724668469d3e0276c4a3d750dee5d90136a7d741c89efa5984904ca08b77985fd295cb81cbe66b3c3cf8b219b6cfb528faf709871f675196cabc5c9c73fcb4c878abd514ab5ab13c528389e0f18aa3a1a5c5594f6ccf1889289d7d4dcf3cd5d0e4772f8ea3f3628b2466e6891aecc7ad3ee993e5915646f", 0xa0, 0x20000000, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000940), 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x21c014}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r10, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "858aa88862c3ee37036ee3384cc68dcc"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "93f2db0da31a3126ae0544e14e6d2969"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8150) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@o_path={&(0x7f0000001d40)='./file0\x00', 0x0, 0x4008, r4}, 0x18) sendmsg$netlink(r7, &(0x7f0000001e00)={&(0x7f0000000b80)=@proc={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc, &(0x7f0000001d00)=[{&(0x7f0000000bc0)={0x112c, 0x16, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="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", @generic="0583bd380f540e8be045f28a61f22b454952ff272201dbe4f35ab41c7172cff82b8d998c5bff9157fa173ae1717d5dd593b644a21f281cc25a161be87c4d776e8e4d49a81d4e7e8d2e8193fb03f322f2e17e7797fb51cb56b9c2fadba5d2377fc636277e8862b093917b81993c4ff8e2d8f5ce32583eda214091d0fe5f9a53001a4102c100fa151742b12e915470c911f547b410929b6f965cf0d5ca009a8a712d7d1416c8abae8d45f755c433817819db", @generic="b035e1848e0664fa35e24cb74a6c0c3d1bdca103a663ee81865f1e395b0bc28056671382bddd2ed95ce3173393605741ffb163358df20456845ca71e18d32403e05cf9df5afb631671f44a7175551ea4edd121bc9cba44f36c7ec2d60fd0adee6b48b0", @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x112c}], 0x1, &(0x7f0000001dc0)=[@rights={{0x28, 0x1, 0x1, [r9, r12, r9, r3, r7, r2]}}], 0x28, 0x2400c004}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000001e40)={0x8, 'veth1_to_hsr\x00', {'veth0\x00'}, 0x1}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r13, 0x84, 0x5, &(0x7f0000001e80)={0x0, @in6={{0xa, 0x4e20, 0x100, @empty, 0x400}}}, 0x84) 887.340548ms ago: executing program 0 (id=2250): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) write$ppp(r0, &(0x7f00000001c0)="38d5", 0x2) 826.343096ms ago: executing program 1 (id=2251): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000300)=""/125, 0x7d, 0x0, &(0x7f00000000c0)=""/32, 0x20}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1b, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0xdc, "6a0b4954c02f8a529f7f068f2acea79721c35b1950c3cc15cb15eee0807a9e18ca0250d03597832081e4767645e45768e8e60bf412777084b4bc7a7e7b876676669d8cc7414a1e0f27dc55046efb78bebf94cf3f2787b0724b6f5a8c609d9d5303d3b97aee74974f38a89163cc1cd217f9479e63590801cca591f2bd9bfe85539aa39678b7522a11ab6fa3d86ce46b38c4b02316ef268ee3443380e047abe76f24d88b4ef0d59687ed5166700974b1641e91d3d18bb4d67277c73e8f63ffd73f2bc257bd8436c739a7c7cac932b9ed112ec9e954efc3baefd0c60b93"}, &(0x7f0000000580)=0xe4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000600)={r8, 0x9, 0x3, [0xf105, 0x0, 0x7]}, &(0x7f0000000640)=0xe) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0x0, 0xc}, {0xffff, 0xfff1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 825.592552ms ago: executing program 3 (id=2252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f00000001c0)="ef8fa4cc47515dd89db42ac779a4f32c699d4e7fe50c55a773725668e790fd3ec547eb6e758e7717ef03a604fcfe3d3b55e5bffd710e3df2b394e912382ec3c5a01371d4d63c5496e5df639294c92e8f60999c7c7e23b3214e0f1d0a7f870306d45c995c65c5defbc4c955dfdac8b44cebd5e25a61bf701a66bc02dfe8ae416f6731aaae613307cf9433ff9eb96a979374a6c58149e27fa1823e0f30ce4501104d8485406012a178", 0xa8, 0x4000041, &(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept4(r0, &(0x7f0000000300)=@un=@abs, &(0x7f0000000000)=0x80, 0xc00) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000680)={'syztnl1\x00', r7, 0x0, 0x1, 0x2f44, 0x2, {{0xf, 0x4, 0x3, 0x2, 0x3c, 0x66, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x83, 0x9, "582176b50bc647"}, @end, @generic={0x83, 0x10, "22bb01d48637229b3817672a108f"}, @generic={0x44, 0xa, "7a773c439d07115d"}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r6}, 0x48) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000851) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) 772.40845ms ago: executing program 0 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661e63b5}, 0x0) 770.599112ms ago: executing program 2 (id=2254): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd700001faff638c066e68a2e2640900b3aaff0300000014e100760d0001007564703a73797a0f7d8f9b1fb6f0aada"], 0x28}}, 0x24000880) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) 765.467434ms ago: executing program 4 (id=2255): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) getsockname(r0, &(0x7f0000001440)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f00000013c0)=0x80) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x10}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket(0x2a, 0x800, 0x2) recvfrom$unix(r7, &(0x7f00000012c0)=""/238, 0xee, 0x0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$sock_inet6_SIOCADDRT(r6, 0x8902, &(0x7f0000000080)={@mcast1, @loopback, @mcast1, 0x4, 0x0, 0x0, 0x500}) 611.089099ms ago: executing program 2 (id=2256): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) getpeername$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000a37d38fa28bd7000000000000000004a", @ANYRES32=0x0, @ANYBLOB="c04200000000000014001280090001007665746800000000040002800800200001000000"], 0x3c}}, 0x0) 482.356066ms ago: executing program 0 (id=2257): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 464.572153ms ago: executing program 4 (id=2258): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x2, 0x70bd26, 0x5, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4020) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcc}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffff876}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x43000020}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x4}}, {@llc={0x4, {@llc={0x4, 0x4e, "7f", "3be4ba3bf877867d94e768086ffd561354"}}}}}, &(0x7f0000000500)={0x1, 0x2, [0xb8, 0x26c, 0xbc3, 0xcd]}) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}}, 0x1, 0x2, 0x6, 0x5, 0x4c, 0x0, 0x9}, 0x9c) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r3) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xec, r7, 0x320, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x825e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20024001) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000b00)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r5) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r10, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r5) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000cc0)={0x0, @in={{0x2, 0x4e22, @local}}, [0x2, 0x4, 0x6, 0x8, 0xfffffffffffffff8, 0x3, 0x2a98, 0xa, 0x3, 0x1, 0x7f, 0x3, 0x100000001, 0x80000001, 0x9]}, &(0x7f0000000dc0)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000e00)={r11, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, 0xfffffffc, 0x9, 0xffffa5dd, 0x4, 0x14, 0x3, 0x3}, &(0x7f0000000ec0)=0x9c) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000f00)={0x0, 0x5, 0x7, [0xf, 0x1, 0x6, 0x44b, 0x3, 0xcb, 0x3]}, &(0x7f0000000f40)=0x16) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x8041) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xfc, r13, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffc0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_FRAME={0xac, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @from_mac=@device_b, {0x2, 0x7}}, 0x2348, 0x8, @default, @void, @void, [{0xdd, 0x88, "6c520af7a774ed97d11a7082ae1181eb331f48f8ee2189d055c9b5625d77ede2c922d9a9391ab7af725dc4effed2cac2a5562a333cf0d760bb8c377769e7d8da732b7772e344ce234f4be45639b0bb0cd77cb017fb7cc154dea5be8c56f2d9efc13490446ee80d8e2618dd695b16373115ac16a355743cd0af05ec9a9b540fec01f2e2bb8008dd99"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd62}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) 330.930335ms ago: executing program 3 (id=2259): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xb) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltclass={0x7c, 0x29, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xd, 0xa}, {0x5, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xd0}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0xfb, 0x81}}, @TCA_RATE={0x6, 0x5, {0xb5, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240)=0x1, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000002c0)=r3) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'pim6reg0\x00', &(0x7f0000000300)=@ethtool_stats}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x804) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000500)=""/224, &(0x7f0000000600)=0xe0) connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9b}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000680)=0x840, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000006c0)="21b2abdf7208cc3e582dcc9abcc9ab163b187a74a7be5fb4d5b4049677d3e714da9038fc517c1e6ff9645b7802daad2c9877fc39b2da7c78dee47b6a7a67c9540ae270cffae059b431694b979688414bf85cbe681da160f48ccbe057297c4366d35376e309b43eb86a6f30cdd91db83d59a37c81089334d0d20d27ff471dfca69ad04cf35ba839b6e8c1d625d93378c2b67ce72cf546f7c2d7928f2657787fa3448ab07386dc313eee0cc670aad07390048681b5989728b5a88f3a60d420012e5d00527fa20fe3f7c3c422aa7cbade214cb304376b3ac8dbc562d13cea7ad70d6c9584fcb9e1a9e9fbfd77b5ee9ab0de06b169c75c1e64cc75", 0xf9) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000007c0)={{0x3, @rose}, [@rose, @netrom, @default, @remote, @null, @remote, @netrom, @default]}, &(0x7f0000000840)=0x48, 0x80000) accept$ax25(r6, 0x0, &(0x7f0000000880)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x18, 0x140e, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000009c0)=0x50130952897c0e28, 0x4) getsockopt(r7, 0x4, 0x9, &(0x7f0000000a00)=""/85, &(0x7f0000000a80)=0x55) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x0, r7}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x14, 0x9, 0x4, 0x7, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x7, 0x43, &(0x7f0000000bc0)=""/67, 0x41000, 0x50, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x3, 0xfffffff7, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[0xffffffffffffffff, r8, r9, r10], &(0x7f0000000e40)=[{0x2, 0x4, 0x0, 0x8}, {0x0, 0x1, 0xf, 0x7}, {0x1, 0x4, 0x3, 0xc}, {0x3, 0x1, 0x9, 0x2}], 0x10, 0x8}, 0x94) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), r1) sendmsg$FOU_CMD_GET(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x110}, 0xd0) setsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f0000001080)="78229753f656262f3278fbac36e7e2b8c303f59b084efadfb15af0a84d758a35439f07771814a054aff5564a80", 0x2d) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001100)={0x28, 0x0, 0x2711, @local}, 0x10) 303.422073ms ago: executing program 0 (id=2260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000140001800d00010075cba93a73"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 285.431902ms ago: executing program 2 (id=2261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 227.301488ms ago: executing program 4 (id=2262): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0xfffffffc) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_emit_ethernet(0x12d, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e20f0000f71101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22"], 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000003400)={0x0, {{0xa, 0x4e23, 0x7, @remote}}, {{0xa, 0x4e21, 0x1, @local, 0x8}}}, 0x108) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) 179.841964ms ago: executing program 1 (id=2263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="ffff17eb", @ANYRES16=r1, @ANYBLOB="010029bd7000040000008900000008000300", @ANYRES32=r2, @ANYBLOB="18001d801400008006000500ca00000005000800ba000000"], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async, rerun: 64) socket(0x1e, 0x80000, 0x0) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 120.635677ms ago: executing program 4 (id=2264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0xfe2) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000007c0)={@private2, 0x0}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getchain={0x5c, 0x66, 0x300, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xa, 0x7}, {0x1, 0x1}, {0x9, 0xffff}}, [{0x8, 0xb, 0x1000}, {0x8, 0xb, 0x740}, {0x8, 0xb, 0xf6de}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x110, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x955f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x281}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket$kcm(0x1e, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 46.972189ms ago: executing program 3 (id=2265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd9, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x4) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/mnt\x00') 44.937596ms ago: executing program 2 (id=2266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010003", 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x2e, 0x24, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24054) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}, {{&(0x7f0000000480)=@caif=@rfm={0x25, 0xa8, "e2581e92e86af18b73b88e3976e83a39"}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0xb9e}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x572}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8e77}}], 0xa8}}], 0x2, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltclass={0x30, 0x29, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xa, 0x8}, {0x10, 0x5}, {0xe, 0x1}}, [@tclass_kind_options=@c_mqprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r9, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) recvmmsg(r9, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800460000200000000000119078000000000704040000004e200008907866c1d5bc0f48b90c"], 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) 41.215795ms ago: executing program 0 (id=2267): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9d06, 0xa306676f1cf341ca}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet(0x2, 0x3, 0x8) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x42, &(0x7f0000000280)}, &(0x7f0000002100)=0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r5, 0x9d06, 0xa306676f1cf341ca}, 0xc) (async) 0s ago: executing program 1 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x80) kernel console output (not intermixed with test programs): [ T6154] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 84.061417][ T6154] ? do_syscall_64+0xfa/0xfa0 [ 84.061438][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.061465][ T6154] __vmalloc_node_range_noprof+0x125/0x12d0 [ 84.061517][ T6154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.061545][ T6154] ? __kasan_kmalloc+0x93/0xb0 [ 84.061574][ T6154] vmalloc_user_noprof+0xad/0xf0 [ 84.061597][ T6154] ? xskq_create+0xbf/0x170 [ 84.061618][ T6154] xskq_create+0xbf/0x170 [ 84.061642][ T6154] xsk_init_queue+0xb0/0x110 [ 84.061665][ T6154] xsk_setsockopt+0x4dc/0x8d0 [ 84.061688][ T6154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.061710][ T6154] ? __pfx_aa_sk_perm+0x10/0x10 [ 84.061735][ T6154] ? aa_sock_opt_perm+0xff/0x1b0 [ 84.061761][ T6154] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 84.061777][ T6154] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.061801][ T6154] do_sock_setsockopt+0x17c/0x1b0 [ 84.061822][ T6154] __x64_sys_setsockopt+0x13f/0x1b0 [ 84.061845][ T6154] do_syscall_64+0xfa/0xfa0 [ 84.061866][ T6154] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.061888][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.061904][ T6154] ? clear_bhb_loop+0x60/0xb0 [ 84.061924][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.061940][ T6154] RIP: 0033:0x7fced358f6c9 [ 84.061963][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.061977][ T6154] RSP: 002b:00007fced4513038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.061995][ T6154] RAX: ffffffffffffffda RBX: 00007fced37e5fa0 RCX: 00007fced358f6c9 [ 84.062007][ T6154] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 84.062016][ T6154] RBP: 00007fced3611f91 R08: 0000000000000004 R09: 0000000000000000 [ 84.062027][ T6154] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.062037][ T6154] R13: 00007fced37e6038 R14: 00007fced37e5fa0 R15: 00007ffd48b007c8 [ 84.062069][ T6154] [ 84.062140][ T6154] Mem-Info: [ 84.098456][ T6161] trusted_key: syz.4.58 sent an empty control message without MSG_MORE. [ 84.104850][ T6154] active_anon:5998 inactive_anon:0 isolated_anon:0 [ 84.104850][ T6154] active_file:2628 inactive_file:39874 isolated_file:0 [ 84.104850][ T6154] unevictable:768 dirty:1483 writeback:0 [ 84.104850][ T6154] slab_reclaimable:10463 slab_unreclaimable:94381 [ 84.104850][ T6154] mapped:29100 shmem:1357 pagetables:1148 [ 84.104850][ T6154] sec_pagetables:0 bounce:0 [ 84.104850][ T6154] kernel_misc_reclaimable:0 [ 84.104850][ T6154] free:1326302 free_pcp:23037 free_cma:0 [ 84.374039][ T6162] bond1: Invalid ad_actor_system MAC address. [ 84.379360][ T6154] Node 0 active_anon:23992kB inactive_anon:0kB active_file:10512kB inactive_file:159296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120400kB dirty:5920kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12200kB pagetables:4640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.427799][ T6162] bond1: option ad_actor_system: invalid value (1) [ 84.473853][ T6154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.514344][ T6154] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.554288][ T6154] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 84.560106][ T6154] Node 0 DMA32 free:1397472kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24092kB inactive_anon:0kB active_file:10512kB inactive_file:159296kB unevictable:1536kB writepending:5920kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:80396kB local_pcp:41072kB free_cma:0kB [ 84.648615][ T6154] lowmem_reserve[]: 0 0 0 0 0 [ 84.667544][ T6154] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.697937][ T6154] lowmem_reserve[]: 0 0 0 0 0 [ 84.702677][ T6154] Node 1 Normal free:3891480kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19360kB local_pcp:11200kB free_cma:0kB [ 84.766703][ T6154] lowmem_reserve[]: 0 0 0 0 0 [ 84.771461][ T6154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.785133][ T6154] Node 0 DMA32: 6*4kB (UM) 3*8kB (UME) 3*16kB (M) 4*32kB (UME) 2*64kB (ME) 3*128kB (M) 5*256kB (UME) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (ME) 338*4096kB (M) = 1396192kB [ 84.803512][ T6154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 84.818378][ T6154] Node 1 Normal: 194*4kB (UME) 44*8kB (UME) 37*16kB (UME) 47*32kB (UME) 18*64kB (UME) 8*128kB (UME) 4*256kB (UM) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3891992kB [ 84.836726][ T6154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.846712][ T6154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.856043][ T6154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.866728][ T6154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.876156][ T6154] 43855 total pagecache pages [ 84.880836][ T6154] 0 pages in swap cache [ 84.885211][ T6154] Free swap = 124996kB [ 84.889586][ T6154] Total swap = 124996kB [ 84.895433][ T6154] 2097051 pages RAM [ 84.899331][ T6154] 0 pages HighMem/MovableOnly [ 84.904879][ T6154] 424121 pages reserved [ 84.909057][ T6154] 0 pages cma reserved [ 84.914567][ T6162] bond1 (unregistering): Released all slaves [ 84.931573][ T6176] __nla_validate_parse: 2 callbacks suppressed [ 84.931587][ T6176] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.61'. [ 85.051596][ T6188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 85.490681][ T6218] Cannot find add_set index 0 as target [ 85.616030][ T6220] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 85.647418][ T6223] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 85.780150][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 85.857262][ T6237] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 85.873747][ T6237] netlink: 184 bytes leftover after parsing attributes in process `syz.2.79'. [ 85.883887][ T6244] netlink: 'syz.0.80': attribute type 33 has an invalid length. [ 85.891535][ T6244] netlink: 152 bytes leftover after parsing attributes in process `syz.0.80'. [ 86.068146][ T6250] warning: `syz.2.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.203797][ T6255] block nbd0: server does not support multiple connections per device. [ 86.215434][ T6255] block nbd0: shutting down sockets [ 86.302717][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'. [ 86.317324][ T6264] netlink: 'syz.1.89': attribute type 21 has an invalid length. [ 86.326110][ T6264] netlink: 176 bytes leftover after parsing attributes in process `syz.1.89'. [ 86.362949][ T6264] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.380782][ T6264] IPv6: Can't replace route, no match found [ 86.487146][ T6276] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 86.524862][ T6281] netlink: 152 bytes leftover after parsing attributes in process `syz.2.92'. [ 86.637929][ T6287] Bluetooth: MGMT ver 1.23 [ 86.662376][ T940] cfg80211: failed to load regulatory.db [ 86.803927][ T6301] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 86.811015][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.846415][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.860401][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.869928][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.879571][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.889042][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.901440][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.910954][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.920379][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.957167][ T6302] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 86.998072][ T6310] netlink: 'syz.0.100': attribute type 7 has an invalid length. [ 87.017230][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 87.222484][ T6322] netlink: 'syz.0.104': attribute type 13 has an invalid length. [ 87.231323][ T6322] macvtap0: refused to change device tx_queue_len [ 87.335325][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 87.762983][ T6342] sctp: [Deprecated]: syz.4.110 (pid 6342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.762983][ T6342] Use struct sctp_sack_info instead [ 87.814631][ T6347] tipc: New replicast peer: 255.255.255.255 [ 87.835799][ T6347] tipc: Enabled bearer , priority 10 [ 88.739193][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 88.746754][ T5827] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 88.840577][ T6402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.910272][ T6397] syzkaller1: entered promiscuous mode [ 88.915861][ T6397] syzkaller1: entered allmulticast mode [ 89.008469][ T6406] syzkaller1: entered promiscuous mode [ 89.015994][ T6406] syzkaller1: entered allmulticast mode [ 89.027078][ T5986] tipc: Node number set to 457623607 [ 89.412778][ T6429] Bluetooth: MGMT ver 1.23 [ 89.427887][ T6432] netlink: 'syz.4.135': attribute type 17 has an invalid length. [ 89.487801][ T6432] erspan0: entered promiscuous mode [ 89.537208][ T6432] erspan0: left promiscuous mode [ 90.592285][ T6472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.662850][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.671342][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.711218][ T6471] __nla_validate_parse: 9 callbacks suppressed [ 90.711234][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 90.968630][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 91.001256][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 91.068145][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 91.086461][ T6491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.117608][ T6491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.176752][ T6491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.204189][ T6491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.217307][ T6497] netlink: 'syz.1.152': attribute type 11 has an invalid length. [ 91.227082][ T6497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.152'. [ 91.267731][ T6500] netlink: 'syz.4.153': attribute type 12 has an invalid length. [ 91.298565][ T6500] bond1: option primary_reselect: invalid value (255) [ 91.311261][ T6500] bond1 (unregistering): Released all slaves [ 91.389563][ T6507] netlink: 'syz.2.155': attribute type 6 has an invalid length. [ 91.553056][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 91.630134][ T6525] netlink: 240 bytes leftover after parsing attributes in process `syz.2.161'. [ 91.733973][ T6537] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 91.806211][ T6543] netlink: 72 bytes leftover after parsing attributes in process `syz.1.163'. [ 92.067472][ T6564] netlink: 'syz.0.169': attribute type 4 has an invalid length. [ 92.232588][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.173'. [ 92.330049][ T6581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.175'. [ 92.433366][ T6557] netlink: 'syz.1.167': attribute type 23 has an invalid length. [ 92.647525][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 92.877592][ T6594] bridge0: port 4(vlan1) entered blocking state [ 92.905867][ T6594] bridge0: port 4(vlan1) entered disabled state [ 92.914266][ T6594] vlan1: entered allmulticast mode [ 92.919866][ T6594] bridge0: entered allmulticast mode [ 92.946340][ T6594] vlan1: left allmulticast mode [ 92.952334][ T6594] bridge0: left allmulticast mode [ 93.009631][ T6608] tc_dump_action: action bad kind [ 93.312363][ T6620] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 93.367846][ T6620] bond1 (unregistering): Released all slaves [ 93.445773][ T6636] netlink: 'syz.2.192': attribute type 11 has an invalid length. [ 93.600733][ T6643] tipc: Started in network mode [ 93.619887][ T6643] tipc: Node identity 42e750752ec, cluster identity 4711 [ 93.648506][ T6643] tipc: Enabled bearer , priority 0 [ 93.841979][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.854772][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.917049][ T6649] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 93.949294][ T6643] syzkaller0: entered promiscuous mode [ 93.955845][ T6643] syzkaller0: entered allmulticast mode [ 93.980269][ T6654] sit0: mtu greater than device maximum [ 94.010948][ T6642] tipc: Resetting bearer [ 94.057203][ T6642] tipc: Disabling bearer [ 94.076643][ T6284] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.086428][ T6284] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.115233][ T6284] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.162578][ T6284] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.623557][ T30] audit: type=1107 audit(1763154746.950:2): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='/ԑ' [ 94.798710][ T6706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.075270][ T6706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.261088][ T6706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.390086][ T6706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.619757][ T6753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.657147][ T6284] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.667807][ T6753] syz.3.223 (6753) used greatest stack depth: 17528 bytes left [ 95.707549][ T6284] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.759470][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803812][ T6758] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 95.805830][ T6761] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 95.816764][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.835803][ T6758] veth1_macvtap: left promiscuous mode [ 96.138745][ T6774] xt_hashlimit: size too large, truncated to 1048576 [ 96.168278][ T6773] xt_hashlimit: size too large, truncated to 1048576 [ 96.219074][ T6779] __nla_validate_parse: 13 callbacks suppressed [ 96.219090][ T6779] netlink: 112 bytes leftover after parsing attributes in process `syz.0.230'. [ 96.532312][ T6791] sit1: entered promiscuous mode [ 96.538405][ T6791] sit1: entered allmulticast mode [ 96.648750][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 96.660907][ T6801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.234'. [ 97.199393][ T6835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.239'. [ 97.416067][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'. [ 97.437646][ T6841] netlink: 72 bytes leftover after parsing attributes in process `syz.2.241'. [ 97.531935][ T6847] netlink: 256 bytes leftover after parsing attributes in process `syz.4.243'. [ 97.665935][ T6861] x_tables: unsorted entry at hook 2 [ 97.839566][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 98.050517][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 98.083758][ T6887] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 98.131614][ T6886] syzkaller0: entered promiscuous mode [ 98.152643][ T6886] syzkaller0: entered allmulticast mode [ 98.181416][ T6886] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 98.193246][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'. [ 98.197876][ T6887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.211030][ T6887] bond1: (slave bond2): making interface the new active one [ 98.220559][ T6887] bond1: (slave bond2): Enslaving as an active interface with an up link [ 98.597904][ T6908] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 99.069434][ T6935] syz.0.267 (6935) used obsolete PPPIOCDETACH ioctl [ 99.891816][ T6996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.949449][ T6999] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.417093][ T7026] x_tables: duplicate underflow at hook 1 [ 101.116572][ T7065] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 101.506198][ T7087] gre1: entered promiscuous mode [ 101.511603][ T7087] gre1: entered allmulticast mode [ 101.704761][ T7094] syzkaller0: entered promiscuous mode [ 101.724200][ T7094] syzkaller0: entered allmulticast mode [ 101.897902][ T7101] netlink: 'syz.2.321': attribute type 12 has an invalid length. [ 102.767863][ T7130] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 102.795625][ T7137] __nla_validate_parse: 11 callbacks suppressed [ 102.795642][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.330'. [ 103.135732][ T7159] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 103.311207][ T7175] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 103.473851][ T7180] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 103.496826][ T7183] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.341'. [ 103.536052][ T7180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.654182][ T7187] veth3: entered promiscuous mode [ 103.692079][ T7187] bond2: (slave veth3): Enslaving as an active interface with a down link [ 103.755501][ T7180] veth5: entered promiscuous mode [ 103.767797][ T7180] bond2: (slave veth5): Enslaving as an active interface with a down link [ 103.808719][ T7194] bond2: entered allmulticast mode [ 103.995424][ T7207] syzkaller0: entered promiscuous mode [ 104.000920][ T7207] syzkaller0: entered allmulticast mode [ 104.019690][ T7211] xt_hashlimit: size too large, truncated to 1048576 [ 104.027991][ T7204] tipc: Started in network mode [ 104.032868][ T7204] tipc: Node identity 0ac60bd8f082, cluster identity 4711 [ 104.047412][ T7204] tipc: Enabled bearer , priority 0 [ 104.117128][ T7217] tipc: Enabled bearer , priority 0 [ 104.124937][ T7214] tipc: Enabling of bearer rejected, already enabled [ 104.219769][ T7217] syzkaller0: entered promiscuous mode [ 104.225587][ T7217] syzkaller0: entered allmulticast mode [ 104.231947][ T7217] tipc: Resetting bearer [ 104.239873][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 104.250857][ T7228] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 104.262130][ T7219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.350'. [ 104.272083][ T7228] netlink: 228 bytes leftover after parsing attributes in process `syz.1.351'. [ 104.319024][ T7204] tipc: Resetting bearer [ 104.418060][ T7204] tipc: Disabling bearer [ 104.448244][ T7212] tipc: Resetting bearer [ 104.989279][ T7261] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 105.044332][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.357'. [ 105.573183][ T7212] tipc: Disabling bearer [ 105.607362][ T940] tipc: Node number set to 1814515829 [ 105.839044][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'. [ 105.848457][ T7278] netlink: 80 bytes leftover after parsing attributes in process `syz.2.360'. [ 105.879356][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'. [ 106.041227][ T7284] can: request_module (can-proto-4) failed. [ 106.118966][ T7299] tipc: Started in network mode [ 106.133657][ T7299] tipc: Node identity , cluster identity 4711 [ 106.161127][ T7299] tipc: Failed to obtain node identity [ 106.184149][ T7299] tipc: Enabling of bearer rejected, failed to enable media [ 106.226991][ T7307] syzkaller0: entered promiscuous mode [ 106.244966][ T7307] syzkaller0: entered allmulticast mode [ 106.669102][ T7339] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 106.719199][ T7339] netlink: 244 bytes leftover after parsing attributes in process `syz.0.373'. [ 106.798406][ T7344] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 106.836622][ T7344] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 