last executing test programs: 2.633817128s ago: executing program 1 (id=1177): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) poll(&(0x7f0000000040), 0x55, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f00000001c0)=0x5, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x90, r5, 0x711, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r9, 0x6, 0x100}, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r9, @in6={{0xa, 0x4e24, 0x3a7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, &(0x7f0000000000)=0x84) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100001082f5db13adc4a068dde752a7330841f679452be928c332043ada8da032c58499126422a8939f8288884587c824451927a78a31a27907202fe596df33ccc5971f5a7efc5033968b0c29ada1757d5f133822abf1fa19116627ee0649d1cb18a129dbde22702ba296752f44ca9711f0cbae888d728f56ff139716f9188b3b53cb80af6b2a4347866f03d8a2664f3e925b2caa63fef6816ff7f30d14b98bb7127d4fb0b55fa74749f519d4853f0c58643dd0dca940523ac72faf2b06f976f856cf827ef99cf330d75", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001a800400070008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) 2.342096486s ago: executing program 1 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x1, 0x8}}}}]}, 0x44}}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x25e}]}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.097521875s ago: executing program 2 (id=1184): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {0xffff}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {0xffff}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r10, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) (async) sendmsg$sock(r10, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 1.652329458s ago: executing program 3 (id=1189): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000011}) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x240040c0) close(0x4) close(r7) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@gettaction={0x14c, 0x32, 0x420, 0x70bd26, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7333}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x63}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.650440506s ago: executing program 1 (id=1191): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="f9c5a167cb38dda420ea5c8df4a8cd54ee6a15dd703866bdf6941944c13871e24bf76ab70541cf1ba39fabff51d3066b24dd3d3e542ab2bfb5d149cc2e75a50b", 0x40}], 0x1}, 0x8001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "80566ba2ba50dc45ee638dcd297d88e28ec00175e64b4fb24e448a24b9d9d771", "9d4a472fd54c2d8b439c2cbc8845efe7702ef8d0a7da9943eed625dfa8f6b887", "599b8ba4c1595abfdace8f553a9179c4de952dfebef8877b5681d4ee1bd9edd9", "1105ae55e8240295b492f1b864173f20374dcb1901a8cbd89f90df811a4bb5ad", "2280199939a2fec962d0f810b7e3c19a4d9013ac5f6850b23a353d17920dfa59", "000013f434bc0cdc6d4500", 0x235ffffd, 0x7, 0xc, 0x6, 0x800}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 1.635742206s ago: executing program 2 (id=1193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240)=0x100000000000001, 0x12) sendto$unix(r4, &(0x7f0000000600)="436d00c89e1e8f7c3f45624eb106b9bbc09341f1c533655b4161b3c31685395d3ff8a6236fd61d26c2af3003bf1749dbdc2bf99cb49057056f8b0d35c73be1527d22f0f5a04799902321e1962689469e72e32389b3591de8ecd1489455e065e3bf6623b2d9ee892dacf93bf3c32f2c55078f5573dabf1125ef85ee2a85fa1c33004da15bcf66964ceeb69ff245b7b0beb8694a6c5184694cea776a7edb96a76cea4af7ec51d1da52298bd47bf4941a7e782ae02448dfbeeb6a0ab027fab13be0063518fc130e2e8b0f36dbab3e154940ee98a77ee6b4906eccc4ab016afee87e6228ae84281b486b8928eb3db0d75c1b86664dca0d31b9d021bb13dc3cf7f5e1afdfad16496c00fb135e7f300ce4942d1ad3c66ab25d306d0d9f4c5a2539ff7978042bc817bdeb6661a3d938df1ada6fe5a75f9fa5e3a56b8ad51f9e489404efd1ab0077816df875c3845d0b4bf37467d7007f7f8a9b0cf82202e28c9731a5a3824eefe33125aee1ad9788c9e08d0577e4aa583388c27cbda93e38f2bbc9052a9b18f13321f6720f9af5e083b8cc63b3ed3b48ec889a3559650038365137ffabd41b99f661775af8701114d46cbb8d136efca02e8141ca95dd23b6656acf2c69a41be71e7fbe35341571de7c0769dac9c06b8b5e1b238d01ef67b6ed7c136f8099d2c114eb3dcbf16be7b93e4b5af761a31107863afa5063a358c953f078f51102e0df59784c7868ef3c87f91e46d067b4d787534f569e9c6646526e9df2ddc93d900b72329f526e2fbd5fad5474041f6c7d3da6b66bb5725e2725477a5920fa4e2d4638e94ff38dc42b47528eea48ea4886ec42c6d839fb44cac5ca987f1ab8d4d7c81e9d19174b3e8450949251ed6637c440b4179681f043615b9f4f19ea44708acdc809a5e83f6cda41f80905a4e25594b5a6c379fbe19aa82ba8bf9a1fe0d6dd31e833212a587a47965fc098d6728ef7a54c4f7e6046cab9a569b4d29f4d7991af791d0a6f778f18167994972533f9f98ec1de90e324ba039b6377239cda1761c75ac4b2707bb78e59fba52dd127e9e33e12995589b669d56595d5f3c6e2ab9bfe5957154c79ee77d4bee80bf76e3ce20527383738e3729f6481aa5926d69cccd39b617ee1add341f19083e632cb62e40ff226c20d1e33dabfcaab3cf266471b0165c1ffd73e9a4965d61fd775a7609cf85369a2201549d708844a83ccf7caf69c35afc6d44d59c4fbd2af2dac348b9a427b7bcd8725ea8ade76cd91ca656a628c587202fce2941c9a3aba2989d0ebd02a73abae1172158b788a8c0ef4768d550c3613bceebf66f7b4769b3401f6e1565dbb843f1a4c5a5dd42e90663b59c07ddbd672fe600dde528385f6b94a83f7d2c4373c9ac718b5c80bd24399c1c04cea2dafb850a07e1a9b875430dbd68a15604d4ff4fa0cd67bf0c4ab33a4d8a64382d99f8af34dfac77daad251620735de4cca7f9a22ab2a9da4dd3f8d14759c89240185e66e6c4d54501c6bea8423e642272befbeef7fd014892f6ea4f366cb9d23f9fa2ff1b47906ec190b24a39d96774fa23c5f12627b96649d564f14e877883ff570a0e20a0f52d0d126ca1aeb80cf514aeb8b4d633a93ab3298c48cf6eac4970d741acd3cb6e34a3732ead1b037e3a70942c428755b0ab9631493db24d7fd320813c39f3cd59e5dde0675d4f83dfc7998d30f4db7338a2cc24cf5b5ecd5cdaa74fad49c8b58d0abf2677f7dcc731d0032f26df4eea46f39f1d29fe1feba0ec49acedd24da34f2f6c015d7e77c16550291f128b3323a27454346ee4fbbad68464881711e53861e124f85430917679ee8cf291eeb3917b46ce75ea4f0b080c78ec6e88909993a43b41e71d6b2486e9618e6df15ca922651f0b4948e875e3a480982efa12f6a375f6d85d49b751b50afdc36924fb8a81d4f6b82eefeea85493276a8f952ac8c51f36b228561468225598e662da8d8c57dafb6517c7ff0f0874da2ecac6a6dfb367c853cb67ff75759ced389333728ec6f91a214e36fdd37f853e40dcb429c660fa4709082eb08828473f58572b5e3b585ada6e1288a41ccc33399af4799e39b11f785fe7279a2ea78701025efc85bc276e2af21bff84ae337d5a959a5f56ad782c00973acfc28b1ea8b3838467cef97f0bf6b804d23cc5e0a6c6238a5ad17729932dbbbde7bef459d03c501cdc18b6aade4f240e0eb7e62d7e479bf41277ff9186a37f2dd17ee73a7538cc5028351224e034e86610b97739559c3c89e30b548acc1d944e46f6511749a965977eaad05e6272419b878741c5ed3897cc1869db36f9bf93ed35105206496fcf5431cfed629f5d0aab099d6e20c495a134c9c14261acdcb213c01a3d732af7891ab9be93d0fc0abf3e0aae6c3f57cc8ceb825eca1f25cabad38860d73af47f5216ddda417fd7341c6df97d4800ac468662654bff307557eccab4375c29b147d853b94fc1e2ebc2a1ec3fe708cae0f7e8440bd0512a5c019e20c91a981c6dfdfec1dcd6ac5e13c241d078720ffaf1c944bfbe5b9c4364d9e72f5221c095a84043548f2654bfcc5f528b19467c5134777c0d6694ce43b59d659bf5eb7f280d8176b2c35152368515c0a91bf16a9816ced5aa3275e851544c3635e4987adc997eab4f15162f070f2042032332b127abae317ca953d3423f977a95cc290dbba47a2b29bacc0b467dc8258e3c30186e7f25de57f4cb5391ade14418062e24478242f3a28172e3a780a8260b0c360dd1f3b326833da05209d7d457f8f56c53672d2b25a1e71cd09f15ede99ac230b57a526f0ef741969f50b6895c627261af9da982b960ffe1a3ca2bda7fa4c9c33fd103e0129efa88f339ab3f8e09eba56c95b8299b2bc68aa74a448d5fc52e9c9a2d5abecaa2eb933796951cca7091009a572a5a20600df9b3e72dc2fc7fc37eedf3df4334bcf2c8e764382c468a2537ee036236d6789322bc2c6eb7a96520941efc82931bc61960c97e471c50807ba710035b9a434d792bf4e4580c510862aa7911a2cd08f6208c4fb234cade39b2279c81540bcb0d85600eb19163a5794db2567c03306e4d91ba5d81f9fce6070d237a9d973b76068d06f033c6864754d17d6779e3cecce6ade60dbfc514f67cf16d5d478b594a952e1e0ec48c196fef804722409fb4e74e1bb243da4ea9cb2ebb1436feda21b330b72f093ebdc134660fd09264335ac78322324340a6edfe3fcf07366ad88d0acc4d8e69ff445a7d98b847e4c45235151d7a80a9cd14ff60d835f5d79eacacd5988d3d131edab17ac3edd90146adb0bc85bc0d2a294f0a9da0a72fa8af4ba796ee0cc4abc336da1876612e02df0b4a7ad248e44d183e0ce8727fc8b08cea7154f89cb5beed3098ecc8f28ba211cc904a01a9056f59be4f2bb32a33302151e611882c754c0c119755e7803e78c108d00931a253a3c44f06ffab64ccda540d89f3319ee3f0e2a7ba9601f867cb915c7cd5b87c6568448ffcbc2bfd4c5a00f88f0dd1fcdced0cd0172819bfb284f8f5ccc5f3e901504e6c06af3c088df2d6cacadea20a1708b1926428075ed382a614a879a7fc0ab0a71001e93a84342824b736fd58f605e9c3f8dcf8fa65cce92a1dff10386caf9831d39c5362f51bbf01ef87e6fc2a5b1fcfbb0e9a2318eb6039fdab94173f1c9dd9a83723fd359d76aad95711ac676fd75603bebf6773e700ac8f5e4691770ffe4702b4e3f42bddb3bb089666416ce03e91a58dd2070f09e61b3bb524408bd44c540a0b098dd98ce2dc6bed0057fb5cec8d2caabeff2218271f6496a3044103e9743858117b2f6e31eaf7ef48ac546e80128bf86c104f73b95cf729401c92686237fef83b11b9186b172bafba4ed47149b040e1052ed6765dfccdf1852e6e3c9f21d7be40ea314c43e8f4b0da5b53f7b2f1a2018ffcee6f0a06173908705c67a8f2be886b252ac97129e19aaf06aefc4e773d5766baa7fbae1be3841dab3ef3c5bee8ef59ea57b304648368844e467b74244b438bd3ba275c5ec6d6c5f2ae7e256e69862d55474fea3a5ba0dc5b36484b4b9adc9d33ddc801a9f590da33eeaab07e43f1fe7e6eba41d9398a1a942fd0ff42a1705d9c4c109215f01da3e0c216bd4381066607fcd69882b8015da17daef3171574def756dad3808d2872cc5515763b97ca5b661ecac772c70b74afc8fcd7104e40de8299224d4d2572c19180a186be1f646aebd8f000a3de5c11ecc25155a2d0ebc13d9d5b2a27a775a1534443db07ff7c943f621697bfd2ef89a1a3aa48a0b92da5c118ba1d4cb90df27caf07cbf1f891ace4b9b8b307801a6aa7644d4a40ad449a638ce65acd96c7432b6c0730de73f98353f7020c969ae1661a782c0095c6010909acecbbfa21596c7d4fa6b9d02afa7f8461bcfe1719a578d019a73fc7d2918d7c28d9f60ee2d548d855f6ff6b5d7407216805ecb8e0f2e9d049d87ea95b3cfc543b47e46fd859c28743c812d2def4e352a7fb1281add709de4be1d678521b398ee35d00962e5c288cbe1b789b5e39720494cd85acd7aec4da2c2c7b89fa5731df4d1f7756c10d9cfbbfc733d9d522450a505ced45d39bb42e81cf332c4be16b69e5cf1b3c68f29c9dc10eb55fbdea699aba70279614b7dd9ca030c0f7b2be6bc64799260c4685e3dab58d1e8108da98c53f5a95152bf1aa56eb2f1a47ea64b1ec687315aa20d0270d1fc6854938e866438bf7fd867d5116279cb5c771bf792869ca54feca98201fc457074dd85406eb3a55e0c5a0bafba4c074f2a85bd1aae75de36bb305502215c547b299ee503dc6a84599f3e79991dbf7c4a47e2cc2b43ebf1d1611d03cfe9e18c41f875788b52754174fbc67d85c9818f2c7ec5e166ac89d7a0449e95873d9a84c71404ffe7f6080dedd976c36faa76ed509670377eb7d4fdc96778b3db1d2b384dcaabf7be8c5a0898ef8b0e0dba1ccccbf09d55a22ce811af272dd63878c86453f12c432b1f958408e41c34db6941a4cc425cad48cd1c0759e00b4be877422b2266c68c21e147a811f0bed17cb35bcc78c9d6cc1d75d31f78c97ca87ed933af861ed29ac55409aec6926e3f642cce95e65795624fa15f3aeb62fa50c1ea46a6b77bdb6ee53b88a706214d1aa11c1b37e9fa80705f9d803f4632d8ebebd7853c830f490fd8e9f9106a673431fbac97a1282034732eaa1438ea0678aaeeccd480ef572f216560825c119bcbcb193091644c4a54d5891bec430c339edb134d9d7cfbc98175885ef2a4a682b638ec143e35f7c3912d18bfb995ac4dc8a318fc30d55c464b4878f0cd545c94f588e27822c8bf38605fc784d00f86dfec10aa362f584ef81e8da3d75768c3d8410a46d65c8682bb764ef7c30ecb54114702f76435225b56f74044691669e0b3ad8538361a05f2da066bff3ed519a0865cceaa4b6e5740b56629f16e1bd8ed4d27b664c1c150a3b9e391b07bf2659f7a58fd692e09df813b527309e94d073c64c445ce9bb549b3c7f70755a1a0013966e6b579dec77309d10b0d19ecf175e8978598059046382e278def5af6af8142c50a41336b7d94097db4c2f993e2d4b8c36e4dbb50459fdc677327b3ebfd28abfe444dcd167502d82ad094443cc14a50673f4e965f54eda680879b23fd3d2960d7d7b85a4969ba5e96a9950a83441334ebc761c0d7797a1d3e13768b64e29eb67998c572c40563c034b1ebb13cc6440a4d5c72d92bc55bd613d984392daff7ac616dc947e15a239a87bb5e45ffd0fba5cbd5b6ac6d5186b8cb8d76f71966e0d0586789", 