107.014318][ T7359] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 107.375090][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.382751][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.692375][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.714054][ T7361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.116211][ T7393] netlink: 'syz.4.383': attribute type 1 has an invalid length. [ 108.157935][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.205104][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.290286][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.300104][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.321590][ T7412] __nla_validate_parse: 2 callbacks suppressed [ 108.321604][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 108.342612][ T7413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.386'. [ 108.354290][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x2e [ 108.406779][ T7412] x_tables: duplicate entry at hook 1 [ 108.533894][ T7420] syzkaller1: entered promiscuous mode [ 108.539504][ T7420] syzkaller1: entered allmulticast mode [ 108.552980][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 108.562484][ T7423] ipt_REJECT: TCP_RESET invalid for non-tcp [ 108.564191][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 108.852756][ T7440] netlink: 'syz.0.395': attribute type 12 has an invalid length. [ 108.861072][ T7440] netlink: 'syz.0.395': attribute type 29 has an invalid length. [ 108.870070][ T7440] netlink: 148 bytes leftover after parsing attributes in process `syz.0.395'. [ 108.879593][ T7440] netlink: 59 bytes leftover after parsing attributes in process `syz.0.395'. [ 108.970807][ T7444] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.396'. [ 108.981299][ T7444] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 109.385685][ T7461] netlink: 40 bytes leftover after parsing attributes in process `syz.4.399'. [ 109.482511][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.399'. [ 109.655370][ T7469] netlink: 72 bytes leftover after parsing attributes in process `syz.1.402'. [ 110.840740][ T6829] tipc: Subscription rejected, illegal request [ 111.596157][ T7571] netem: invalid attributes len -24 [ 111.626008][ T7571] netem: change failed [ 112.808130][ T7635] netlink: 'syz.1.445': attribute type 15 has an invalid length. [ 112.890126][ T10] IPVS: starting estimator thread 0... [ 112.907342][ T7647] nftables ruleset with unbound chain [ 112.994950][ T7643] IPVS: using max 31 ests per chain, 74400 per kthread [ 113.148217][ T7667] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.721568][ T7705] syzkaller0: entered promiscuous mode [ 113.749772][ T7705] syzkaller0: entered allmulticast mode [ 113.817566][ T7714] __nla_validate_parse: 11 callbacks suppressed [ 113.817583][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.464'. [ 113.850198][ T7714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.464'. [ 113.866071][ T7714] gretap1: entered promiscuous mode [ 113.871456][ T7714] gretap1: entered allmulticast mode [ 113.938508][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.466'. [ 114.039241][ T7726] netlink: 'syz.4.469': attribute type 2 has an invalid length. [ 114.693356][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 114.738789][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'. [ 114.816500][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 114.858990][ T7737] bond3 (unregistering): Released all slaves [ 114.885978][ T7739] sit0: entered promiscuous mode [ 114.892158][ T7739] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 114.901537][ T7739] netlink: 1 bytes leftover after parsing attributes in process `syz.4.473'. [ 115.052888][ T7755] netlink: 220 bytes leftover after parsing attributes in process `syz.1.477'. [ 115.114190][ T7755] syzkaller0: entered promiscuous mode [ 115.122010][ T7755] syzkaller0: entered allmulticast mode [ 115.190991][ T7763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.480'. [ 115.377132][ T7769] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 115.813915][ T7793] Bluetooth: MGMT ver 1.23 [ 115.992990][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'. [ 116.576990][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 116.578413][ T7837] netlink: 'syz.0.501': attribute type 16 has an invalid length. [ 116.595148][ T7845] netlink: 'syz.3.503': attribute type 21 has an invalid length. [ 116.608473][ T7837] netlink: 'syz.0.501': attribute type 17 has an invalid length. [ 116.639546][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.651982][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.690920][ T7852] netlink: 'syz.3.503': attribute type 1 has an invalid length. [ 116.858314][ T7837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.092838][ T7878] tipc: Started in network mode [ 117.098175][ T7878] tipc: Node identity feb33596086e, cluster identity 4711 [ 117.106394][ T7878] tipc: Enabled bearer , priority 0 [ 117.180615][ T7878] tipc: Disabling bearer [ 117.394546][ T7894] syzkaller0: entered promiscuous mode [ 117.400048][ T7894] syzkaller0: entered allmulticast mode [ 117.500311][ T7899] tipc: New replicast peer: 255.255.255.255 [ 117.524125][ T7899] tipc: Enabled bearer , priority 6 [ 117.576994][ T7901] netlink: 'syz.4.516': attribute type 3 has an invalid length. [ 117.594177][ T7901] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 117.777094][ T7917] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 117.887664][ T7922] bond4: (slave bridge2): making interface the new active one [ 117.896242][ T7922] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 118.223025][ T7896] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 118.447841][ T7903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.530505][ T5835] tipc: Node number set to 4141692310 [ 118.637883][ T7955] Bluetooth: MGMT ver 1.23 [ 118.642348][ T7955] Bluetooth: hci1: too big key_count value 32778 [ 118.658292][ T7960] netlink: 'syz.3.526': attribute type 11 has an invalid length. [ 118.707403][ T7960] tipc: Enabling not permitted [ 118.722943][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 118.888694][ T7974] __nla_validate_parse: 10 callbacks suppressed [ 118.888711][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 118.906121][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 118.932223][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 118.954942][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 118.959785][ T7978] netlink: 14 bytes leftover after parsing attributes in process `syz.0.535'. [ 118.965493][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.978779][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 118.999704][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 119.008794][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.008865][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.008898][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.008973][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 119.221778][ T7988] netlink: 144 bytes leftover after parsing attributes in process `syz.0.538'. [ 119.222689][ T7991] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 119.239562][ T7988] netlink: 666 bytes leftover after parsing attributes in process `syz.0.538'. [ 119.704942][ T8020] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 119.876331][ T8028] sctp: [Deprecated]: syz.3.548 (pid 8028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.876331][ T8028] Use struct sctp_sack_info instead [ 119.987595][ T8035] !: renamed from bond_slave_0 (while UP) [ 120.008804][ T8034] bridge3: port 1(veth3) entered blocking state [ 120.017801][ T8034] bridge3: port 1(veth3) entered disabled state [ 120.025165][ T8034] veth3: entered allmulticast mode [ 120.031560][ T8034] veth3: entered promiscuous mode [ 120.060872][ T8034] bridge3: port 2(veth5) entered blocking state [ 120.067572][ T8034] bridge3: port 2(veth5) entered disabled state [ 120.074054][ T8034] veth5: entered allmulticast mode [ 120.081212][ T8034] veth5: entered promiscuous mode [ 120.196610][ T8043] validate_nla: 4 callbacks suppressed [ 120.196622][ T8043] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 120.225973][ T8043] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.245026][ T8043] veth7: entered promiscuous mode [ 120.252958][ T8043] bond5: (slave veth7): Enslaving as an active interface with a down link [ 120.318134][ T8044] veth9: entered promiscuous mode [ 120.335769][ T8043] veth11: entered promiscuous mode [ 120.343035][ T8044] bond5: entered allmulticast mode [ 120.562852][ T8056] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 120.575151][ T8056] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.582940][ T8056] gretap2: entered promiscuous mode [ 120.588420][ T8056] gretap2: entered allmulticast mode [ 120.810421][ T8067] bond_slave_0: mtu less than device minimum [ 121.445849][ T8097] 8021q: VLANs not supported on ip_vti0 [ 121.452017][ T8097] 8021q: VLANs not supported on ip_vti0 [ 127.487764][ T8112] __nla_validate_parse: 3 callbacks suppressed [ 127.487781][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.580'. [ 127.743446][ T8131] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 127.867575][ T8146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.579'. [ 127.907424][ T8146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.579'. [ 127.944216][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 127.954545][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 127.978639][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 127.994586][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 128.006209][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 128.086876][ T8155] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 128.113706][ T8155] netlink: 1 bytes leftover after parsing attributes in process `syz.4.586'. [ 128.194576][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 128.286500][ T8162] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 128.981175][ T8189] netlink: 'syz.1.596': attribute type 3 has an invalid length. [ 129.011302][ T8189] netlink: 'syz.1.596': attribute type 3 has an invalid length. [ 129.019441][ T8197] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 129.228820][ T8208] tipc: Enabled bearer , priority 0 [ 129.269929][ T8208] syzkaller0: entered promiscuous mode [ 129.290368][ T8208] syzkaller0: entered allmulticast mode [ 129.519944][ T8220] tipc: Resetting bearer [ 129.544920][ T8205] tipc: Resetting bearer [ 129.786054][ T8205] tipc: Disabling bearer [ 130.089043][ T8239] openvswitch: netlink: Missing key (keys=40, expected=80) [ 130.661708][ T8251] veth0: entered allmulticast mode [ 130.907984][ T8282] : renamed from hsr0 (while UP) [ 131.236229][ T8292] bond3: entered promiscuous mode [ 131.262746][ T8292] bond3: entered allmulticast mode [ 131.269769][ T8298] IPVS: persistence engine module ip_vs_pe_ not found [ 131.278040][ T8292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.290574][ T8301] bond0: option ad_select: unable to set because the bond device is up [ 131.538400][ T8322] batadv_slave_1: entered promiscuous mode [ 131.593858][ T8316] batadv_slave_1: left promiscuous mode [ 131.625287][ T8328] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 131.661354][ T8329] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 131.742559][ T8328] bond1: entered promiscuous mode [ 131.765309][ T8328] bond1: entered allmulticast mode [ 131.770905][ T8328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.788474][ T8329] team0: Port device dummy0 added [ 131.825222][ T8331] macvlan2: entered promiscuous mode [ 131.831398][ T8331] macvlan2: entered allmulticast mode [ 131.843892][ T8331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.908016][ T8339] bridge2: entered promiscuous mode [ 131.918549][ T8339] bridge2: entered allmulticast mode [ 131.927821][ T8339] team0: Port device bridge2 added [ 131.962560][ T8346] bridge0: port 3(team0) entered blocking state [ 131.969504][ T8346] bridge0: port 3(team0) entered disabled state [ 131.978009][ T8346] team0: entered allmulticast mode [ 131.996708][ T8346] team_slave_0: entered allmulticast mode [ 132.002469][ T8346] team_slave_1: entered allmulticast mode [ 132.026400][ T8346] team0: entered promiscuous mode [ 132.041587][ T8346] team_slave_0: entered promiscuous mode [ 132.055003][ T8346] team_slave_1: entered promiscuous mode [ 132.061847][ T8346] bridge0: port 3(team0) entered blocking state [ 132.068451][ T8346] bridge0: port 3(team0) entered forwarding state [ 132.549706][ T8386] __nla_validate_parse: 5 callbacks suppressed [ 132.549722][ T8386] netlink: 52 bytes leftover after parsing attributes in process `syz.0.654'. [ 132.718692][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 132.741006][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.748782][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.765354][ T8394] tipc: Started in network mode [ 132.773233][ T8394] tipc: Node identity 86a866a6cd99, cluster identity 4711 [ 132.787939][ T8394] tipc: Enabled bearer , priority 0 [ 132.821977][ T8394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.846437][ T8394] tipc: Resetting bearer [ 132.965233][ T8403] geneve2: entered promiscuous mode [ 132.970632][ T8403] geneve2: entered allmulticast mode [ 132.978595][ T8393] tipc: Resetting bearer [ 133.011295][ T8393] tipc: Disabling bearer [ 133.042113][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.662'. [ 133.124700][ T8410] netlink: 'syz.0.664': attribute type 21 has an invalid length. [ 133.143347][ T8410] netlink: 152 bytes leftover after parsing attributes in process `syz.0.664'. [ 133.158300][ T8412] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 133.178542][ T8412] netlink: 'syz.1.663': attribute type 7 has an invalid length. [ 133.188547][ T8412] netlink: 'syz.1.663': attribute type 8 has an invalid length. [ 133.197223][ T8412] netlink: 208 bytes leftover after parsing attributes in process `syz.1.663'. [ 133.208144][ T8412] NCSI netlink: No device for ifindex 65584 [ 133.361674][ T8424] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 133.397896][ T8424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.449415][ T8424] bond1: (slave geneve2): making interface the new active one [ 133.460677][ T8424] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 133.469630][ T6829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.479421][ T6829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.490094][ T6829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.500306][ T6829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.515315][ T8427] xt_hashlimit: size too large, truncated to 1048576 [ 133.622466][ T8424] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 133.642104][ T8424] bond2 (unregistering): Released all slaves [ 134.251644][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.680'. [ 134.295338][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.680'. [ 134.314864][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.680'. [ 134.345471][ T8465] netlink: 40 bytes leftover after parsing attributes in process `syz.4.680'. [ 134.364177][ T8469] netlink: 44 bytes leftover after parsing attributes in process `syz.1.681'. [ 134.435015][ T8473] netlink: 'syz.2.682': attribute type 5 has an invalid length. [ 134.483540][ T8473] geneve3: entered promiscuous mode [ 134.504784][ T8473] geneve3: entered allmulticast mode [ 134.523439][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 134.539202][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 134.557409][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 134.572520][ T8481] netlink: 'syz.1.685': attribute type 18 has an invalid length. [ 134.605684][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 134.614746][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.633470][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.652480][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.686792][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.978394][ T8492] sch_fq: defrate 0 ignored. [ 135.229991][ T8511] netlink: 'syz.1.695': attribute type 11 has an invalid length. [ 135.906761][ T8534] xt_hashlimit: overflow, rate too high: 0 [ 135.964715][ T8537] x_tables: duplicate underflow at hook 4 [ 136.505000][ T8568] No such timeout policy "syz0" [ 137.496166][ T8617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.513936][ T8617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.562957][ T8622] 8021q: VLANs not supported on ip6tnl0 [ 137.570615][ T8627] __nla_validate_parse: 12 callbacks suppressed [ 137.570628][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 137.622030][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 137.631188][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 137.686410][ T8617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.705452][ T8617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.809653][ T8617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.821398][ T8617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.989826][ T8617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.000856][ T8617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.090461][ T8657] netlink: 256 bytes leftover after parsing attributes in process `syz.0.739'. [ 138.254425][ T1118] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.269725][ T1118] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.334648][ T1097] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.366555][ T1097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.422505][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 138.455755][ T1118] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.484083][ T1118] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.515448][ T8685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.746'. [ 138.699556][ T8685] bond2: (slave gre0): Device is not bonding slave [ 138.708174][ T8685] bond2: option active_slave: invalid value (gre0) [ 138.723540][ T8685] bond2 (unregistering): Released all slaves [ 138.760435][ T79] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.780831][ T79] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.807472][ T8688] netlink: 56 bytes leftover after parsing attributes in process `syz.4.746'. [ 138.872426][ T8688] netlink: 56 bytes leftover after parsing attributes in process `syz.4.746'. [ 138.924853][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.959871][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 139.768341][ T8746] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 139.791717][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.764'. [ 139.827346][ T8746] dummy0: entered promiscuous mode [ 139.852807][ T8746] team0: Port device dummy0 removed [ 139.862903][ T8746] bridge0: port 3(dummy0) entered blocking state [ 139.871964][ T8746] bridge0: port 3(dummy0) entered disabled state [ 139.879454][ T8746] dummy0: entered allmulticast mode [ 140.758392][ T8803] netlink: 'syz.4.786': attribute type 23 has an invalid length. [ 140.791369][ T8805] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 140.851645][ T8805] bond4: (slave veth7): Enslaving as an active interface with a down link [ 140.866798][ T8806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.036147][ T8855] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 142.046007][ T8855] netlink: 'syz.3.801': attribute type 3 has an invalid length. [ 142.054078][ T8855] netlink: 'syz.3.801': attribute type 7 has an invalid length. [ 142.061900][ T8855] netlink: 'syz.3.801': attribute type 8 has an invalid length. [ 142.070941][ T8855] NCSI netlink: No device for ifindex 131092 [ 142.124470][ T8856] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 142.176203][ T8862] C: renamed from lo [ 142.218038][ T8860] tipc: Enabled bearer , priority 0 [ 142.360544][ T8876] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.386631][ T8860] syzkaller0: entered promiscuous mode [ 142.415281][ T8860] syzkaller0: entered allmulticast mode [ 142.476883][ T8860] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 143.628408][ T8872] syzkaller1: entered promiscuous mode [ 143.638061][ T8872] syzkaller1: entered allmulticast mode [ 143.649878][ T8859] tipc: Resetting bearer [ 143.694477][ T8859] tipc: Disabling bearer [ 143.785486][ T7391] tipc: Node number set to 4198763480 [ 143.888910][ T8903] netlink: 'syz.0.815': attribute type 8 has an invalid length. [ 143.970540][ T8903] netlink: 'syz.0.815': attribute type 8 has an invalid length. [ 144.023163][ T8912] lo: entered allmulticast mode [ 144.036958][ T8905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.075794][ T8912] lo: left allmulticast mode [ 144.239965][ T8929] __nla_validate_parse: 11 callbacks suppressed [ 144.239982][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 144.378918][ T8935] netlink: 'syz.0.824': attribute type 12 has an invalid length. [ 144.389864][ T8935] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.824'. [ 144.408599][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 144.420914][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 144.474903][ T8940] bond2: entered promiscuous mode [ 144.479965][ T8940] bond2: entered allmulticast mode [ 144.485878][ T8940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.511035][ T8945] syz_tun: entered allmulticast mode [ 144.550180][ T8944] syz_tun: left allmulticast mode [ 144.857567][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 144.896871][ T8968] netlink: 1 bytes leftover after parsing attributes in process `syz.4.836'. [ 144.924327][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 145.071132][ T8984] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.255917][ T8992] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.842'. [ 145.266849][ T8992] syzkaller1: entered promiscuous mode [ 145.272328][ T8992] syzkaller1: entered allmulticast mode [ 145.368308][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 145.498541][ T9004] dvmrp0: entered allmulticast mode [ 145.504958][ T9003] lo: entered promiscuous mode [ 145.510118][ T9003] lo: entered allmulticast mode [ 145.517188][ T9003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.609587][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 145.627008][ T9012] dummy0: left allmulticast mode [ 145.633739][ T9012] bridge0: port 3(dummy0) entered disabled state [ 145.667944][ T9012] bridge_slave_1: left allmulticast mode [ 145.677065][ T9012] bridge_slave_1: left promiscuous mode [ 145.684740][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.696047][ T9012] bridge_slave_0: left allmulticast mode [ 145.701693][ T9012] bridge_slave_0: left promiscuous mode [ 145.728354][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.948205][ T9035] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 145.959345][ T9035] netlink: 'syz.4.856': attribute type 2 has an invalid length. [ 145.995668][ T9035] vlan2: entered promiscuous mode [ 146.000988][ T9035] geneve1: entered promiscuous mode [ 146.007444][ T9035] vlan2: entered allmulticast mode [ 146.017220][ T9035] geneve1: entered allmulticast mode [ 146.171858][ T9051] sctp: [Deprecated]: syz.4.859 (pid 9051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.171858][ T9051] Use struct sctp_sack_info instead [ 146.233806][ T9058] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 146.332956][ T9069] netlink: 'syz.4.863': attribute type 178 has an invalid length. [ 146.487175][ T9077] sit1: entered promiscuous mode [ 146.492425][ T9077] sit1: entered allmulticast mode [ 146.640208][ T9089] vlan3: entered promiscuous mode [ 146.648395][ T9089] vlan3: entered allmulticast mode [ 146.656476][ T9089] hsr_slave_1: entered allmulticast mode [ 146.900708][ T9099] bridge0: port 3(vlan2) entered blocking state [ 146.908185][ T9099] bridge0: port 3(vlan2) entered disabled state [ 146.914848][ T9099] vlan2: entered allmulticast mode [ 146.923132][ T9099] bridge0: entered allmulticast mode [ 146.930584][ T9099] vlan2: left allmulticast mode [ 146.935606][ T9099] bridge0: left allmulticast mode [ 146.999797][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.337883][ T9125] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 148.049289][ T9175] bridge_slave_0: left allmulticast mode [ 148.055431][ T9175] bridge_slave_0: left promiscuous mode [ 148.061854][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.159071][ T9175] bridge_slave_1: left allmulticast mode [ 148.176749][ T9175] bridge_slave_1: left promiscuous mode [ 148.182601][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.258446][ T9175] bond0: (slave bond_slave_0): Releasing backup interface [ 148.285330][ T9175] bond0: (slave bond_slave_1): Releasing backup interface [ 148.310168][ T9190] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 148.324432][ T9175] team0: Port device team_slave_0 removed [ 148.345943][ T9175] team0: Port device team_slave_1 removed [ 148.356896][ T9175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.361615][ T9195] Bluetooth: hci4: Opcode 0x080f failed: -4 [ 148.376546][ T9175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.395888][ T9175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.659362][ T9214] syzkaller0: entered promiscuous mode [ 148.682929][ T9214] syzkaller0: entered allmulticast mode [ 148.719525][ T9221] 0: reclassify loop, rule prio 0, protocol 800 [ 149.082164][ T9255] netlink: 'syz.4.912': attribute type 6 has an invalid length. [ 149.121510][ T9258] FAULT_INJECTION: forcing a failure. [ 149.121510][ T9258] name failslab, interval 1, probability 0, space 0, times 1 [ 149.144610][ T9258] CPU: 0 UID: 0 PID: 9258 Comm: syz.3.917 Not tainted syzkaller #0 PREEMPT(full) [ 149.144633][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.144647][ T9258] Call Trace: [ 149.144654][ T9258] [ 149.144662][ T9258] dump_stack_lvl+0x189/0x250 [ 149.144688][ T9258] ? __pfx____ratelimit+0x10/0x10 [ 149.144711][ T9258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.144732][ T9258] ? __pfx__printk+0x10/0x10 [ 149.144756][ T9258] ? __pfx___might_resched+0x10/0x10 [ 149.144774][ T9258] ? fs_reclaim_acquire+0x7d/0x100 [ 149.144796][ T9258] should_fail_ex+0x414/0x560 [ 149.144824][ T9258] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 149.144847][ T9258] should_failslab+0xa8/0x100 [ 149.144867][ T9258] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 149.144888][ T9258] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 149.144910][ T9258] ? alloc_inode+0x6a/0x1b0 [ 149.144932][ T9258] ? __pfx_simple_start_creating+0x10/0x10 [ 149.144953][ T9258] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 149.144974][ T9258] alloc_inode+0x6a/0x1b0 [ 149.144999][ T9258] new_inode+0x22/0x170 [ 149.145020][ T9258] __debugfs_create_file+0x14d/0x4f0 [ 149.145049][ T9258] debugfs_create_file_full+0x3f/0x60 [ 149.145077][ T9258] ref_tracker_dir_debugfs+0x14e/0x270 [ 149.145094][ T9258] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 149.145140][ T9258] ? trace_kmalloc+0x1f/0xd0 [ 149.145159][ T9258] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 149.145187][ T9258] ? __raw_spin_lock_init+0x45/0x100 [ 149.145219][ T9258] alloc_netdev_mqs+0x272/0x11b0 [ 149.145238][ T9258] ? __pfx_vxlan_setup+0x10/0x10 [ 149.145266][ T9258] rtnl_create_link+0x31f/0xd10 [ 149.145295][ T9258] rtnl_newlink_create+0x25c/0xb00 [ 149.145318][ T9258] ? __lock_acquire+0xab9/0xd20 [ 149.145341][ T9258] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 149.145362][ T9258] ? __pfx___mutex_lock+0x10/0x10 [ 149.145394][ T9258] ? full_name_hash+0x92/0xe0 [ 149.145420][ T9258] rtnl_newlink+0x16e4/0x1c80 [ 149.145462][ T9258] ? __pfx_rtnl_newlink+0x10/0x10 [ 149.145510][ T9258] ? __pfx___schedule+0x10/0x10 [ 149.145531][ T9258] ? kasan_quarantine_put+0xdd/0x220 [ 149.145564][ T9258] ? kmem_cache_free+0x19b/0x690 [ 149.145591][ T9258] ? rcu_is_watching+0x15/0xb0 [ 149.145610][ T9258] ? trace_irq_disable+0x37/0x110 [ 149.145626][ T9258] ? preempt_schedule_irq+0xde/0x150 [ 149.145647][ T9258] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 149.145672][ T9258] ? irqentry_exit+0x74/0x90 [ 149.145692][ T9258] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.145696][ T9255] netlink: 'syz.4.912': attribute type 5 has an invalid length. [ 149.145726][ T9258] ? __lock_acquire+0xab9/0xd20 [ 149.145761][ T9258] ? __pfx_rtnl_newlink+0x10/0x10 [ 149.145782][ T9258] rtnetlink_rcv_msg+0x7cf/0xb70 [ 149.145809][ T9258] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 149.145832][ T9258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.145852][ T9258] ? ref_tracker_free+0x63a/0x7d0 [ 149.145868][ T9258] ? __asan_memcpy+0x40/0x70 [ 149.145887][ T9258] ? __pfx_ref_tracker_free+0x10/0x10 [ 149.145914][ T9258] netlink_rcv_skb+0x208/0x470 [ 149.145932][ T9258] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 149.145956][ T9258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.145983][ T9258] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.146007][ T9258] netlink_unicast+0x82f/0x9e0 [ 149.146038][ T9258] ? __pfx_netlink_unicast+0x10/0x10 [ 149.146062][ T9258] ? netlink_sendmsg+0x642/0xb30 [ 149.146075][ T9258] ? skb_put+0x11b/0x210 [ 149.146095][ T9258] netlink_sendmsg+0x805/0xb30 [ 149.146121][ T9258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.146141][ T9258] ? aa_sock_msg_perm+0xf1/0x1d0 [ 149.146166][ T9258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.146182][ T9258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.146199][ T9258] __sock_sendmsg+0x21c/0x270 [ 149.146245][ T9258] ____sys_sendmsg+0x52d/0x830 [ 149.146268][ T9258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.146296][ T9258] ? import_iovec+0x74/0xa0 [ 149.146320][ T9258] ___sys_sendmsg+0x21f/0x2a0 [ 149.146340][ T9258] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.146403][ T9258] ? __might_fault+0xb0/0x130 [ 149.146430][ T9258] __sys_sendmmsg+0x227/0x430 [ 149.146454][ T9258] ? __pfx___sys_sendmmsg+0x10/0x10 [ 149.146481][ T9258] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.146522][ T9258] ? ksys_write+0x22a/0x250 [ 149.146547][ T9258] ? __pfx_ksys_write+0x10/0x10 [ 149.146573][ T9258] __x64_sys_sendmmsg+0xa0/0xc0 [ 149.146592][ T9258] do_syscall_64+0xfa/0xfa0 [ 149.146613][ T9258] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.146634][ T9258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.146650][ T9258] ? clear_bhb_loop+0x60/0xb0 [ 149.146669][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.146685][ T9258] RIP: 0033:0x7f8eda18f6c9 [ 149.146700][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.146720][ T9258] RSP: 002b:00007f8edaf91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 149.146738][ T9258] RAX: ffffffffffffffda RBX: 00007f8eda3e5fa0 RCX: 00007f8eda18f6c9 [ 149.146749][ T9258] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 149.146760][ T9258] RBP: 00007f8edaf91090 R08: 0000000000000000 R09: 0000000000000000 [ 149.146769][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.146778][ T9258] R13: 00007f8eda3e6038 R14: 00007f8eda3e5fa0 R15: 00007ffdb3f83228 [ 149.146810][ T9258] [ 149.146887][ T9258] debugfs: out of free dentries, can not create file 'netdev@ffff888053bcc618' [ 149.584918][ T9277] __nla_validate_parse: 21 callbacks suppressed [ 149.584942][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 149.648928][ T9278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.922'. [ 149.755233][ T9275] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.766738][ T9275] syzkaller1: Refused to change device type [ 149.965070][ T9290] netlink: 'syz.2.926': attribute type 11 has an invalid length. [ 150.020045][ T9295] syzkaller0: entered promiscuous mode [ 150.026789][ T9295] syzkaller0: entered allmulticast mode [ 150.092222][ T9302] SET target dimension over the limit! [ 150.158203][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.927'. [ 150.417967][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 150.448477][ T9329] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 150.581956][ T9320] veth9: entered promiscuous mode [ 150.690920][ T9345] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 150.706767][ T9345] bond6 (unregistering): Released all slaves [ 150.771038][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.944'. [ 150.821561][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 150.866487][ T9351] Cannot find add_set index 1 as target [ 150.894470][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 151.158499][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 151.405705][ T9390] netlink: 'syz.0.955': attribute type 2 has an invalid length. [ 151.425072][ T9390] netlink: 119 bytes leftover after parsing attributes in process `syz.0.955'. [ 151.544897][ T9402] netlink: 108 bytes leftover after parsing attributes in process `syz.0.958'. [ 151.558169][ T9398] syz.2.956: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 151.577896][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.2.956 Not tainted syzkaller #0 PREEMPT(full) [ 151.577918][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.577927][ T9398] Call Trace: [ 151.577934][ T9398] [ 151.577941][ T9398] dump_stack_lvl+0x189/0x250 [ 151.577971][ T9398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.577992][ T9398] ? __pfx__printk+0x10/0x10 [ 151.578011][ T9398] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 151.578032][ T9398] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 151.578055][ T9398] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 