0x1000, 0x20000000, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x25dfdbee, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000020905000018a39cb08d8ba6d8002f13b09a0794c483448420a6ebbed5ddd7e7236b2ddcd4d8c74b19740e83d071e7d2f7be9f8f65058eff089abf604e37b37a68638f508a82323290b8db6e780e6976f2563b3d8cccfc05a9a5333a60304084b7ad77332f4b5e0a2b648a58cd605c0c554abbcbdac25ff616376dcd749135c41db84f01b66932b867bc7c868aa1264573d944f0c8193e22970b11c8077d2f0efaefde7b3c88ea48d0df2efeca7d2b85a690878162f44065f9f53f725689d0e58d61acdf201730b641c5e2ab515800"/221], 0x14}}, 0x4441) 1.476290564s ago: executing program 2 (id=1194): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfff7, 0x2, 0x4, 0xed02}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.432143235s ago: executing program 2 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) mmap(&(0x7f00005dd000/0x14000)=nil, 0x14000, 0x8, 0x10, r1, 0xf75f8000) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x8, 0x0, &(0x7f0000006680)) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) (async) mmap(&(0x7f00005dd000/0x14000)=nil, 0x14000, 0x8, 0x10, r1, 0xf75f8000) (async) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x8, 0x0, &(0x7f0000006680)) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) (async) 1.124495182s ago: executing program 0 (id=1197): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) sendmmsg$inet(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="7f", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0x30}}], 0x0, 0x4000c50) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1000, 0x20, 0x0, 0x3}, &(0x7f0000000100)=0x18) r4 = accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @remote, @default, 0x0, [@default, @remote, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000300)=0x40, 0x800) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)={r3, 0xfffffffffffffe47, "6039f42446aef76d415bcd0e25126064adea569705722d0f889368e86635b90c8e8fa8c5ff0af3866ed89cd4d2183a4100ac9d700e917f12413d825d6f40da8a65f9585b9a74f7deca4d6bbde02c7680181690bc94edfb0ec412d10ae60bcc9139b45de97fe3196d70eddbeed1e695cd1bb6e76527c71a5aa221861ac6479a91e8d9e8a4daa0a9d290245bfd084993f5d6e93589453446e591ca533f5919fb299fd901"}, &(0x7f0000000140)=0xab) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) sendmmsg$inet(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="7f", 0x1}], 0x1, &(0x7f0000000540)=ANY=[], 0x30}}], 0x0, 0x4000c50) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1000, 0x20, 0x0, 0x3}, &(0x7f0000000100)=0x18) (async) accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @remote, @default, 0x0, [@default, @remote, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000300)=0x40, 0x800) (async) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)={r3, 0xfffffffffffffe47, "6039f42446aef76d415bcd0e25126064adea569705722d0f889368e86635b90c8e8fa8c5ff0af3866ed89cd4d2183a4100ac9d700e917f12413d825d6f40da8a65f9585b9a74f7deca4d6bbde02c7680181690bc94edfb0ec412d10ae60bcc9139b45de97fe3196d70eddbeed1e695cd1bb6e76527c71a5aa221861ac6479a91e8d9e8a4daa0a9d290245bfd084993f5d6e93589453446e591ca533f5919fb299fd901"}, &(0x7f0000000140)=0xab) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 1.1022195s ago: executing program 4 (id=1198): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28}, 0x20) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@multicast2, @in=@loopback}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0xa773a000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000006c0)=@ethtool_drvinfo={0x3, "24adcd32e01df815cedecaf89b4d61f37dc1528b7e4e062db13ab460a91a3fd2", "f86e22360b5c8cc00897e3c12e8da2eb4f44f43a2aec0236ff59e713b5da467b", "702736d5674f4ab234ef4ee1865f31abd8efb3df4162435fe195fdebbc9bb991", "57932cb7f8ea664d108017d7e8e288631381b1e7a8f6b9b5ac48e35faae2d284", "b39a8f3ad6303ba1c5458a1812b6e9b9fda4b63a7c2101b761bceb93cca85464", "8de1df06d44576eada425615", 0x6, 0x2, 0x1000, 0x81, 0x2}}) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000d80)={0x208, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_VLAN={0x3c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xc}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffa216}, @NFQA_EXP={0xac, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x31}]}, @NFQA_EXP={0xd0, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10d506a1}]}, 0x208}, 0x1, 0x0, 0x0, 0x2000c010}, 0x800) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000d0000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x10}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0x103, 0x199, &(0x7f0000000980)="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", &(0x7f0000000bc0)="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", 0x2, 0x0, 0x10000}, 0x50) 1.009587678s ago: executing program 3 (id=1199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4ff5, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xea, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x9b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xea, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x9b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xa, 0x9, 0x7, 0x1, 0x1800, r3, 0xfffffc01, '\x00', r4, r5, 0x3, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, r2, 0xaff85000) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r7, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01efb3000000f600000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) 924.444251ms ago: executing program 4 (id=1200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc11000012000102000800000000000000000000000000000000009600"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'ip_vti0\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x19}, @val={0x0, 0x3, 0x3, 0x3c5a, 0x2, 0x3}, @eth={@multicast, @multicast, @void, {@canfd={0xd, {{0x2}, 0x7, 0x2, 0x0, 0x0, "c81fcd17ec803cbb43e3d31bb41a0ec606d2c8b8ac7bdf836d4cf2cd00ddd73e7f5f83a48ad36e1b07d51d201687b1bbafb4d181091d1aeedd73a5d1de87ffc7"}}}}}, 0x64) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)=""/154, &(0x7f0000000280)=0x9a) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 717.708843ms ago: executing program 0 (id=1201): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x10006, 0x4) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/245, 0xf5}, 0x80000001}], 0x1, 0x45833af92e4b39ff, 0x0) (rerun: 32) 717.416545ms ago: executing program 0 (id=1202): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x2a}, 0x20) (async) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002004e20ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000005014cbc349fbcbb16a3f144993c090f0eb"], 0x80}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) unshare(0x22020600) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f0000000340)=r4, 0x1000000}, 0x20) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2443f716aee1f461738e000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r1], 0x24}}, 0x20008000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="3b000e0080000000ffffffffffff08021100000008021100000000000200000000007093640001002a01017206030303030303760664003c0001000004001b8008000c006400000008000d"], 0x6c}}, 0x20000014) 716.890061ms ago: executing program 3 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1038, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x4040000) r2 = socket(0x2a, 0x6, 0xa176) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000200)={@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e22, 0xe34c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, {&(0x7f0000000140)=""/71, 0x47}, &(0x7f00000001c0), 0x2c}, 0xa0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010004b0400000000000010007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800900010069706970000000002400028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0500040007000000053a6d412ddf615728eeb10100000700"], 0x5c}}, 0x0) 711.773177ms ago: executing program 4 (id=1204): syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3e080045000024000000000011907800000000791e80af400017c100109078a206000100000000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 702.975597ms ago: executing program 0 (id=1205): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0xff1f, 0x8000000}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x45, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000010116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000740)={0xffff1e9d, 0x8e, 0xf, 0x2, 0x2}) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000380)='syzkaller\x00', 0xf8a, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 644.422566ms ago: executing program 1 (id=1206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4084, 0xff4}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r4, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) listen(r5, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000980)="6f04045b8fddae148f9655b3fd1f3761", 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="0a0006000802110000000000380050800800030006ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000cc0)={0x14, r7, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x400, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000170000000c0006"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x20, r13, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0x4}]}]}]}, 0xfffffffffffffdea}, 0x1, 0x0, 0x0, 0x4004}, 0x4c485) sendmsg$IPSET_CMD_TYPE(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000d0601010000000000000000000000000500010007000000130003006861730400000000000000616365000078863475417a85234641cce9b7b87d8c61d33d569afd848f3bdff82eb8c641bee8672371ba008a10f62f6fd7f43fb4dd1000f5adb6a57da34d3d9ab7bb9158f68ad3dac0ece19c08b3bace50815d80"], 