151.578079][ T9398] warn_alloc+0x214/0x310 [ 151.578108][ T9398] ? __pfx_warn_alloc+0x10/0x10 [ 151.578141][ T9398] ? __get_vm_area_node+0x28f/0x300 [ 151.578164][ T9398] ? hash_netnet_create+0x741/0x1440 [ 151.578190][ T9398] __vmalloc_node_range_noprof+0x690/0x12d0 [ 151.578211][ T9398] ? do_syscall_64+0xfa/0xfa0 [ 151.578257][ T9398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.578279][ T9398] ? hash_netnet_create+0x741/0x1440 [ 151.578306][ T9398] ? rcu_is_watching+0x15/0xb0 [ 151.578325][ T9398] ? hash_netnet_create+0x741/0x1440 [ 151.578347][ T9398] __kvmalloc_node_noprof+0x674/0x910 [ 151.578370][ T9398] ? hash_netnet_create+0x741/0x1440 [ 151.578391][ T9398] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 151.578411][ T9398] ? hash_netnet_create+0x6d5/0x1440 [ 151.578440][ T9398] hash_netnet_create+0x741/0x1440 [ 151.578463][ T9398] ? __lock_acquire+0xab9/0xd20 [ 151.578493][ T9398] ? __pfx_hash_netnet_create+0x10/0x10 [ 151.578520][ T9398] ? __nla_parse+0x40/0x60 [ 151.578537][ T9398] ? __pfx_hash_netnet_create+0x10/0x10 [ 151.578561][ T9398] ip_set_create+0xa97/0x1940 [ 151.578584][ T9398] ? ip_set_create+0x4a2/0x1940 [ 151.578618][ T9398] ? __pfx_ip_set_create+0x10/0x10 [ 151.578673][ T9398] nfnetlink_rcv_msg+0xb4d/0x1130 [ 151.578694][ T9398] ? __lock_acquire+0xab9/0xd20 [ 151.578707][ T9398] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 151.578746][ T9398] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 151.578792][ T9398] ? is_bpf_text_address+0x26/0x2b0 [ 151.578814][ T9398] netlink_rcv_skb+0x208/0x470 [ 151.578827][ T9398] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 151.578845][ T9398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.578866][ T9398] ? bpf_lsm_capable+0x9/0x20 [ 151.578880][ T9398] ? security_capable+0x7e/0x2e0 [ 151.578903][ T9398] nfnetlink_rcv+0x282/0x2590 [ 151.578922][ T9398] ? is_bpf_text_address+0x26/0x2b0 [ 151.578941][ T9398] ? __kernel_text_address+0xd/0x40 [ 151.578958][ T9398] ? unwind_get_return_address+0x4d/0x90 [ 151.578973][ T9398] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 151.578991][ T9398] ? arch_stack_walk+0xfc/0x150 [ 151.579016][ T9398] ? stack_trace_save+0x9c/0xe0 [ 151.579031][ T9398] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 151.579047][ T9398] ? stack_depot_save_flags+0x40/0x860 [ 151.579070][ T9398] ? __lock_acquire+0xab9/0xd20 [ 151.579101][ T9398] ? __lock_acquire+0xab9/0xd20 [ 151.579122][ T9398] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.579139][ T9398] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.579157][ T9398] netlink_unicast+0x82f/0x9e0 [ 151.579181][ T9398] ? __pfx_netlink_unicast+0x10/0x10 [ 151.579200][ T9398] ? netlink_sendmsg+0x642/0xb30 [ 151.579211][ T9398] ? skb_put+0x11b/0x210 [ 151.579226][ T9398] netlink_sendmsg+0x805/0xb30 [ 151.579246][ T9398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.579261][ T9398] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.579280][ T9398] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.579292][ T9398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.579305][ T9398] __sock_sendmsg+0x21c/0x270 [ 151.579325][ T9398] ____sys_sendmsg+0x505/0x830 [ 151.579343][ T9398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.579364][ T9398] ? import_iovec+0x74/0xa0 [ 151.579383][ T9398] ___sys_sendmsg+0x21f/0x2a0 [ 151.579398][ T9398] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.579439][ T9398] ? __fget_files+0x2a/0x420 [ 151.579451][ T9398] ? __fget_files+0x3a0/0x420 [ 151.579471][ T9398] __x64_sys_sendmsg+0x19b/0x260 [ 151.579486][ T9398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.579513][ T9398] ? do_syscall_64+0xbe/0xfa0 [ 151.579533][ T9398] do_syscall_64+0xfa/0xfa0 [ 151.579549][ T9398] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.579565][ T9398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.579578][ T9398] ? clear_bhb_loop+0x60/0xb0 [ 151.579593][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.579605][ T9398] RIP: 0033:0x7f3450b8f6c9 [ 151.579617][ T9398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.579627][ T9398] RSP: 002b:00007f3451aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.579641][ T9398] RAX: ffffffffffffffda RBX: 00007f3450de6090 RCX: 00007f3450b8f6c9 [ 151.579651][ T9398] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 151.579658][ T9398] RBP: 00007f3450c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 151.579666][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.579674][ T9398] R13: 00007f3450de6128 R14: 00007f3450de6090 R15: 00007ffe06e90a28 [ 151.579701][ T9398] [ 151.579710][ T9398] Mem-Info: [ 151.724224][ T9408] netlink: 232 bytes leftover after parsing attributes in process `syz.4.961'. [ 151.746109][ T9398] active_anon:3869 inactive_anon:0 isolated_anon:0 [ 151.746109][ T9398] active_file:2948 inactive_file:39903 isolated_file:0 [ 151.746109][ T9398] unevictable:768 dirty:82 writeback:0 [ 151.746109][ T9398] slab_reclaimable:11105 slab_unreclaimable:97433 [ 151.746109][ T9398] mapped:28858 shmem:1384 pagetables:941 [ 151.746109][ T9398] sec_pagetables:0 bounce:0 [ 151.746109][ T9398] kernel_misc_reclaimable:0 [ 151.746109][ T9398] free:1327964 free_pcp:18996 free_cma:0 [ 152.134880][ T9398] Node 0 active_anon:15788kB inactive_anon:0kB active_file:11792kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119592kB dirty:324kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12476kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.174076][ T9398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.209749][ T9398] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.239889][ T9398] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 152.274294][ T9422] tipc: Enabling of bearer rejected, failed to enable media [ 152.293219][ T9398] Node 0 DMA32 free:1405124kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15640kB inactive_anon:0kB active_file:11792kB inactive_file:159412kB unevictable:1536kB writepending:324kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:56504kB local_pcp:31156kB free_cma:0kB [ 152.346483][ T9430] sctp: [Deprecated]: syz.3.966 (pid 9430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.346483][ T9430] Use struct sctp_sack_info instead [ 152.382720][ T9398] lowmem_reserve[]: 0 0 0 0 0 [ 152.401247][ T9398] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.516130][ T9435] syzkaller0: entered promiscuous mode [ 152.521668][ T9435] syzkaller0: entered allmulticast mode [ 152.542237][ T9398] lowmem_reserve[]: 0 0 0 0 0 [ 152.550186][ T9398] Node 1 Normal free:3893272kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:11264kB free_cma:0kB [ 152.551735][ T9439] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 152.584720][ T9398] lowmem_reserve[]: 0 0 0 0 0 [ 152.605216][ T9398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.629893][ T9435] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 152.635667][ T9439] netlink: 'syz.0.969': attribute type 4 has an invalid length. [ 152.642499][ T9435] team0: Port device batadv2 added [ 152.650052][ T9398] Node 0 DMA32: 1381*4kB (UME) 811*8kB (UM) 370*16kB (UM) 187*32kB (UME) 41*64kB (UME) 28*128kB (UM) 15*256kB (UME) 5*512kB (UME) 5*1024kB (UM) 8*2048kB (ME) 329*4096kB (M) = 1405612kB [ 152.669335][ T9398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.681408][ T9398] Node 1 Normal: 194*4kB (UME) 44*8kB (UME) 37*16kB (UME) 75*32kB (UME) 24*64kB (UME) 8*128kB (UME) 4*256kB (UM) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893272kB [ 152.706310][ T9398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.717208][ T9398] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.726630][ T9398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.737921][ T9398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.747533][ T9398] 44209 total pagecache pages [ 152.864767][ T9398] 0 pages in swap cache [ 152.868988][ T9398] Free swap = 124996kB [ 152.893323][ T9398] Total swap = 124996kB [ 152.897669][ T9398] 2097051 pages RAM [ 152.901495][ T9398] 0 pages HighMem/MovableOnly [ 152.932212][ T9398] 424121 pages reserved [ 152.943417][ T9398] 0 pages cma reserved [ 152.952201][ T9455] bridge_slave_0: default FDB implementation only supports local addresses [ 153.186457][ T9468] netlink: 'syz.0.978': attribute type 3 has an invalid length. [ 153.215486][ T9468] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 153.279181][ T1097] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.301817][ T1097] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.348556][ T1097] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.364198][ T1097] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.400604][ T9474] tipc: Enabling of bearer rejected, failed to enable media [ 153.545649][ T9484] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 153.553600][ T9485] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 153.601898][ T9484] bond2: (slave bridge1): making interface the new active one [ 153.610360][ T9484] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 153.624326][ T9484] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 153.631974][ T9484] netlink: 'syz.4.983': attribute type 2 has an invalid length. [ 153.694275][ T9489] syzkaller0: entered promiscuous mode [ 153.713208][ T9489] syzkaller0: entered allmulticast mode [ 154.170385][ T9526] IPVS: persistence engine module ip_vs_pe_ not found [ 155.153673][ T9529] tipc: Enabling of bearer rejected, failed to enable media [ 155.226886][ T9539] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.252309][ T9539] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.366016][ T9539] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.383370][ T9539] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.435693][ T5894] IPVS: starting estimator thread 0... [ 155.495971][ T9539] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.513307][ T9539] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.523205][ T9560] IPVS: using max 32 ests per chain, 76800 per kthread [ 155.593462][ T9539] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.638771][ T9539] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.974059][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.989415][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.063241][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.074959][ T9601] __nla_validate_parse: 10 callbacks suppressed [ 156.074975][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 156.093186][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.161787][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.175361][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.183759][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.191925][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.200508][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1013'. [ 156.221152][ T9604] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 156.297746][ T9601] veth9: entered promiscuous mode [ 156.474668][ T9624] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 156.529707][ T9629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1021'. [ 156.558583][ T9624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.605230][ T9635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1020'. [ 156.632659][ T9630] batman_adv: batadv0: Adding interface: dummy0 [ 156.663245][ T9630] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.696237][ T9630] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 156.790954][ T9644] IPVS: set_ctl: invalid protocol: 33593 127.0.0.1:20003 [ 156.791120][ T9632] syzkaller1: entered allmulticast mode [ 156.823504][ T9642] sctp: [Deprecated]: syz.4.1025 (pid 9642) Use of int in max_burst socket option. [ 156.823504][ T9642] Use struct sctp_assoc_value instead [ 156.917125][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1028'. [ 156.941556][ T9654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.960914][ T9654] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.490423][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1042'. [ 157.605390][ T9701] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 157.641787][ T9715] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 157.656766][ T9715] team0: Port device dummy0 added [ 157.917928][ T9734] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1052'. [ 158.257366][ T9752] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 158.872494][ T9774] v: renamed from vlan0 [ 159.025906][ T9788] bond0: Error: Cannot enslave bond to itself. [ 159.169027][ T9801] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1076'. [ 159.243728][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1077'. [ 159.291800][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1077'. [ 159.322234][ T9805] netlink: 'syz.2.1077': attribute type 2 has an invalid length. [ 159.375873][ T9812] netlink: 'syz.4.1080': attribute type 2 has an invalid length. [ 159.403208][ T9812] netlink: 'syz.4.1080': attribute type 8 has an invalid length. [ 159.538580][ T9826] 8021q: VLANs not supported on wg2 [ 159.578610][ T9830] IPVS: set_ctl: invalid protocol: 8 172.30.1.5:20000 [ 159.871431][ T9851] tipc: Enabled bearer , priority 0 [ 159.879239][ T9851] syzkaller0: entered promiscuous mode [ 159.887603][ T9851] syzkaller0: entered allmulticast mode [ 159.937761][ T9851] tipc: Resetting bearer [ 159.954502][ T9857] xt_CONNSECMARK: invalid mode: 0 [ 159.961011][ T9850] tipc: Resetting bearer [ 159.989102][ T9850] tipc: Disabling bearer [ 160.050373][ T9861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.082991][ T9863] x_tables: duplicate underflow at hook 1 [ 160.138438][ T9863] xt_CT: No such helper "snmp_trap" [ 160.716982][ T9911] syzkaller1: entered promiscuous mode [ 160.726336][ T9911] syzkaller1: entered allmulticast mode [ 160.745373][ T9911] netlink: 'syz.4.1108': attribute type 39 has an invalid length. [ 160.865921][ T9927] netlink: 'syz.2.1113': attribute type 7 has an invalid length. [ 160.905983][ T9927] netlink: 'syz.2.1113': attribute type 8 has an invalid length. [ 161.110767][ T9944] __nla_validate_parse: 7 callbacks suppressed [ 161.110783][ T9944] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1117'. [ 161.160851][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 161.177244][ T9950] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 161.191973][ T9950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1120'. [ 161.201606][ T9950] NCSI netlink: No device for ifindex 0 [ 161.231232][ T9960] sctp: [Deprecated]: syz.1.1122 (pid 9960) Use of int in maxseg socket option. [ 161.231232][ T9960] Use struct sctp_assoc_value instead [ 161.305117][ T9965] tipc: Enabled bearer , priority 0 [ 161.337347][ T9965] syzkaller0: entered promiscuous mode [ 161.342839][ T9965] syzkaller0: entered allmulticast mode [ 161.480544][ T9965] tipc: Resetting bearer [ 161.484568][ T9980] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 161.503400][ T9980] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1128'. [ 161.524367][ T9983] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 161.538679][ T9983] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1128'. [ 161.555881][ T9964] tipc: Resetting bearer [ 161.603745][ T9964] tipc: Disabling bearer [ 161.719838][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 161.732307][T10001] netlink: 'syz.1.1134': attribute type 2 has an invalid length. [ 161.737411][T10002] pim6reg: entered allmulticast mode [ 161.782790][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 161.807326][T10002] pim6reg: left allmulticast mode [ 161.869354][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1137'. [ 161.879604][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1137'. [ 161.914929][T10013] syzkaller0: entered promiscuous mode [ 161.920483][T10013] syzkaller0: entered allmulticast mode [ 162.351317][T10046] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1149'. [ 162.362878][T10046] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 162.382766][T10046] bridge0: port 3(dummy0) entered disabled state [ 162.389318][T10046] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.396984][T10046] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.440257][T10046] bridge0: port 3(dummy0) entered blocking state [ 162.446801][T10046] bridge0: port 3(dummy0) entered forwarding state [ 162.453620][T10046] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.460758][T10046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.468278][T10046] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.475465][T10046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.498962][T10046] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.531259][T10055] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)% ].>n6# [ 162.757860][T10075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.918441][T10086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.418198][T10105] netlink: 'syz.1.1169': attribute type 2 has an invalid length. [ 163.535493][T10112] syzkaller0: entered promiscuous mode [ 163.541794][T10112] syzkaller0: entered allmulticast mode [ 163.600699][T10116] tipc: Trying to set illegal importance in message [ 163.941164][T10138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.082746][T10142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.112436][T10142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.466538][T10168] netlink: 'syz.1.1189': attribute type 11 has an invalid length. [ 164.908076][T10195] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 164.939518][T10195] bond4 (unregistering): Released all slaves [ 164.996125][T10202] netlink: 'syz.3.1199': attribute type 10 has an invalid length. [ 165.082806][T10208] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 165.148767][T10211] netlink: 'syz.1.1198': attribute type 29 has an invalid length. [ 165.256459][T10226] netlink: 'syz.2.1204': attribute type 63 has an invalid length. [ 165.496999][T10238] bond3: entered allmulticast mode [ 165.502798][T10238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.710212][T10260] unsupported nla_type 52263 [ 165.903444][T10269] bridge1: entered promiscuous mode [ 165.912223][T10269] bridge1: entered allmulticast mode [ 165.935978][T10269] team0: Port device bridge1 added [ 165.964529][T10273] bridge0: port 1(team0) entered blocking state [ 165.973336][T10273] bridge0: port 1(team0) entered disabled state [ 165.979722][T10273] team0: entered allmulticast mode [ 165.991206][T10273] team0: entered promiscuous mode [ 166.168492][T10295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.285299][T10299] __nla_validate_parse: 14 callbacks suppressed [ 166.285316][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'. [ 166.553518][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 166.608721][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 166.685728][T10332] tipc: Enabled bearer , priority 0 [ 166.693265][T10332] syzkaller0: entered promiscuous mode [ 166.698803][T10332] syzkaller0: entered allmulticast mode [ 166.721119][T10332] tipc: Resetting bearer [ 166.757528][T10338] netlink: 'syz.2.1238': attribute type 39 has an invalid length. [ 166.867803][T10348] bridge0: Device is already in use. [ 167.009786][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 167.049049][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1242'. [ 167.058293][T10354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1242'. [ 167.068043][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 167.127431][T10366] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.1245'. [ 167.149356][T10366] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.190681][T10371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1246'. [ 167.200881][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 167.360151][T10383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.438986][T10323] tipc: Resetting bearer [ 167.553364][T10323] tipc: Disabling bearer [ 167.631755][T10401] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 167.672072][T10401] netlink: 'syz.4.1258': attribute type 4 has an invalid length. [ 167.896699][T10418] netlink: 'syz.1.1263': attribute type 15 has an invalid length. [ 167.909647][T10423] team0: No ports can be present during mode change [ 167.947057][T10417] netlink: 'syz.1.1263': attribute type 10 has an invalid length. [ 167.961081][T10426] bond0: entered promiscuous mode [ 167.971226][T10426] bond_slave_0: entered promiscuous mode [ 167.978717][T10426] bond_slave_1: entered promiscuous mode [ 168.124288][T10437] netlink: 'syz.1.1268': attribute type 5 has an invalid length. [ 168.298549][T10445] macvtap1: entered promiscuous mode [ 168.306482][T10445] vlan0: entered promiscuous mode [ 168.312821][T10445] macvtap1: entered allmulticast mode [ 168.318926][T10445] vlan0: entered allmulticast mode [ 168.324897][T10445] veth0_vlan: entered allmulticast mode [ 168.357581][T10449] macvtap2: entered promiscuous mode [ 168.363596][T10449] macvtap2: entered allmulticast mode [ 168.590506][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.597795][T10470] IPv6: NLM_F_CREATE should be set when creating new route [ 168.605054][T10470] IPv6: NLM_F_CREATE should be set when creating new route [ 168.612259][T10470] IPv6: NLM_F_CREATE should be set when creating new route [ 168.637827][T10470] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.680963][T10475] bond6: Invalid ad_actor_system MAC address. [ 168.687916][T10475] bond6: option ad_actor_system: invalid value (1) [ 168.696903][T10475] bond6 (unregistering): Released all slaves [ 168.956029][T10495] IPVS: Error connecting to the multicast addr [ 169.034398][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.799326][T10547] tipc: Enabled bearer , priority 0 [ 169.821694][T10547] syzkaller0: entered allmulticast mode [ 169.858180][T10553] netlink: 'syz.3.1303': attribute type 4 has an invalid length. [ 169.873453][T10553] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 169.907468][T10547] tipc: Resetting bearer [ 169.999838][T10545] tipc: Disabling bearer [ 170.046420][T10561] hsr_slave_0: left promiscuous mode [ 170.056686][T10561] hsr_slave_1: left promiscuous mode [ 170.235827][T10571] block nbd0: Unsupported socket: should be TCP or UNIX. [ 170.287098][T10576] netlink: 'syz.4.1312': attribute type 10 has an invalid length. [ 170.614687][T10599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.631673][T10599] bond0: (slave rose0): Enslaving as an active interface with an up link [ 170.658074][T10607] syzkaller0: entered promiscuous mode [ 170.674259][T10607] syzkaller0: entered allmulticast mode [ 171.075834][T10634] netlink: 'syz.4.1333': attribute type 2 has an invalid length. [ 171.243659][T10647] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.311118][T10654] __nla_validate_parse: 26 callbacks suppressed [ 171.311135][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 171.337990][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 171.351821][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 171.429290][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 171.758614][T10674] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1343'. [ 171.779694][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 171.791924][T10678] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 171.804866][T10678] bond4 (unregistering): Released all slaves [ 171.856336][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 172.061627][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'. [ 172.236028][T10710] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.248377][T10710] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 172.929695][T10748] validate_nla: 3 callbacks suppressed [ 172.929712][T10748] netlink: 'syz.0.1363': attribute type 9 has an invalid length. [ 172.956175][T10748] netlink: 'syz.0.1363': attribute type 6 has an invalid length. [ 173.103729][T10763] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 173.317233][T10783] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1375'. [ 173.341907][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 173.547334][T10798] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 173.694516][T10798] can: request_module (can-proto-4) failed. [ 173.786840][T10818] syzkaller0: entered promiscuous mode [ 173.801998][T10818] syzkaller0: entered allmulticast mode [ 173.960550][T10835] IPVS: length: 4096 != 8 [ 174.234376][T10863] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 174.290290][T10867] netlink: 'syz.0.1404': attribute type 11 has an invalid length. [ 174.308844][T10869] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 174.336989][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.566737][T10887] tipc: Enabled bearer , priority 0 [ 174.574640][T10887] syzkaller0: entered promiscuous mode [ 174.580122][T10887] syzkaller0: entered allmulticast mode [ 174.607422][T10887] tipc: Resetting bearer [ 174.668890][T10885] tipc: Resetting bearer [ 174.707074][T10885] tipc: Disabling bearer [ 174.982566][T10912] veth0: entered promiscuous mode [ 175.003902][T10912] veth0: left promiscuous mode [ 175.039104][T10912] geneve3: entered promiscuous mode [ 175.058022][T10912] geneve3: entered allmulticast mode [ 175.065133][ T6829] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.078393][ T6829] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.101935][ T6829] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.130808][ T6829] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.892431][T10976] rdma_op ffff8880559f29f0 conn xmit_rdma 0000000000000000 [ 176.179953][T10993] xt_cluster: node mask cannot exceed total number of nodes [ 176.229235][T10993] 8021q: VLANs not supported on ip6tnl0 [ 176.581418][T11020] __nla_validate_parse: 16 callbacks suppressed [ 176.581435][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 176.675150][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 176.741875][T11028] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 176.762767][T11028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.774455][T11028] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1451'. [ 176.814782][T11032] netlink: 'syz.1.1453': attribute type 12 has an invalid length. [ 176.822724][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1453'. [ 177.268219][T11059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.477899][T11073] netlink: 'syz.4.1466': attribute type 1 has an invalid length. [ 177.498098][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 177.528212][T11076] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1467'. [ 177.551034][T11081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1469'. [ 177.617971][T11081] bond4 (unregistering): Released all slaves [ 177.778236][T11095] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1472'. [ 177.967728][T11111] netlink: 'syz.4.1477': attribute type 2 has an invalid length. [ 178.009176][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 178.012215][T11117] netlink: 'syz.2.1479': attribute type 1 has an invalid length. [ 178.030687][T11114] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 178.038864][T11114] netlink: 'syz.1.1478': attribute type 2 has an invalid length. [ 178.340979][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 178.741578][T11159] geneve2: entered promiscuous mode [ 178.770911][T11159] geneve2: entered allmulticast mode [ 178.792369][ T79] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.809112][ T79] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.830681][ T79] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.873741][ T79] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.090795][T11190] gretap1: entered promiscuous mode [ 179.115470][T11190] gretap1: entered allmulticast mode [ 179.140105][T11177] tipc: Enabling of bearer rejected, failed to enable media [ 179.323602][T11196] bond4 (unregistering): Released all slaves [ 179.460479][T11220] netlink: 'syz.4.1508': attribute type 13 has an invalid length. [ 179.491458][T11221] netlink: 'syz.4.1508': attribute type 13 has an invalid length. [ 179.651294][T11223] syzkaller1: entered promiscuous mode [ 179.659019][T11223] syzkaller1: entered allmulticast mode [ 180.246803][T11275] netlink: 'syz.2.1526': attribute type 39 has an invalid length. [ 180.261031][T11278] netlink: 'syz.1.1527': attribute type 83 has an invalid length. [ 180.451911][T11284] syzkaller0: entered promiscuous mode [ 180.462263][T11284] syzkaller0: entered allmulticast mode [ 181.674919][T11316] team0: left allmulticast mode [ 181.679943][T11316] team_slave_0: left allmulticast mode [ 181.685557][T11316] team_slave_1: left allmulticast mode [ 181.691165][T11316] team0: left promiscuous mode [ 181.698325][T11316] team_slave_0: left promiscuous mode [ 181.717182][T11316] team_slave_1: left promiscuous mode [ 181.723099][T11316] bridge0: port 3(team0) entered disabled state [ 181.750687][T11316] bridge_slave_0: left allmulticast mode [ 181.760646][T11316] bridge_slave_0: left promiscuous mode [ 181.767354][T11316] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.797629][T11316] bridge_slave_1: left allmulticast mode [ 181.815351][T11316] bridge_slave_1: left promiscuous mode [ 181.829792][T11316] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.852154][T11316] bond0: (slave bond_slave_0): Releasing backup interface [ 181.872655][T11316] bond0: (slave bond_slave_1): Releasing backup interface [ 181.924770][T11316] team0: Port device team_slave_0 removed [ 181.959156][T11316] team0: Port device team_slave_1 removed [ 181.979182][T11316] bond3: left promiscuous mode [ 181.985102][T11316] bridge2: left promiscuous mode [ 182.008386][T11316] team0: Port device bridge2 removed [ 182.016755][T11316] gretap1: left promiscuous mode [ 182.135397][T11328] syzkaller0: entered promiscuous mode [ 182.140911][T11328] syzkaller0: entered allmulticast mode [ 182.380966][T11350] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20004 [ 182.394430][T11350] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 183.185402][T11361] __nla_validate_parse: 10 callbacks suppressed [ 183.185422][T11361] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1546'. [ 183.787190][T11379] netlink: 'syz.2.1553': attribute type 12 has an invalid length. [ 183.810223][T11381] sctp: [Deprecated]: syz.0.1554 (pid 11381) Use of int in max_burst socket option. [ 183.810223][T11381] Use struct sctp_assoc_value instead [ 183.864420][T11387] xt_policy: too many policy elements [ 183.946844][T11381] syzkaller0: entered promiscuous mode [ 183.965699][T11381] syzkaller0: entered allmulticast mode [ 183.978883][T11394] tipc: Enabled bearer , priority 0 [ 183.993610][T11393] netlink: 'syz.4.1557': attribute type 2 has an invalid length. [ 183.994325][T11394] tipc: Enabling of bearer rejected, already enabled [ 184.049131][T11394] tipc: Disabling bearer [ 184.182355][T11415] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1563'. [ 187.684266][T11452] team0: Device ip6gre1 is of different type [ 188.032465][T11489] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1585'. [ 188.052919][T11481] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 188.067048][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 188.097345][T11489] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1585'. [ 188.131078][T11489] netlink: 'syz.4.1585': attribute type 2 has an invalid length. [ 188.159236][T11502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1585'. [ 188.193168][T11489] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1585'. [ 188.355106][T11520] 8021q: VLANs not supported on ip6tnl0 [ 188.609477][T11540] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1600'. [ 188.771133][T11555] xt_hashlimit: size too large, truncated to 1048576 [ 188.934119][T11565] IPVS: set_ctl: invalid protocol: 22 172.20.20.47:20004 [ 188.943822][T11533] 8021q: VLANs not supported on ip_vti0 [ 189.186491][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 189.211434][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 189.278887][T11583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.336403][T11590] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 189.348345][T11583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.359671][T11583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.371280][T11583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.795017][T11629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.032167][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 190.087604][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1633'. [ 190.375504][T11672] tipc: Enabled bearer , priority 0 [ 190.407600][T11672] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 190.444851][T11672] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 190.508612][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 190.668794][T11690] x_tables: unsorted underflow at hook 3 [ 190.695785][T11686] dvmrp0: entered allmulticast mode [ 190.702113][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 190.711045][T11690] netlink: 'syz.4.1645': attribute type 30 has an invalid length. [ 190.742290][ T1097] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.769597][ T1097] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.778468][ T1097] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.791181][ T1097] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.869603][T11705] netem: change failed [ 191.706316][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1659'. [ 