0x30}}, 0x0) 642.661258ms ago: executing program 3 (id=1207): gettid() r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001a0020002abd7000fedbdf251c801408fc02ff050023000005001a0007000000140012002700fed7801afa3325afab2172b7040a0c00090008000005", @ANYRES32=r5, @ANYBLOB="08000100000000000800010000000000140012002700e0fd1cccaa0691e7b32528507b251400120011002d2360f467230a783b047883a3470c000900ff7f2404", @ANYRES32=r5, @ANYBLOB="04009b0b00000200"], 0x90}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 537.123695ms ago: executing program 4 (id=1208): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a31000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 536.48575ms ago: executing program 1 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r12, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r14 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x55) sendmmsg$inet6(r14, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x36}}], 0x18}}], 0x1, 0x0) connect$inet6(r14, &(0x7f0000000000)={0xa, 0x4e21, 0xeb0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x200}, 0x1c) 528.925981ms ago: executing program 2 (id=1210): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x15) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000000001010400000000000000000200000070000d8014000400fe88000000000000000000000000000114000497fe8000000000000000000000000000aa140005000000000000000000000000000000000008000200ffffffff14000500fe80000000000000000000000000002614000400fe800000000000000000000000000042240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x20008820) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f00000010c0)={r8, 0x42}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)={@map, 0xffffffffffffffff, 0x16}, 0x20) (async, rerun: 32) recvfrom$rxrpc(r1, &(0x7f00000020c0)=""/244, 0xf4, 0x122, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @mcast2, 0x71}}, 0x24) (rerun: 32) 428.581657ms ago: executing program 0 (id=1211): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, &(0x7f0000000300)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) socket$inet6(0xa, 0x5, 0xe) 401.077935ms ago: executing program 3 (id=1212): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a9197334"], 0x28}}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000d00"], 0xfce) sendto(r2, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)='I', 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x72, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dddbcdbef2d074f05a343397400933405f24db236006c94ef81f0718e6127aa54fb5899f9f12223a96d50ed2fa8a6144266abc474b83ca6eec66f3aa162fa2f70f3e0dfb98c13439c0306ca04f09404cf3c6dc23dc9a0200"/114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="170b00003cb5f21a08002900b1e000001400030062726964675a118b3d711241c4300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) 258.388281ms ago: executing program 2 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4c010) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f00000001c0)=r13, 0x4) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 156.246167ms ago: executing program 4 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="2a45dbe668bdf312d159872b68b6cfc3", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB="0006610000000000008de3949a9e3125f86dabb421abe3fe67d6daaf569543a8dd4629ab92785135a633c9eda9e555ab869878037ef32fd9bf50dd", @ANYRES16=r0, @ANYBLOB="0e1bf10000000100"], 0x48}}, 0x0) 133.84703ms ago: executing program 0 (id=1215): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x1, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc010000e37b654081b8ea0000000000000000000000007f0000010000000000000000000000000000000000004a550000000000000000794168992571659bd66cc0321a29babbaaffeaea2ea478719f63e1a1db0cdce0866dbbf9d7bbc78ede31f89b1987bbba18892a8f6d6ecc8f4220ee580a468e8ff853002e0cf85ffc5c35d0565597fc04bdd9a402296ef37974f34b2dfb3312d0e709cecb9999fb49214906b51bba038b9f50e4be5830d65ae93f9cc8cefe0dd7d4d963ae3440e14828844c09b32edabb435e2dfdb77214318477e22249d4d35f72b72820268ae876f27bd7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000005000110000000000000000000000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000000000000000000000000000000000002000a00"], 0xa0}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 96.014755ms ago: executing program 4 (id=1216): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000380)='-', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0xdc, r5, 0x1, 0x1, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x9c, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xffffffffffffffc2, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FLAGS={0x0, 0x5, 0x1}]}, 0xdc}}, 0x4000000) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0xdc, r5, 0x1, 0x1, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x9c, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xffffffffffffffc2, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FLAGS={0x0, 0x5, 0x1}]}, 0xdc}}, 0x4000000) 587.185µs ago: executing program 3 (id=1217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000080)) 0s ago: executing program 1 (id=1218): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @null, 0x5, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x1e, 0x803, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12100}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. [ 80.438234][ T5854] cgroup: Unknown subsys name 'net' [ 80.593858][ T5854] cgroup: Unknown subsys name 'cpuset' [ 80.602921][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.140776][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.666173][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.674466][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.678349][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.682360][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.697527][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.705901][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.714393][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.721637][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.729081][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.729588][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.738657][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.745919][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.751484][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.764678][ T5188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.766749][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.782284][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.790232][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.810020][ T5188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.844131][ T5188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.882619][ T5885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.884034][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.895514][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.898114][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.911370][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.920873][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.402969][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.578540][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 85.705062][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 85.717614][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.726841][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.735242][ T5866] bridge_slave_0: entered allmulticast mode [ 85.744019][ T5866] bridge_slave_0: entered promiscuous mode [ 85.796280][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.803811][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.811618][ T5866] bridge_slave_1: entered allmulticast mode [ 85.818766][ T5866] bridge_slave_1: entered promiscuous mode [ 85.826346][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 85.897935][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 85.923409][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.931050][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.938226][ T5872] bridge_slave_0: entered allmulticast mode [ 85.945992][ T5872] bridge_slave_0: entered promiscuous mode [ 85.993758][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.017515][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.025404][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.032835][ T5872] bridge_slave_1: entered allmulticast mode [ 86.040144][ T5872] bridge_slave_1: entered promiscuous mode [ 86.072538][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.178528][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.185828][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.193833][ T5882] bridge_slave_0: entered allmulticast mode [ 86.201303][ T5882] bridge_slave_0: entered promiscuous mode [ 86.216560][ T5866] team0: Port device team_slave_0 added [ 86.230044][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.239397][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.246736][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.254506][ T5882] bridge_slave_1: entered allmulticast mode [ 86.261824][ T5882] bridge_slave_1: entered promiscuous mode [ 86.276361][ T5866] team0: Port device team_slave_1 added [ 86.297248][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.408197][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.415314][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.442110][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.453975][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.461540][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.468733][ T5867] bridge_slave_0: entered allmulticast mode [ 86.476249][ T5867] bridge_slave_0: entered promiscuous mode [ 86.499496][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.508938][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.516482][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.523926][ T5869] bridge_slave_0: entered allmulticast mode [ 86.531880][ T5869] bridge_slave_0: entered promiscuous mode [ 86.540775][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.547737][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.574762][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.597721][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.605494][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.612971][ T5867] bridge_slave_1: entered allmulticast mode [ 86.620736][ T5867] bridge_slave_1: entered promiscuous mode [ 86.628841][ T5872] team0: Port device team_slave_0 added [ 86.637317][ T5872] team0: Port device team_slave_1 added [ 86.646313][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.655678][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.663006][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.670409][ T5869] bridge_slave_1: entered allmulticast mode [ 86.677636][ T5869] bridge_slave_1: entered promiscuous mode [ 86.799706][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.813471][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.826704][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.839399][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.865267][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.872482][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.898614][ T51] Bluetooth: hci3: command tx timeout [ 86.904510][ T51] Bluetooth: hci0: command tx timeout [ 86.910442][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.960023][ T51] Bluetooth: hci2: command tx timeout [ 86.970579][ T51] Bluetooth: hci1: command tx timeout [ 86.999436][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.006746][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.032987][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.044384][ T51] Bluetooth: hci4: command tx timeout [ 87.053393][ T5882] team0: Port device team_slave_0 added [ 87.074955][ T5866] hsr_slave_0: entered promiscuous mode [ 87.082554][ T5866] hsr_slave_1: entered promiscuous mode [ 87.126686][ T5882] team0: Port device team_slave_1 added [ 87.168683][ T5869] team0: Port device team_slave_0 added [ 87.177554][ T5867] team0: Port device team_slave_0 added [ 87.215647][ T5869] team0: Port device team_slave_1 added [ 87.236038][ T5867] team0: Port device team_slave_1 added [ 87.273443][ T5872] hsr_slave_0: entered promiscuous mode [ 87.279747][ T5872] hsr_slave_1: entered promiscuous mode [ 87.286214][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 87.292466][ T5872] Cannot create hsr debugfs directory [ 87.342801][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.349776][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.375850][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.388535][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.395616][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.421934][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.439082][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.446443][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.473195][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.485293][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.492563][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.518534][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.563551][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.570807][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.597237][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.617032][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.624222][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.650397][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.715534][ T5869] hsr_slave_0: entered promiscuous mode [ 87.722300][ T5869] hsr_slave_1: entered promiscuous mode [ 87.728461][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 87.734254][ T5869] Cannot create hsr debugfs directory [ 87.833026][ T5882] hsr_slave_0: entered promiscuous mode [ 87.839405][ T5882] hsr_slave_1: entered promiscuous mode [ 87.848205][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 87.854239][ T5882] Cannot create hsr debugfs directory [ 87.914888][ T5867] hsr_slave_0: entered promiscuous mode [ 87.922789][ T5867] hsr_slave_1: entered promiscuous mode [ 87.928941][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 87.934826][ T5867] Cannot create hsr debugfs directory [ 88.247801][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.278702][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.290189][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.337378][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.452499][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.464852][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.476040][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.492603][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.592140][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.625130][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.638526][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.649097][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.754980][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.772565][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.785538][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.796739][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.826934][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.862118][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.878095][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.936132][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.945327][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.952536][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.965136][ T5876] Bluetooth: hci3: command tx timeout [ 88.974180][ T51] Bluetooth: hci0: command tx timeout [ 88.976302][ T5882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.998846][ T5882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.013080][ T5882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.025865][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.032981][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.044380][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.044438][ T5876] Bluetooth: hci2: command tx timeout [ 89.051519][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.053231][ T51] Bluetooth: hci1: command tx timeout [ 89.072003][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.079121][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.106792][ T5882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.121340][ T51] Bluetooth: hci4: command tx timeout [ 89.227652][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.294577][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.359612][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.444701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.451982][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.484515][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.510906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.518080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.620544][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.645012][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.695971][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.703156][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.713914][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.721544][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.754302][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.778363][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.821975][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.829438][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.853402][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.877731][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.885052][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.904019][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.011621][ T5866] veth0_vlan: entered promiscuous mode [ 90.069071][ T5872] veth0_vlan: entered promiscuous mode [ 90.079223][ T5866] veth1_vlan: entered promiscuous mode [ 90.107582][ T5872] veth1_vlan: entered promiscuous mode [ 90.172652][ T5866] veth0_macvtap: entered promiscuous mode [ 90.221840][ T5866] veth1_macvtap: entered promiscuous mode [ 90.287761][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.325384][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.356035][ T5872] veth0_macvtap: entered promiscuous mode [ 90.386692][ T5872] veth1_macvtap: entered promiscuous mode [ 90.407546][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.440502][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.474342][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.506833][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.529226][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.562131][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.575307][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.591887][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.636710][ T2977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.649192][ T2977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664557][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.704009][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.744504][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.764543][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.798518][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.855811][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.880318][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.995309][ T5867] veth0_vlan: entered promiscuous mode [ 91.009121][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.011526][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.045366][ T5882] veth0_vlan: entered promiscuous mode [ 91.055334][ T51] Bluetooth: hci0: command tx timeout [ 91.055409][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.061152][ T5876] Bluetooth: hci3: command tx timeout [ 91.088622][ T5882] veth1_vlan: entered promiscuous mode [ 91.123474][ T51] Bluetooth: hci2: command tx timeout [ 91.128994][ T5876] Bluetooth: hci1: command tx timeout [ 91.172877][ T5867] veth1_vlan: entered promiscuous mode [ 91.201574][ T5876] Bluetooth: hci4: command tx timeout [ 91.216320][ T5984] !: renamed from dummy0 (while UP) [ 91.235382][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.245268][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.262968][ T5984] pimreg: entered allmulticast mode [ 91.364859][ T5882] veth0_macvtap: entered promiscuous mode [ 91.371396][ T5986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6'. [ 91.387822][ T5882] veth1_macvtap: entered promiscuous mode [ 91.412918][ T5867] veth0_macvtap: entered promiscuous mode [ 91.490392][ T5867] veth1_macvtap: entered promiscuous mode [ 91.508145][ T5869] veth0_vlan: entered promiscuous mode [ 91.536169][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.559183][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.584484][ T5869] veth1_vlan: entered promiscuous mode [ 91.637853][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.672492][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691939][ T5994] team_slave_0: entered promiscuous mode [ 91.697669][ T5994] team_slave_1: entered promiscuous mode [ 91.706198][ T5994] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 91.714859][ T5994] team0: Device macvtap1 is already an upper device of the team interface [ 91.724361][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 91.736895][ T5994] team_slave_0: left promiscuous mode [ 91.742432][ T5994] team_slave_1: left promiscuous mode [ 91.764462][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.775120][ T2957] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.784335][ T2957] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.807882][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.856659][ T1228] cfg80211: failed to load regulatory.db [ 91.898921][ T1151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927034][ T1151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.959813][ T1151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.972610][ T1151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.995909][ T6002] trusted_key: syz.2.10 sent an empty control message without MSG_MORE. [ 92.039308][ T5869] veth0_macvtap: entered promiscuous mode [ 92.098850][ T5869] veth1_macvtap: entered promiscuous mode [ 92.169235][ T6005] syz.0.12 uses old SIOCAX25GETINFO [ 92.199787][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.219342][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.243486][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 92.269081][ T6007] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 92.290938][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.308519][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.327278][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.332221][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.394535][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.415163][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.433909][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.460045][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.513563][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.543824][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.588716][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.618777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.868753][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.886777][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.915281][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.944307][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.026859][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.067824][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.073357][ T6029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.123285][ T5876] Bluetooth: hci3: command tx timeout [ 93.128846][ T51] Bluetooth: hci0: command tx timeout [ 93.156351][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 93.187879][ T6033] Zero length message leads to an empty skb [ 93.201947][ T5876] Bluetooth: hci1: command tx timeout [ 93.201973][ T51] Bluetooth: hci2: command tx timeout [ 93.221020][ T6029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18'. [ 93.281466][ T51] Bluetooth: hci4: command tx timeout [ 93.503064][ T6050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.621805][ T6054] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 93.661235][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 93.688379][ T6054] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.730709][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.739088][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.786227][ T6058] netlink: 'syz.1.25': attribute type 4 has an invalid length. [ 93.820321][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 93.893101][ T6060] netlink: 'syz.2.27': attribute type 1 has an invalid length. [ 93.964246][ T6060] tipc: Started in network mode [ 93.979699][ T6060] tipc: Node identity facd0c2e8763, cluster identity 4711 [ 94.038983][ T6060] tipc: Enabled bearer , priority 0 [ 94.150903][ T6070] syzkaller0: entered promiscuous mode [ 94.156927][ T6070] syzkaller0: entered allmulticast mode [ 94.167161][ T6070] tipc: Resetting bearer [ 94.255018][ T6059] tipc: Resetting bearer [ 95.111590][ T1228] tipc: Node number set to 2108558382 [ 95.332171][ T6059] tipc: Disabling bearer [ 95.349206][ T6084] tap0: tun_chr_ioctl cmd 2148553947 [ 96.011066][ T6128] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.032073][ T6129] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 96.168958][ T6136] netlink: 'syz.4.46': attribute type 58 has an invalid length. [ 96.352255][ T6101] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 96.472655][ T6144] __nla_validate_parse: 4 callbacks suppressed [ 96.472673][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 96.714770][ T6152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.54'. [ 97.012502][ T6171] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.373574][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 97.438107][ T6191] tipc: Started in network mode [ 97.447052][ T6191] tipc: Node identity f2dc730c2a23, cluster identity 4711 [ 97.462058][ T6191] tipc: Enabled bearer , priority 0 [ 97.475836][ T6194] syz.1.66 uses obsolete (PF_INET,SOCK_PACKET) [ 97.477424][ T6191] syzkaller0: entered promiscuous mode [ 97.488502][ T6191] syzkaller0: entered allmulticast mode [ 97.526806][ T6191] tipc: Resetting bearer [ 97.584017][ T6190] tipc: Resetting bearer [ 97.603346][ T6190] tipc: Disabling bearer [ 97.625144][ T6197] syzkaller1: entered promiscuous mode [ 97.637830][ T6197] syzkaller1: entered allmulticast mode [ 97.662740][ T6194] syzkaller1: left promiscuous mode [ 97.668188][ T6194] syzkaller1: left allmulticast mode [ 97.798623][ T6201] pim6reg: entered allmulticast mode [ 98.031963][ T6185] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.312158][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 98.346564][ T6231] unsupported nla_type 52263 [ 98.359555][ T6232] netlink: 'syz.3.76': attribute type 7 has an invalid length. [ 98.397078][ T6227] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 98.428585][ T6227] netlink: 'syz.4.75': attribute type 11 has an invalid length. [ 98.445139][ T6227] netlink: 220 bytes leftover after parsing attributes in process `syz.4.75'. [ 98.532634][ T6231] syzkaller0: entered promiscuous mode [ 98.540503][ T6231] syzkaller0: entered allmulticast mode [ 98.910619][ T6255] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 98.951218][ T6256] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 99.423651][ T6277] Unsupported ieee802154 address type: 0 [ 100.113376][ T6256] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 100.288713][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 100.297602][ T6284] openvswitch: netlink: IP tunnel dst address not specified [ 101.067200][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 101.094277][ T6315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.296852][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 101.323496][ T6315] netlink: 'syz.1.97': attribute type 1 has an invalid length. [ 101.365102][ T6332] netlink: 'syz.2.101': attribute type 11 has an invalid length. [ 101.396054][ T6332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.101'. [ 101.445040][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 101.671035][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.101'. [ 124.582453][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.105'. [ 124.719984][ T6378] IPVS: length: 157 != 24 [ 124.747810][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 124.778179][ T6380] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.801306][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 124.843692][ T6378] 8021q: VLANs not supported on wg0 [ 125.217614][ T6401] dvmrp8: entered allmulticast mode [ 125.303076][ T6398] dvmrp8: left allmulticast mode [ 125.505143][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 125.546768][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 125.583534][ T6420] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 125.612016][ T6422] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 125.646950][ T6420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.663238][ T6422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.348032][ T6461] netlink: 'syz.3.134': attribute type 21 has an invalid length. [ 126.436247][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 126.485121][ T6461] netlink: 'syz.3.134': attribute type 6 has an invalid length. [ 126.536601][ T6461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.134'. [ 126.550345][ T6467] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 126.558051][ T6467] netlink: 224 bytes leftover after parsing attributes in process `syz.1.135'. [ 126.629666][ T2977] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.655838][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 126.683575][ T2977] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.704661][ T2977] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.855425][ T6482] bridge1: port 1(veth3) entered blocking state [ 126.862736][ T6482] bridge1: port 1(veth3) entered disabled state [ 126.874716][ T6482] veth3: entered allmulticast mode [ 126.894248][ T6482] veth3: entered promiscuous mode [ 126.908482][ T6492] netlink: 100 bytes leftover after parsing attributes in process `syz.3.141'. [ 126.920291][ T2977] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.032157][ T6503] netlink: 'syz.1.142': attribute type 9 has an invalid length. [ 127.073281][ T6503] netlink: 'syz.1.142': attribute type 9 has an invalid length. [ 127.101350][ T6505] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 127.828869][ T6542] gretap0: entered promiscuous mode [ 127.855135][ T6542] gretap0: left promiscuous mode [ 128.016534][ T6548] bond1 (unregistering): Released all slaves [ 128.514337][ T6531] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 