191.800331][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 191.964718][T11768] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 192.121053][T11777] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.238154][T11785] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 192.447027][T11796] netlink: 'syz.1.1674': attribute type 28 has an invalid length. [ 192.497710][T11796] netlink: 'syz.1.1674': attribute type 3 has an invalid length. [ 192.510254][T11809] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 192.585748][T11816] veth0_to_bond: entered allmulticast mode [ 192.672156][T11819] pim6reg1: entered promiscuous mode [ 192.683438][T11819] pim6reg1: entered allmulticast mode [ 193.027640][T11843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.209731][T11849] netlink: 'syz.1.1692': attribute type 32 has an invalid length. [ 193.236928][T11858] __nla_validate_parse: 9 callbacks suppressed [ 193.236945][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 193.542720][T11875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 193.607714][T11875] netlink: 'syz.2.1696': attribute type 7 has an invalid length. [ 193.622576][T11875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'. [ 194.139224][T11917] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 194.160419][T11917] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 194.181950][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193851][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.208484][T11917] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 194.260312][T11930] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1714'. [ 194.274381][T11930] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1714'. [ 194.304992][T11934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1716'. [ 194.316031][T11934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1716'. [ 194.336632][T11933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1715'. [ 194.362690][T11933] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 194.557194][T11952] tipc: Enabled bearer , priority 0 [ 194.564907][T11952] syzkaller0: entered promiscuous mode [ 194.570486][T11952] syzkaller0: entered allmulticast mode [ 194.603711][T11952] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.629193][T11961] pim6reg: entered allmulticast mode [ 194.654109][T11952] tipc: Resetting bearer [ 194.672143][T11951] tipc: Resetting bearer [ 194.695512][T11951] tipc: Disabling bearer [ 194.801633][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 195.116841][T12002] xt_hashlimit: size too large, truncated to 1048576 [ 195.167451][ T30] audit: type=1800 audit(1763154847.510:3): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 195.260477][ T30] audit: type=1804 audit(1763154847.540:4): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1735" name="/newroot/323/memory.events" dev="tmpfs" ino=1660 res=1 errno=0 [ 195.288303][ T30] audit: type=1804 audit(1763154847.550:5): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1735" name="/newroot/323/memory.events" dev="tmpfs" ino=1660 res=1 errno=0 [ 195.320321][ T30] audit: type=1800 audit(1763154847.550:6): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 195.348360][ T30] audit: type=1800 audit(1763154847.550:7): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 195.396108][ T30] audit: type=1800 audit(1763154847.550:8): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 195.419261][ T30] audit: type=1804 audit(1763154847.550:9): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1735" name="/newroot/323/memory.events" dev="tmpfs" ino=1660 res=1 errno=0 [ 195.449025][ T30] audit: type=1800 audit(1763154847.550:10): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 195.471232][ T30] audit: type=1804 audit(1763154847.550:11): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1735" name="/newroot/323/memory.events" dev="tmpfs" ino=1660 res=1 errno=0 [ 195.493844][ T30] audit: type=1800 audit(1763154847.550:12): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1735" name="memory.events" dev="tmpfs" ino=1660 res=0 errno=0 [ 195.516957][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 195.784919][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.198350][T12063] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 196.251963][T12063] bond4: (slave gretap1): making interface the new active one [ 196.253571][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 196.262195][T12063] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 196.265948][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 196.275891][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.285915][T12068] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 196.367576][T12073] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 196.618065][T12070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.637964][T12070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.828462][ T79] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.841707][ T79] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.851737][ T79] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.862580][ T79] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.876855][ T79] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.888139][ T79] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.898005][ T79] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.908331][ T79] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.926455][T12100] netlink: 'syz.4.1762': attribute type 25 has an invalid length. [ 197.140536][T12115] bridge0: port 1(vlan2) entered blocking state [ 197.147998][T12115] bridge0: port 1(vlan2) entered disabled state [ 197.156011][T12115] vlan2: entered allmulticast mode [ 197.163085][T12115] bridge0: entered allmulticast mode [ 197.171329][T12115] vlan2: left allmulticast mode [ 197.177500][T12115] bridge0: left allmulticast mode [ 197.529998][T12141] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 197.776839][T12154] pim6reg1: entered promiscuous mode [ 197.782405][T12154] pim6reg1: entered allmulticast mode [ 198.240474][T12184] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 198.273937][T12190] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 198.400455][T12193] bond5: (slave gretap2): making interface the new active one [ 198.425405][T12193] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 198.459292][T12203] __nla_validate_parse: 12 callbacks suppressed [ 198.459309][T12203] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1795'. [ 198.628319][T12221] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 198.633526][T12217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1799'. [ 199.228811][T12266] tipc: Enabling of bearer rejected, failed to enable media [ 199.384901][T12275] bond0: Caught tx_queue_len zero misconfig [ 199.485534][T12273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1816'. [ 199.502609][T12273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1816'. [ 199.622435][T12296] netlink: 'syz.1.1822': attribute type 11 has an invalid length. [ 199.868132][T12306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1823'. [ 199.971191][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 200.025819][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 200.032858][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 200.033176][T12326] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1828'. [ 200.257949][T12339] netlink: 'syz.4.1831': attribute type 11 has an invalid length. [ 200.400264][T12347] xt_l2tp: missing protocol rule (udp|l2tpip) [ 200.444999][T12350] sctp: [Deprecated]: syz.2.1835 (pid 12350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.444999][T12350] Use struct sctp_sack_info instead [ 200.454476][T12345] gre2: entered promiscuous mode [ 200.493346][T12345] gre2: entered allmulticast mode [ 200.611266][T12323] infiniband syz2: set down [ 200.617001][T12323] infiniband syz2: added vxcan1 [ 200.634755][ T5986] vxcan1 speed is unknown, defaulting to 1000 [ 200.698391][T12323] RDS/IB: syz2: added [ 200.703917][T12323] smc: adding ib device syz2 with port count 1 [ 200.710275][T12323] smc: ib device syz2 port 1 has no pnetid [ 200.719822][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 200.804674][ T5986] vxcan1 speed is unknown, defaulting to 1000 [ 201.147461][T12382] tipc: Enabled bearer , priority 0 [ 201.174018][T12374] syzkaller0: entered promiscuous mode [ 201.179519][T12374] syzkaller0: entered allmulticast mode [ 201.185531][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'. [ 201.215522][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 201.254096][T12374] tipc: Resetting bearer [ 201.267984][T12385] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 201.318835][T12385] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.337436][T12385] gretap1: entered promiscuous mode [ 201.342666][T12385] gretap1: entered allmulticast mode [ 201.393834][T12373] tipc: Resetting bearer [ 201.418862][T12373] tipc: Disabling bearer [ 201.472049][T12396] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 201.537593][T12397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1845'. [ 201.600123][T12396] bond6 (unregistering): Released all slaves [ 201.608443][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1846'. [ 201.636548][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1845'. [ 201.824285][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 201.998542][T12418] vlan2: entered allmulticast mode [ 202.015336][T12418] bridge0: entered allmulticast mode [ 202.193229][T12437] syzkaller0: entered promiscuous mode [ 202.198724][T12437] syzkaller0: entered allmulticast mode [ 202.314998][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 202.621327][T12323] vxcan1 speed is unknown, defaulting to 1000 [ 202.741821][T12460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.762914][T12461] netlink: 'syz.3.1865': attribute type 5 has an invalid length. [ 203.095934][T12475] syzkaller1: entered promiscuous mode [ 203.123630][T12475] syzkaller1: entered allmulticast mode [ 203.597083][T12499] bond5 (unregistering): Released all slaves [ 203.850575][T12527] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 203.927956][T12533] __nla_validate_parse: 12 callbacks suppressed [ 203.927973][T12533] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1886'. [ 204.397654][T12567] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1897'. [ 204.994950][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 205.569358][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1925'. [ 205.970776][T12660] nbd: must specify at least one socket [ 206.004409][T12662] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 206.059058][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 206.069758][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 206.422081][T12689] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1938'. [ 206.456550][T12689] 8021q: VLANs not supported on gre0 [ 206.547845][T12693] syzkaller0: entered promiscuous mode [ 206.575764][T12693] syzkaller0: entered allmulticast mode [ 206.586723][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 206.785452][T12713] netlink: 'syz.2.1947': attribute type 11 has an invalid length. [ 206.806636][T12713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1947'. [ 206.941158][T12724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1951'. [ 206.974082][T12727] ip6t_srh: unknown srh invflags 4000 [ 207.678660][T12772] syzkaller1: entered promiscuous mode [ 207.697534][T12772] syzkaller1: entered allmulticast mode [ 208.647157][T12849] xfrm1: entered allmulticast mode [ 208.983273][T12873] __nla_validate_parse: 11 callbacks suppressed [ 208.983291][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1998'. [ 209.001489][T12873] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1998'. [ 209.012198][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 209.021652][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 209.042347][T12881] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 209.068351][T12875] bridge0: port 3(vlan4) entered blocking state [ 209.089654][T12875] bridge0: port 3(vlan4) entered disabled state [ 209.100117][T12875] vlan4: entered allmulticast mode [ 209.105740][T12875] bridge0: entered allmulticast mode [ 209.115281][T12875] vlan4: left allmulticast mode [ 209.120141][T12875] bridge0: left allmulticast mode [ 209.176878][T12885] lo speed is unknown, defaulting to 1000 [ 209.202017][T12885] lo speed is unknown, defaulting to 1000 [ 209.215999][T12885] lo speed is unknown, defaulting to 1000 [ 209.424684][T12906] netlink: 'syz.3.2006': attribute type 7 has an invalid length. [ 209.432500][T12906] netlink: 'syz.3.2006': attribute type 8 has an invalid length. [ 209.470685][T12910] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2007'. [ 209.570793][T12909] bond5: entered promiscuous mode [ 209.585337][T12909] bond5: entered allmulticast mode [ 209.615487][T12909] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.629398][T12885] infiniband sz1: set down [ 209.635043][T12885] infiniband sz1: added lo [ 209.648267][ T7391] lo speed is unknown, defaulting to 1000 [ 209.725167][T12928] netlink: 'syz.3.2010': attribute type 2 has an invalid length. [ 209.734883][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 209.776952][T12928] netlink: 'syz.3.2010': attribute type 2 has an invalid length. [ 209.807704][T12885] RDS/IB: sz1: added [ 209.811754][T12885] smc: adding ib device sz1 with port count 1 [ 209.823420][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 209.848647][T12885] smc: ib device sz1 port 1 has no pnetid [ 209.857266][ T5894] lo speed is unknown, defaulting to 1000 [ 209.869259][T12885] lo speed is unknown, defaulting to 1000 [ 210.264529][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2023'. [ 210.341644][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 210.363724][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 210.471664][T12885] lo speed is unknown, defaulting to 1000 [ 210.778402][T12993] netlink: 'syz.2.2032': attribute type 2 has an invalid length. [ 210.827521][T12993] 9: entered promiscuous mode [ 211.035418][T12885] lo speed is unknown, defaulting to 1000 [ 211.077904][T13011] tipc: Enabling of bearer rejected, failed to enable media [ 211.337625][T13028] syzkaller0: refused to change device tx_queue_len [ 211.467853][T13036] netlink: 'syz.3.2046': attribute type 1 has an invalid length. [ 211.531083][T12885] lo speed is unknown, defaulting to 1000 [ 211.633587][T13047] FAULT_INJECTION: forcing a failure. [ 211.633587][T13047] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.634537][T13045] 8021q: VLANs not supported on ip6tnl0 [ 211.671040][T13047] CPU: 1 UID: 0 PID: 13047 Comm: syz.0.2051 Not tainted syzkaller #0 PREEMPT(full) [ 211.671064][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.671074][T13047] Call Trace: [ 211.671081][T13047] [ 211.671089][T13047] dump_stack_lvl+0x189/0x250 [ 211.671116][T13047] ? __pfx____ratelimit+0x10/0x10 [ 211.671137][T13047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.671158][T13047] ? __pfx__printk+0x10/0x10 [ 211.671175][T13047] ? __might_fault+0xb0/0x130 [ 211.671209][T13047] should_fail_ex+0x414/0x560 [ 211.671237][T13047] _copy_from_user+0x2d/0xb0 [ 211.671258][T13047] ___sys_sendmsg+0x158/0x2a0 [ 211.671279][T13047] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.671331][T13047] ? __fget_files+0x2a/0x420 [ 211.671347][T13047] ? __fget_files+0x3a0/0x420 [ 211.671377][T13047] __x64_sys_sendmsg+0x19b/0x260 [ 211.671398][T13047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.671425][T13047] ? __pfx_ksys_write+0x10/0x10 [ 211.671451][T13047] ? do_syscall_64+0xbe/0xfa0 [ 211.671476][T13047] do_syscall_64+0xfa/0xfa0 [ 211.671496][T13047] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.671518][T13047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.671535][T13047] ? clear_bhb_loop+0x60/0xb0 [ 211.671555][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.671571][T13047] RIP: 0033:0x7f5a5858f6c9 [ 211.671595][T13047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.671609][T13047] RSP: 002b:00007f5a5943f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.671634][T13047] RAX: ffffffffffffffda RBX: 00007f5a587e5fa0 RCX: 00007f5a5858f6c9 [ 211.671646][T13047] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 211.671656][T13047] RBP: 00007f5a5943f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.671667][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.671678][T13047] R13: 00007f5a587e6038 R14: 00007f5a587e5fa0 R15: 00007fff8d85f1e8 [ 211.671706][T13047] [ 211.819794][T12885] lo speed is unknown, defaulting to 1000 [ 211.976382][T13052] syzkaller0: entered promiscuous mode [ 211.990782][T13052] syzkaller0: entered allmulticast mode [ 212.187440][T13064] tipc: Enabling of bearer rejected, already enabled [ 212.510002][T13085] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 212.633232][T13089] tipc: Enabling of bearer rejected, failed to enable media [ 212.650261][T13093] netlink: 'syz.2.2067': attribute type 7 has an invalid length. [ 212.664934][T13093] netlink: 'syz.2.2067': attribute type 8 has an invalid length. [ 212.888173][T13106] netlink: 'syz.1.2071': attribute type 1 has an invalid length. [ 213.097743][T13121] syzkaller1: entered promiscuous mode [ 213.116962][T13121] syzkaller1: entered allmulticast mode [ 213.708155][T13167] netlink: 'syz.4.2087': attribute type 1 has an invalid length. [ 214.030171][T13192] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 214.752297][T13240] netlink: 'syz.0.2112': attribute type 9 has an invalid length. [ 214.806317][T13240] __nla_validate_parse: 19 callbacks suppressed [ 214.806335][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2112'. [ 215.000396][T13255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.034252][T13260] syzkaller1: entered promiscuous mode [ 215.039840][T13260] syzkaller1: entered allmulticast mode [ 215.043315][T13264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2123'. [ 215.228221][T13279] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2126'. [ 215.521292][T13304] x_tables: duplicate entry at hook 2 [ 215.607702][T13312] x_tables: unsorted underflow at hook 3 [ 215.616478][T13312] netlink: 'syz.4.2137': attribute type 4 has an invalid length. [ 215.757553][T13319] delete_channel: no stack [ 215.886210][T13328] netlink: 'syz.3.2142': attribute type 30 has an invalid length. [ 215.930488][T13328] bond6: option arp_missed_max: invalid value (0) [ 215.938670][T13328] bond6: option arp_missed_max: allowed values 1 - 255 [ 215.968394][T13328] bond6 (unregistering): Released all slaves [ 216.036736][T13334] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 216.065376][T13339] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 216.143865][T13343] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2147'. [ 216.190180][T13343] bond6 (unregistering): Released all slaves [ 216.226811][T13348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2148'. [ 216.259696][T13348] netlink: 'syz.0.2148': attribute type 7 has an invalid length. [ 216.269828][T13348] netlink: 'syz.0.2148': attribute type 8 has an invalid length. [ 216.278607][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 216.674876][T13364] vlan3: entered promiscuous mode [ 216.679938][T13364] geneve1: entered promiscuous mode [ 216.681231][T13380] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2160'. [ 216.744579][T13364] vlan3: entered allmulticast mode [ 216.772161][T13364] geneve1: entered allmulticast mode [ 217.072388][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2164'. [ 217.152814][T13398] IPv6: NLM_F_REPLACE set, but no existing node found! [ 217.381370][T13412] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2167'. [ 217.382237][T13409] vti0: entered allmulticast mode [ 217.393499][T13412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2167'. [ 217.433566][T13412] sctp: [Deprecated]: syz.0.2167 (pid 13412) Use of int in max_burst socket option deprecated. [ 217.433566][T13412] Use struct sctp_assoc_value instead [ 217.493941][T13414] bond6: entered promiscuous mode [ 217.498996][T13414] bond6: entered allmulticast mode [ 217.504645][T13414] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.707858][T13430] veth1_to_bond: entered allmulticast mode [ 217.781445][T13430] veth1_to_bond (unregistering): left allmulticast mode [ 218.115795][T13464] bridge_slave_1: left allmulticast mode [ 218.121469][T13464] bridge_slave_1: left promiscuous mode [ 218.130219][T13464] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.146848][T13464] bridge_slave_0: left allmulticast mode [ 218.181993][T13464] bridge_slave_0: left promiscuous mode [ 218.198395][T13464] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.567112][T13492] syzkaller0: entered promiscuous mode [ 218.573014][T13492] syzkaller0: entered allmulticast mode [ 218.952933][T13521] team0: Device wireguard0 is of different type [ 219.347976][T13544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.355259][T13544] IPv6: NLM_F_CREATE should be set when creating new route [ 219.716424][T13580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.728366][T13580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.747599][T13580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.796721][T13571] syzkaller0: entered allmulticast mode [ 219.815938][T13573] __nla_validate_parse: 16 callbacks suppressed [ 219.815955][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 219.841472][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2218'. [ 219.967559][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 220.046524][T13594] syzkaller0: entered promiscuous mode [ 220.052026][T13594] syzkaller0: entered allmulticast mode [ 220.059873][T13594] veth0: entered promiscuous mode [ 220.065534][T13594] veth0: left promiscuous mode [ 220.072668][T13594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2224'. [ 220.232179][T13615] netlink: 'syz.2.2230': attribute type 5 has an invalid length. [ 220.263781][T13619] netlink: 'syz.2.2230': attribute type 5 has an invalid length. [ 220.378254][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2236'. [ 220.427279][T13626] openvswitch: netlink: Duplicate or invalid key (type 0). [ 220.449821][T13626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.673903][T13648] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 220.685991][T13648] batman_adv: batadv0: Adding interface: netdevsim0 [ 220.700462][T13648] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.727088][T13648] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 221.168433][T13681] netlink: 'syz.1.2251': attribute type 10 has an invalid length. [ 221.200434][T13681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2251'. [ 221.235145][T13688] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 221.251014][T13688] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2255'. [ 221.296570][T13688] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 221.299330][T13681] team0: Port device geneve0 added [ 221.706721][T13725] tipc: Enabling of bearer rejected, media not registered [ 221.738118][T13729] xt_socket: unknown flags 0xe4 [ 221.820329][T13731] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 221.978660][T13751] ------------[ cut here ]------------ [ 221.984481][T13751] WARNING: CPU: 0 PID: 13751 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 221.993122][T13751] Modules linked in: [ 221.997215][T13751] CPU: 0 UID: 0 PID: 13751 Comm: syz.3.2265 Not tainted syzkaller #0 PREEMPT(full) [ 222.006616][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.016712][T13751] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 222.021667][T13751] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 ab 41 0f f8 66 90 e8 a4 41 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 51 92 98 01 cc f3 0f [ 222.041321][T13751] RSP: 0018:ffffc900043e7180 EFLAGS: 00010286 [ 222.047433][T13751] RAX: 07517ddf4ab45300 RBX: ffff888052d7bc80 RCX: 07517ddf4ab45300 [ 222.055443][T13751] RDX: 0000000000000002 RSI: ffffffff8d70e04f RDI: ffffffff8bbf0760 [ 222.063460][T13751] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 222.071440][T13751] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 222.079462][T13751] R13: dffffc0000000000 R14: ffff888052d7bc80 R15: ffff888144ea1e00 [ 222.087478][T13751] FS: 00007f8edaf706c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 222.096442][T13751] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.103070][T13751] CR2: 00007f8edaf6ff98 CR3: 00000000531d2000 CR4: 00000000003526f0 [ 222.111070][T13751] Call Trace: [ 222.114382][T13751] [ 222.117329][T13751] ip_push_pending_frames+0xbe/0x150 [ 222.122635][T13751] __icmp_send+0xfc3/0x1320 [ 222.127197][T13751] ? __icmp_send+0x1b9/0x1320 [ 222.131895][T13751] ? __pfx___icmp_send+0x10/0x10 [ 222.136910][T13751] ? pskb_expand_head+0xb3a/0x1150 [ 222.142049][T13751] ip_options_compile+0x80/0xb0 [ 222.146946][T13751] ip_rcv_finish_core+0xaa2/0x1c00 [ 222.152081][T13751] ip_rcv_finish+0x14c/0x2f0 [ 222.156719][T13751] NF_HOOK+0x30c/0x3a0 [ 222.160801][T13751] ? __pfx_ip_rcv_finish+0x10/0x10 [ 222.165949][T13751] ? NF_HOOK+0x9a/0x3a0 [ 222.170118][T13751] ? __pfx_NF_HOOK+0x10/0x10 [ 222.174748][T13751] ? ip_rcv_core+0x7f7/0xd00 [ 222.179353][T13751] ? __pfx_ip_rcv_finish+0x10/0x10 [ 222.184525][T13751] ? __pfx_ip_rcv+0x10/0x10 [ 222.189037][T13751] __netif_receive_skb+0x143/0x380 [ 222.194194][T13751] ? read_tsc+0x9/0x20 [ 222.196524][T13763] xt_CT: No such helper "snmp_trap" [ 222.198277][T13751] ? netif_receive_skb+0x115/0x790 [ 222.208625][T13751] netif_receive_skb+0x1cb/0x790 [ 222.213612][T13751] ? __pfx_netif_receive_skb+0x10/0x10 [ 222.219090][T13751] ? tun_rx_batched+0x160/0x730 [ 222.223975][T13751] tun_rx_batched+0x1b9/0x730 [ 222.228671][T13751] ? __lock_acquire+0xab9/0xd20 [ 222.233565][T13751] ? __pfx_tun_rx_batched+0x10/0x10 [ 222.238791][T13751] ? tun_get_user+0x272f/0x3e90 [ 222.243696][T13751] tun_get_user+0x2b65/0x3e90 [ 222.248387][T13751] ? tun_get_user+0x6f6/0x3e90 [ 222.253199][T13751] ? tun_get_user+0x272f/0x3e90 [ 222.258069][T13751] ? aa_file_perm+0x44d/0x1550 [ 222.262837][T13751] ? __pfx_tun_get_user+0x10/0x10 [ 222.267899][T13751] ? __futex_wait+0x34a/0x3d0 [ 222.272597][T13751] ? __pfx___futex_wait+0x10/0x10 [ 222.277660][T13751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 222.283597][T13751] ? ref_tracker_alloc+0x318/0x460 [ 222.288712][T13751] ? __lock_acquire+0xab9/0xd20 [ 222.293597][T13751] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 222.299070][T13751] ? tun_get+0x1c/0x2f0 [ 222.303269][T13751] ? tun_get+0x1c/0x2f0 [ 222.307455][T13751] ? tun_get+0x1c/0x2f0 [ 222.311629][T13751] tun_chr_write_iter+0x113/0x200 [ 222.316693][T13751] vfs_write+0x5c9/0xb30 [ 222.320969][T13751] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 222.326558][T13751] ? __pfx_vfs_write+0x10/0x10 [ 222.331386][T13751] ? __fget_files+0x2a/0x420 [ 222.335856][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 222.336017][T13751] ksys_write+0x145/0x250 [ 222.349176][T13751] ? __pfx_ksys_write+0x10/0x10 [ 222.354058][T13751] ? do_syscall_64+0xbe/0xfa0 [ 222.358729][T13751] do_syscall_64+0xfa/0xfa0 [ 222.363238][T13751] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.368427][T13751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.374498][T13751] ? clear_bhb_loop+0x60/0xb0 [ 222.379161][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.385059][T13751] RIP: 0033:0x7f8eda18e17f [ 222.387733][T13771] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.389461][T13751] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 222.389481][T13751] RSP: 002b:00007f8edaf70000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 222.423757][T13751] RAX: ffffffffffffffda RBX: 00007f8eda3e6090 RCX: 00007f8eda18e17f [ 222.431736][T13751] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 222.439720][T13751] RBP: 00007f8eda211f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.447728][T13751] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 222.455708][T13751] R13: 00007f8eda3e6128 R14: 00007f8eda3e6090 R15: 00007ffdb3f83228 [ 222.463719][T13751] [ 222.466739][T13751] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.474001][T13751] CPU: 0 UID: 0 PID: 13751 Comm: syz.3.2265 Not tainted syzkaller #0 PREEMPT(full) [ 222.483345][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.493385][T13751] Call Trace: [ 222.496664][T13751] [ 222.499580][T13751] dump_stack_lvl+0x99/0x250 [ 222.504164][T13751] ? __asan_memcpy+0x40/0x70 [ 222.508739][T13751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.513924][T13751] ? __pfx__printk+0x10/0x10 [ 222.518517][T13751] vpanic+0x237/0x6d0 [ 222.522517][T13751] ? __pfx_vpanic+0x10/0x10 [ 222.527450][T13751] panic+0xb9/0xc0 [ 222.531174][T13751] ? __pfx_panic+0x10/0x10 [ 222.535599][T13751] __warn+0x31b/0x4b0 [ 222.539567][T13751] ? ip_rt_bug+0x2c/0x110 [ 222.543883][T13751] ? ip_rt_bug+0x2c/0x110 [ 222.548200][T13751] report_bug+0x2be/0x4f0 [ 222.552518][T13751] ? ip_rt_bug+0x2c/0x110 [ 222.556848][T13751] ? ip_rt_bug+0x2c/0x110 [ 222.561166][T13751] ? ip_rt_bug+0x2e/0x110 [ 222.565483][T13751] handle_bug+0x84/0x160 [ 222.569707][T13751] exc_invalid_op+0x1a/0x50 [ 222.574191][T13751] asm_exc_invalid_op+0x1a/0x20 [ 222.579021][T13751] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 222.583941][T13751] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 ab 41 0f f8 66 90 e8 a4 41 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 51 92 98 01 cc f3 0f [ 222.603529][T13751] RSP: 0018:ffffc900043e7180 EFLAGS: 00010286 [ 222.609581][T13751] RAX: 07517ddf4ab45300 RBX: ffff888052d7bc80 RCX: 07517ddf4ab45300 [ 222.617536][T13751] RDX: 0000000000000002 RSI: ffffffff8d70e04f RDI: ffffffff8bbf0760 [ 222.625488][T13751] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 222.633448][T13751] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 222.641421][T13751] R13: dffffc0000000000 R14: ffff888052d7bc80 R15: ffff888144ea1e00 [ 222.649409][T13751] ip_push_pending_frames+0xbe/0x150 [ 222.654700][T13751] __icmp_send+0xfc3/0x1320 [ 222.659208][T13751] ? __icmp_send+0x1b9/0x1320 [ 222.663894][T13751] ? __pfx___icmp_send+0x10/0x10 [ 222.668852][T13751] ? pskb_expand_head+0xb3a/0x1150 [ 222.673956][T13751] ip_options_compile+0x80/0xb0 [ 222.678794][T13751] ip_rcv_finish_core+0xaa2/0x1c00 [ 222.683894][T13751] ip_rcv_finish+0x14c/0x2f0 [ 222.688467][T13751] NF_HOOK+0x30c/0x3a0 [ 222.692524][T13751] ? __pfx_ip_rcv_finish+0x10/0x10 [ 222.697632][T13751] ? NF_HOOK+0x9a/0x3a0 [ 222.701768][T13751] ? __pfx_NF_HOOK+0x10/0x10 [ 222.706354][T13751] ? ip_rcv_core+0x7f7/0xd00 [ 222.710931][T13751] ? __pfx_ip_rcv_finish+0x10/0x10 [ 222.716028][T13751] ? __pfx_ip_rcv+0x10/0x10 [ 222.720510][T13751] __netif_receive_skb+0x143/0x380 [ 222.725616][T13751] ? read_tsc+0x9/0x20 [ 222.729697][T13751] ? netif_receive_skb+0x115/0x790 [ 222.734812][T13751] netif_receive_skb+0x1cb/0x790 [ 222.739738][T13751] ? __pfx_netif_receive_skb+0x10/0x10 [ 222.745183][T13751] ? tun_rx_batched+0x160/0x730 [ 222.750017][T13751] tun_rx_batched+0x1b9/0x730 [ 222.754683][T13751] ? __lock_acquire+0xab9/0xd20 [ 222.759518][T13751] ? __pfx_tun_rx_batched+0x10/0x10 [ 222.764709][T13751] ? tun_get_user+0x272f/0x3e90 [ 222.769577][T13751] tun_get_user+0x2b65/0x3e90 [ 222.774253][T13751] ? tun_get_user+0x6f6/0x3e90 [ 222.779000][T13751] ? tun_get_user+0x272f/0x3e90 [ 222.783837][T13751] ? aa_file_perm+0x44d/0x1550 [ 222.788583][T13751] ? __pfx_tun_get_user+0x10/0x10 [ 222.793593][T13751] ? __futex_wait+0x34a/0x3d0 [ 222.798277][T13751] ? __pfx___futex_wait+0x10/0x10 [ 222.803280][T13751] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 222.809160][T13751] ? ref_tracker_alloc+0x318/0x460 [ 222.814253][T13751] ? __lock_acquire+0xab9/0xd20 [ 222.819096][T13751] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 222.824542][T13751] ? tun_get+0x1c/0x2f0 [ 222.828685][T13751] ? tun_get+0x1c/0x2f0 [ 222.832826][T13751] ? tun_get+0x1c/0x2f0 [ 222.836969][T13751] tun_chr_write_iter+0x113/0x200 [ 222.841979][T13751] vfs_write+0x5c9/0xb30 [ 222.846222][T13751] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 222.851762][T13751] ? __pfx_vfs_write+0x10/0x10 [ 222.856515][T13751] ? __fget_files+0x2a/0x420 [ 222.861092][T13751] ksys_write+0x145/0x250 [ 222.865408][T13751] ? __pfx_ksys_write+0x10/0x10 [ 222.870255][T13751] ? do_syscall_64+0xbe/0xfa0 [ 222.874917][T13751] do_syscall_64+0xfa/0xfa0 [ 222.879405][T13751] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.884594][T13751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.890640][T13751] ? clear_bhb_loop+0x60/0xb0 [ 222.895300][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.901174][T13751] RIP: 0033:0x7f8eda18e17f [ 222.905570][T13751] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 222.925157][T13751] RSP: 002b:00007f8edaf70000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 222.933555][T13751] RAX: ffffffffffffffda RBX: 00007f8eda3e6090 RCX: 00007f8eda18e17f [ 222.941509][T13751] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 222.949477][T13751] RBP: 00007f8eda211f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.957428][T13751] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 222.965384][T13751] R13: 00007f8eda3e6128 R14: 00007f8eda3e6090 R15: 00007ffdb3f83228 [ 222.973368][T13751] [ 222.976641][T13751] Kernel Offset: disabled [ 222.980950][T13751] Rebooting in 86400 seconds..