128.676073][ T6577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.791410][ T6588] netlink: 'syz.0.167': attribute type 10 has an invalid length. [ 128.839336][ T6587] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 128.903599][ T6587] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 129.005561][ T6588] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 129.017891][ T6588] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 129.049084][ T6588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.182430][ T6606] netlink: 'syz.3.171': attribute type 8 has an invalid length. [ 129.651533][ T6636] ip6gre1: entered allmulticast mode [ 129.760954][ T6643] IPVS: set_ctl: invalid protocol: 51 172.20.20.46:20003 [ 130.187522][ T6664] __nla_validate_parse: 4 callbacks suppressed [ 130.187564][ T6664] netlink: 29 bytes leftover after parsing attributes in process `syz.0.187'. [ 130.263676][ T6668] netlink: 'syz.3.189': attribute type 30 has an invalid length. [ 130.439179][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 130.492962][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.538294][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.582533][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.599658][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.736716][ T5935] IPVS: starting estimator thread 0... [ 130.745919][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.196'. [ 130.750152][ T6690] IPVS: ip_vs_add_dest(): server weight less than zero [ 130.765798][ T6690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.850091][ T6694] IPVS: using max 29 ests per chain, 69600 per kthread [ 130.903107][ T6696] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 131.013423][ T6700] syzkaller0: entered promiscuous mode [ 131.028172][ T6700] syzkaller0: entered allmulticast mode [ 132.579014][ T6740] batman_adv: batadv0: Adding interface: dummy0 [ 132.608375][ T6740] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.617928][ T6746] netlink: 256 bytes leftover after parsing attributes in process `syz.2.211'. [ 132.652115][ T5928] IPVS: starting estimator thread 0... [ 132.668947][ T6746] netlink: 'syz.2.211': attribute type 9 has an invalid length. [ 132.677946][ T6740] batman_adv: batadv0: Interface activated: dummy0 [ 132.760612][ T6751] IPVS: using max 28 ests per chain, 67200 per kthread [ 132.783350][ T6753] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 132.807149][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822034][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858297][ T6757] batadv0: mtu less than device minimum [ 132.871954][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 132.884045][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 132.896009][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 132.907998][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 132.920030][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 132.931996][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 132.943936][ T6757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 133.001076][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 133.073500][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 133.275554][ T6778] dvmrp8: entered allmulticast mode [ 133.448598][ T3011] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 133.483736][ T6777] dvmrp8: left allmulticast mode [ 133.666654][ T6804] lo: entered promiscuous mode [ 133.668645][ T6806] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.224'. [ 133.684351][ T6804] tunl0: entered promiscuous mode [ 133.693093][ T6804] gre0: entered promiscuous mode [ 133.706242][ T6804] gretap0: entered promiscuous mode [ 133.717294][ T6804] erspan0: entered promiscuous mode [ 133.728216][ T6804] ip_vti0: entered promiscuous mode [ 133.735645][ T6804] ip6_vti0: entered promiscuous mode [ 133.744839][ T6804] sit0: entered promiscuous mode [ 133.755910][ T6804] ip6tnl0: entered promiscuous mode [ 133.766170][ T6804] ip6gre0: entered promiscuous mode [ 133.774794][ T6804] syz_tun: entered promiscuous mode [ 133.784553][ T6804] ip6gretap0: entered promiscuous mode [ 133.792605][ T6804] bridge0: entered promiscuous mode [ 133.798242][ T6804] vcan0: entered promiscuous mode [ 133.805858][ T6804] bond0: entered promiscuous mode [ 133.814016][ T6804] bond_slave_0: entered promiscuous mode [ 133.823173][ T6804] bond_slave_1: entered promiscuous mode [ 133.835469][ T6804] team0: entered promiscuous mode [ 133.840839][ T6804] team_slave_0: entered promiscuous mode [ 133.846669][ T6804] team_slave_1: entered promiscuous mode [ 133.856223][ T6804] batman_adv: batadv0: Interface deactivated: dummy0 [ 133.864460][ T6804] dummy0: entered promiscuous mode [ 133.871446][ T6804] nlmon0: entered promiscuous mode [ 133.878010][ T6804] caif0: entered promiscuous mode [ 133.883685][ T6804] batadv0: entered promiscuous mode [ 133.894298][ T6804] veth0: entered promiscuous mode [ 133.902458][ T6804] veth1: entered promiscuous mode [ 133.912034][ T6804] wg0: entered promiscuous mode [ 133.921520][ T6804] wg1: entered promiscuous mode [ 133.928507][ T6804] wg2: entered promiscuous mode [ 133.936309][ T6804] veth0_to_bridge: entered promiscuous mode [ 133.947936][ T6804] veth1_to_bridge: entered promiscuous mode [ 133.960869][ T6804] veth0_to_bond: entered promiscuous mode [ 133.971762][ T6804] veth1_to_bond: entered promiscuous mode [ 133.982535][ T6804] veth0_to_team: entered promiscuous mode [ 133.993070][ T6804] veth1_to_team: entered promiscuous mode [ 134.005153][ T6804] veth0_to_batadv: entered promiscuous mode [ 134.013794][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.022625][ T6804] batadv_slave_0: entered promiscuous mode [ 134.032133][ T6804] veth1_to_batadv: entered promiscuous mode [ 134.040755][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.048413][ T6804] batadv_slave_1: entered promiscuous mode [ 134.057689][ T6804] xfrm0: entered promiscuous mode [ 134.065376][ T6804] veth0_to_hsr: entered promiscuous mode [ 134.076058][ T6804] veth1_to_hsr: entered promiscuous mode [ 134.087709][ T6804] hsr0: entered promiscuous mode [ 134.097907][ T6804] veth1_virt_wifi: entered promiscuous mode [ 134.107335][ T6804] veth0_virt_wifi: entered promiscuous mode [ 134.116565][ T6804] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 134.139629][ T6804] vlan0: entered promiscuous mode [ 134.151069][ T6804] vlan1: entered promiscuous mode [ 134.211775][ T6804] macvlan0: entered promiscuous mode [ 134.253043][ T6804] macvlan1: entered promiscuous mode [ 134.277269][ T6804] ipvlan0: entered promiscuous mode [ 134.285503][ T6804] ipvlan1: entered promiscuous mode [ 134.304356][ T6804] macvtap0: entered promiscuous mode [ 134.317501][ T6804] macsec0: entered promiscuous mode [ 134.332822][ T6804] geneve0: entered promiscuous mode [ 134.345613][ T6804] geneve1: entered promiscuous mode [ 134.355961][ T6804] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.368894][ T6804] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 134.379766][ T6804] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 134.392508][ T6804] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 134.413767][ T6804] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 134.436569][ T6804] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 134.448868][ T6804] pim6reg: entered promiscuous mode [ 134.458038][ T6804] gretap1: entered promiscuous mode [ 134.466983][ T6804] bond1: entered promiscuous mode [ 134.475250][ T6804] ip6gre1: entered promiscuous mode [ 134.563741][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 134.593556][ T6819] ip6gre2: entered allmulticast mode [ 134.617344][ T2957] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.628113][ T2957] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.644678][ T2957] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.698711][ T2957] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.869490][ T6841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.231'. [ 134.902537][ T6854] netlink: 'syz.0.234': attribute type 5 has an invalid length. [ 134.911201][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 135.356356][ T6872] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 135.389203][ T6874] __nla_validate_parse: 2 callbacks suppressed [ 135.389220][ T6874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.243'. [ 135.661366][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'. [ 135.785408][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 135.870055][ T6895] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 135.877747][ T6895] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 135.888407][ T6895] netlink: 192 bytes leftover after parsing attributes in process `syz.2.251'. [ 136.111173][ T6915] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 136.129210][ T6917] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 136.129427][ T6914] netlink: 'syz.0.256': attribute type 2 has an invalid length. [ 136.152257][ T6917] netlink: 224 bytes leftover after parsing attributes in process `syz.3.257'. [ 136.183256][ T6914] netlink: 119 bytes leftover after parsing attributes in process `syz.0.256'. [ 136.193089][ T6918] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 136.213040][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 136.347518][ T6925] vlan1: entered allmulticast mode [ 136.353140][ T6925] veth0_vlan: entered allmulticast mode [ 136.407102][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 136.608196][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'. [ 136.646691][ T6941] netlink: 'syz.1.266': attribute type 3 has an invalid length. [ 136.671504][ T6941] netlink: 766 bytes leftover after parsing attributes in process `syz.1.266'. [ 137.009489][ T6959] team0: Port device 0! added [ 137.106835][ T6966] netlink: 'syz.4.273': attribute type 11 has an invalid length. [ 137.403434][ T6976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.511836][ T6977] bond2: (slave gretap2): making interface the new active one [ 137.544624][ T6977] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 137.553865][ T6984] batman_adv: batadv0: Removing interface: dummy0 [ 137.555891][ T6977] syz.4.275 (6977) used greatest stack depth: 18232 bytes left [ 137.572881][ T6984] bridge_slave_0: left allmulticast mode [ 137.579642][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.652484][ T6984] bridge_slave_1: left allmulticast mode [ 137.663124][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.676089][ T5928] IPVS: starting estimator thread 0... [ 137.692168][ T6984] bond0: (slave bond_slave_0): Releasing backup interface [ 137.718999][ T6984] bond0: (slave bond_slave_1): Releasing backup interface [ 137.734718][ T6984] team0: Port device team_slave_0 removed [ 137.744800][ T6984] team0: Port device team_slave_1 removed [ 137.753258][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.764602][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.783658][ T7000] IPVS: using max 31 ests per chain, 74400 per kthread [ 137.927646][ T7007] validate_nla: 3 callbacks suppressed [ 137.927666][ T7007] netlink: 'syz.1.283': attribute type 29 has an invalid length. [ 139.449716][ T7050] tipc: Enabling of bearer rejected, failed to enable media [ 139.588061][ T7058] tipc: Enabling of bearer rejected, failed to enable media [ 139.785233][ T7071] netlink: 'syz.3.300': attribute type 21 has an invalid length. [ 139.793561][ T7071] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 140.115655][ T7086] team0: Device gtp0 is up. Set it down before adding it as a team port [ 140.153479][ T7087] team0: Device gtp0 is up. Set it down before adding it as a team port [ 140.547510][ T7100] __nla_validate_parse: 6 callbacks suppressed [ 140.547529][ T7100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.311'. [ 140.564175][ T7100] netlink: 6 bytes leftover after parsing attributes in process `syz.4.311'. [ 140.822211][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'. [ 140.892269][ T7121] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 140.968181][ T7126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.319'. [ 140.976970][ T7121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.010351][ T7128] bond1: (slave veth3): Enslaving as an active interface with a down link [ 141.066836][ T7121] veth5: entered promiscuous mode [ 141.083498][ T7121] bond1: (slave veth5): Enslaving as an active interface with a down link [ 141.188222][ T7128] vlan2: entered allmulticast mode [ 141.213454][ T7128] bond1: entered allmulticast mode [ 141.241156][ T7128] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.274701][ T7141] netlink: 'syz.0.322': attribute type 4 has an invalid length. [ 141.326976][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 141.499098][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 141.544992][ T7155] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 141.559072][ T7155] team0: Device hsr_slave_0 failed to register rx_handler [ 142.242573][ T7191] pim6reg1: entered promiscuous mode [ 142.256539][ T7191] pim6reg1: entered allmulticast mode [ 142.273270][ T7196] netlink: 256 bytes leftover after parsing attributes in process `syz.2.337'. [ 142.323927][ T7200] sock: sock_timestamping_bind_phc: sock not bind to device [ 142.337733][ T7199] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.382276][ T7200] syzkaller0: entered promiscuous mode [ 142.396328][ T7200] syzkaller0: entered allmulticast mode [ 142.404795][ T7204] netlink: 'syz.1.333': attribute type 16 has an invalid length. [ 142.416600][ T7199] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.424041][ T7204] netlink: 'syz.1.333': attribute type 17 has an invalid length. [ 142.534069][ T7204] net_ratelimit: 15 callbacks suppressed [ 142.534079][ T7204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.597983][ T7205] tc_dump_action: action bad kind [ 142.712601][ T7210] lo speed is unknown, defaulting to 1000 [ 142.727276][ T7210] lo speed is unknown, defaulting to 1000 [ 142.739097][ T7210] lo speed is unknown, defaulting to 1000 [ 142.954399][ T7227] netlink: 104 bytes leftover after parsing attributes in process `syz.0.343'. [ 142.969456][ T7222] tipc: Enabling of bearer rejected, media not registered [ 143.439351][ T9] lo speed is unknown, defaulting to 1000 [ 143.447734][ T7210] infiniband syz0: set active [ 143.456356][ T7210] infiniband syz0: added lo [ 143.480559][ T7210] syz0: rxe_create_cq: returned err = -12 [ 143.486556][ T7210] infiniband syz0: Couldn't create ib_mad CQ [ 143.510346][ T7210] infiniband syz0: Couldn't open port 1 [ 143.644657][ T7210] RDS/IB: syz0: added [ 143.663587][ T7210] smc: adding ib device syz0 with port count 1 [ 143.697085][ T7210] smc: ib device syz0 port 1 has pnetid [ 143.704852][ T43] lo speed is unknown, defaulting to 1000 [ 143.802542][ T7210] lo speed is unknown, defaulting to 1000 [ 143.973286][ T7281] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 144.009961][ T7281] netlink: 'syz.2.357': attribute type 2 has an invalid length. [ 144.169235][ T7281] syzkaller0: entered allmulticast mode [ 145.202635][ T7210] lo speed is unknown, defaulting to 1000 [ 145.203217][ T7300] syz_tun: entered allmulticast mode [ 145.227022][ T7302] dvmrp8: entered allmulticast mode [ 145.232736][ T7302] syz_tun: left allmulticast mode [ 145.238070][ T7302] dvmrp8: left allmulticast mode [ 145.405587][ T7309] IPVS: length: 255 != 8 [ 145.455418][ T7311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.522174][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 145.707874][ T7320] netlink: 'syz.2.364': attribute type 39 has an invalid length. [ 145.816996][ T7210] lo speed is unknown, defaulting to 1000 [ 146.075948][ T7336] netlink: 'syz.2.371': attribute type 39 has an invalid length. [ 146.254026][ T7344] netlink: 'syz.3.373': attribute type 4 has an invalid length. [ 146.315711][ T7344] netlink: 'syz.3.373': attribute type 4 has an invalid length. [ 146.521331][ T7210] lo speed is unknown, defaulting to 1000 [ 146.609179][ T7353] netlink: 96 bytes leftover after parsing attributes in process `syz.0.377'. [ 146.817072][ T7364] netlink: 192 bytes leftover after parsing attributes in process `syz.0.379'. [ 146.993776][ T7210] lo speed is unknown, defaulting to 1000 [ 147.299072][ T7384] IPVS: Error connecting to the multicast addr [ 147.390150][ T7388] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.386'. [ 147.662790][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 147.687544][ T7395] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 147.717986][ T7395] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 147.937460][ T7405] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 147.976409][ T7405] bridge0: left promiscuous mode [ 147.981618][ T7408] netlink: 48 bytes leftover after parsing attributes in process `syz.1.393'. [ 148.007733][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 148.012200][ T7412] FAULT_INJECTION: forcing a failure. [ 148.012200][ T7412] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 148.053564][ T7412] CPU: 0 UID: 0 PID: 7412 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 148.053591][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.053611][ T7412] Call Trace: [ 148.053620][ T7412] [ 148.053629][ T7412] dump_stack_lvl+0x189/0x250 [ 148.053658][ T7412] ? __pfx____ratelimit+0x10/0x10 [ 148.053689][ T7412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.053712][ T7412] ? __pfx__printk+0x10/0x10 [ 148.053739][ T7412] ? __might_fault+0xb0/0x130 [ 148.053776][ T7412] should_fail_ex+0x414/0x560 [ 148.053808][ T7412] _copy_from_user+0x2d/0xb0 [ 148.053832][ T7412] ___sys_sendmsg+0x158/0x2a0 [ 148.053862][ T7412] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.053940][ T7412] ? __fget_files+0x2a/0x420 [ 148.053957][ T7412] ? __fget_files+0x3a0/0x420 [ 148.053985][ T7412] __x64_sys_sendmsg+0x19b/0x260 [ 148.054009][ T7412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.054042][ T7412] ? __pfx_ksys_write+0x10/0x10 [ 148.054066][ T7412] ? rcu_is_watching+0x15/0xb0 [ 148.054092][ T7412] ? do_syscall_64+0xbe/0x3b0 [ 148.054114][ T7412] do_syscall_64+0xfa/0x3b0 [ 148.054131][ T7412] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.054160][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.054180][ T7412] ? clear_bhb_loop+0x60/0xb0 [ 148.054203][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.054222][ T7412] RIP: 0033:0x7f0b2918eba9 [ 148.054250][ T7412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.054266][ T7412] RSP: 002b:00007f0b29ff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.054292][ T7412] RAX: ffffffffffffffda RBX: 00007f0b293d5fa0 RCX: 00007f0b2918eba9 [ 148.054306][ T7412] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 148.054319][ T7412] RBP: 00007f0b29ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 148.054331][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.054342][ T7412] R13: 00007f0b293d6038 R14: 00007f0b293d5fa0 R15: 00007fff38d663f8 [ 148.054373][ T7412] [ 148.060513][ T7405] bridge0: entered promiscuous mode [ 148.336766][ T7405] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.454389][ T7411] bond0: (slave bridge0): Releasing backup interface [ 148.466657][ T7411] bridge0 (unregistering): left promiscuous mode [ 148.582718][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.397'. [ 148.653174][ T7437] netlink: 'syz.4.400': attribute type 5 has an invalid length. [ 148.700563][ T7437] netlink: 192 bytes leftover after parsing attributes in process `syz.4.400'. [ 149.578823][ T7490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.415'. [ 149.594086][ T7490] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 149.602616][ T7490] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 149.617878][ T7490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.415'. [ 151.676651][ T7558] __nla_validate_parse: 5 callbacks suppressed [ 151.676670][ T7558] netlink: 128 bytes leftover after parsing attributes in process `syz.0.432'. [ 151.705031][ T7559] netlink: 128 bytes leftover after parsing attributes in process `syz.0.432'. [ 152.289342][ T7587] FAULT_INJECTION: forcing a failure. [ 152.289342][ T7587] name failslab, interval 1, probability 0, space 0, times 1 [ 152.336635][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT(full) [ 152.336662][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.336675][ T7587] Call Trace: [ 152.336683][ T7587] [ 152.336692][ T7587] dump_stack_lvl+0x189/0x250 [ 152.336723][ T7587] ? __pfx____ratelimit+0x10/0x10 [ 152.336754][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.336778][ T7587] ? __pfx__printk+0x10/0x10 [ 152.336810][ T7587] ? __pfx___might_resched+0x10/0x10 [ 152.336830][ T7587] ? fs_reclaim_acquire+0x7d/0x100 [ 152.336867][ T7587] should_fail_ex+0x414/0x560 [ 152.336900][ T7587] should_failslab+0xa8/0x100 [ 152.336931][ T7587] __kmalloc_noprof+0xcb/0x4f0 [ 152.336957][ T7587] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 152.336990][ T7587] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 152.337033][ T7587] genl_family_rcv_msg_doit+0xb8/0x300 [ 152.337067][ T7587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 152.337101][ T7587] ? apparmor_capable+0x137/0x1b0 [ 152.337129][ T7587] ? bpf_lsm_capable+0x9/0x20 [ 152.337155][ T7587] ? security_capable+0x7e/0x2e0 [ 152.337193][ T7587] genl_rcv_msg+0x60e/0x790 [ 152.337226][ T7587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.337248][ T7587] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 152.337271][ T7587] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 152.337298][ T7587] ? __pfx_nl80211_post_doit+0x10/0x10 [ 152.337350][ T7587] netlink_rcv_skb+0x205/0x470 [ 152.337376][ T7587] ? __lock_acquire+0xab9/0xd20 [ 152.337415][ T7587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.337439][ T7587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.337484][ T7587] ? down_read+0x1ad/0x2e0 [ 152.337506][ T7587] genl_rcv+0x28/0x40 [ 152.337526][ T7587] netlink_unicast+0x82f/0x9e0 [ 152.337560][ T7587] ? __pfx_netlink_unicast+0x10/0x10 [ 152.337587][ T7587] ? netlink_sendmsg+0x642/0xb30 [ 152.337602][ T7587] ? skb_put+0x11b/0x210 [ 152.337624][ T7587] netlink_sendmsg+0x805/0xb30 [ 152.337651][ T7587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.337673][ T7587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 152.337692][ T7587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.337711][ T7587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.337730][ T7587] __sock_sendmsg+0x21c/0x270 [ 152.337759][ T7587] ____sys_sendmsg+0x505/0x830 [ 152.337787][ T7587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.337822][ T7587] ? import_iovec+0x74/0xa0 [ 152.337848][ T7587] ___sys_sendmsg+0x21f/0x2a0 [ 152.337872][ T7587] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.337929][ T7587] ? __fget_files+0x2a/0x420 [ 152.337944][ T7587] ? __fget_files+0x3a0/0x420 [ 152.337971][ T7587] __x64_sys_sendmsg+0x19b/0x260 [ 152.337996][ T7587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.338032][ T7587] ? __pfx_ksys_write+0x10/0x10 [ 152.338054][ T7587] ? rcu_is_watching+0x15/0xb0 [ 152.338077][ T7587] ? do_syscall_64+0xbe/0x3b0 [ 152.338099][ T7587] do_syscall_64+0xfa/0x3b0 [ 152.338115][ T7587] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.338142][ T7587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.338160][ T7587] ? clear_bhb_loop+0x60/0xb0 [ 152.338183][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.338200][ T7587] RIP: 0033:0x7f155db8eba9 [ 152.338216][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.338231][ T7587] RSP: 002b:00007f155eae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.338250][ T7587] RAX: ffffffffffffffda RBX: 00007f155ddd5fa0 RCX: 00007f155db8eba9 [ 152.338263][ T7587] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000003 [ 152.338274][ T7587] RBP: 00007f155eae0090 R08: 0000000000000000 R09: 0000000000000000 [ 152.338285][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.338295][ T7587] R13: 00007f155ddd6038 R14: 00007f155ddd5fa0 R15: 00007ffc8b0a7008 [ 152.338326][ T7587] [ 153.039640][ T7591] Bluetooth: MGMT ver 1.23 [ 153.108977][ T7610] netlink: 48 bytes leftover after parsing attributes in process `syz.1.445'. [ 153.159585][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.445'. [ 153.227851][ T7610] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 153.314930][ T7610] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 153.368216][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 153.383303][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 153.413294][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 153.466878][ T7621] bridge0: port 3(vlan2) entered blocking state [ 153.506999][ T7621] bridge0: port 3(vlan2) entered disabled state [ 153.530127][ T7621] vlan2: entered allmulticast mode [ 153.560045][ T7621] bridge0: entered allmulticast mode [ 153.606447][ T7621] vlan2: left allmulticast mode [ 153.638081][ T7621] bridge0: left allmulticast mode [ 153.829526][ T7635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 153.887325][ T7638] FAULT_INJECTION: forcing a failure. [ 153.887325][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.917906][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.4.451 Not tainted syzkaller #0 PREEMPT(full) [ 153.917933][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.917945][ T7638] Call Trace: [ 153.917952][ T7638] [ 153.917961][ T7638] dump_stack_lvl+0x189/0x250 [ 153.917989][ T7638] ? __pfx____ratelimit+0x10/0x10 [ 153.918019][ T7638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.918053][ T7638] ? __pfx__printk+0x10/0x10 [ 153.918079][ T7638] ? __might_fault+0xb0/0x130 [ 153.918114][ T7638] should_fail_ex+0x414/0x560 [ 153.918143][ T7638] _copy_from_user+0x2d/0xb0 [ 153.918183][ T7638] ___sys_sendmsg+0x158/0x2a0 [ 153.918207][ T7638] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.918267][ T7638] ? __fget_files+0x2a/0x420 [ 153.918284][ T7638] ? __fget_files+0x3a0/0x420 [ 153.918312][ T7638] __x64_sys_sendmsg+0x19b/0x260 [ 153.918338][ T7638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.918370][ T7638] ? __pfx_ksys_write+0x10/0x10 [ 153.918394][ T7638] ? rcu_is_watching+0x15/0xb0 [ 153.918419][ T7638] ? do_syscall_64+0xbe/0x3b0 [ 153.918442][ T7638] do_syscall_64+0xfa/0x3b0 [ 153.918459][ T7638] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.918487][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.918507][ T7638] ? clear_bhb_loop+0x60/0xb0 [ 153.918531][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.918550][ T7638] RIP: 0033:0x7fcd7ed8eba9 [ 153.918567][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.918583][ T7638] RSP: 002b:00007fcd7fcaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.918616][ T7638] RAX: ffffffffffffffda RBX: 00007fcd7efd5fa0 RCX: 00007fcd7ed8eba9 [ 153.918629][ T7638] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 153.918641][ T7638] RBP: 00007fcd7fcaa090 R08: 0000000000000000 R09: 0000000000000000 [ 153.918652][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.918662][ T7638] R13: 00007fcd7efd6038 R14: 00007fcd7efd5fa0 R15: 00007ffdcb25eb88 [ 153.918690][ T7638] [ 154.393362][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 154.780516][ T7676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.880339][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 154.985325][ T7690] FAULT_INJECTION: forcing a failure. [ 154.985325][ T7690] name failslab, interval 1, probability 0, space 0, times 0 [ 155.017337][ T7690] CPU: 1 UID: 0 PID: 7690 Comm: syz.3.464 Not tainted syzkaller #0 PREEMPT(full) [ 155.017376][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.017387][ T7690] Call Trace: [ 155.017395][ T7690] [ 155.017403][ T7690] dump_stack_lvl+0x189/0x250 [ 155.017431][ T7690] ? __pfx____ratelimit+0x10/0x10 [ 155.017459][ T7690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.017481][ T7690] ? __pfx__printk+0x10/0x10 [ 155.017513][ T7690] ? __pfx___might_resched+0x10/0x10 [ 155.017535][ T7690] should_fail_ex+0x414/0x560 [ 155.017566][ T7690] should_failslab+0xa8/0x100 [ 155.017596][ T7690] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 155.017622][ T7690] ? __alloc_skb+0x112/0x2d0 [ 155.017645][ T7690] __alloc_skb+0x112/0x2d0 [ 155.017666][ T7690] netlink_sendmsg+0x5c6/0xb30 [ 155.017694][ T7690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.017715][ T7690] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.017736][ T7690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.017755][ T7690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.017779][ T7690] __sock_sendmsg+0x21c/0x270 [ 155.017808][ T7690] ____sys_sendmsg+0x505/0x830 [ 155.017835][ T7690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.017864][ T7690] ? import_iovec+0x74/0xa0 [ 155.017890][ T7690] ___sys_sendmsg+0x21f/0x2a0 [ 155.017913][ T7690] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.017970][ T7690] ? __fget_files+0x2a/0x420 [ 155.017985][ T7690] ? __fget_files+0x3a0/0x420 [ 155.018012][ T7690] __x64_sys_sendmsg+0x19b/0x260 [ 155.018035][ T7690] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.018065][ T7690] ? __pfx_ksys_write+0x10/0x10 [ 155.018087][ T7690] ? rcu_is_watching+0x15/0xb0 [ 155.018111][ T7690] ? do_syscall_64+0xbe/0x3b0 [ 155.018132][ T7690] do_syscall_64+0xfa/0x3b0 [ 155.018148][ T7690] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.018173][ T7690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.018190][ T7690] ? clear_bhb_loop+0x60/0xb0 [ 155.018212][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.018229][ T7690] RIP: 0033:0x7f155db8eba9 [ 155.018246][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.018260][ T7690] RSP: 002b:00007f155eae0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.018280][ T7690] RAX: ffffffffffffffda RBX: 00007f155ddd5fa0 RCX: 00007f155db8eba9 [ 155.018297][ T7690] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 155.018309][ T7690] RBP: 00007f155eae0090 R08: 0000000000000000 R09: 0000000000000000 [ 155.018320][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.018330][ T7690] R13: 00007f155ddd6038 R14: 00007f155ddd5fa0 R15: 00007ffc8b0a7008 [ 155.018360][ T7690] [ 155.034950][ T7692] xt_socket: unknown flags 0xd0 [ 155.302247][ T7704] openvswitch: netlink: Flow key attr not present in new flow. [ 155.442639][ T7704] gtp0: entered promiscuous mode [ 155.447755][ T7704] gtp0: entered allmulticast mode [ 155.762131][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 155.784143][ T7726] ksmbd: Unknown IPC event: 3, ignore. [ 156.071084][ T7744] netlink: 'syz.4.477': attribute type 83 has an invalid length. [ 156.419652][ T7768] FAULT_INJECTION: forcing a failure. [ 156.419652][ T7768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.453305][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 156.453330][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.453341][ T7768] Call Trace: [ 156.453349][ T7768] [ 156.453364][ T7768] dump_stack_lvl+0x189/0x250 [ 156.453390][ T7768] ? __pfx____ratelimit+0x10/0x10 [ 156.453419][ T7768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.453439][ T7768] ? __pfx__printk+0x10/0x10 [ 156.453465][ T7768] ? __might_fault+0xb0/0x130 [ 156.453501][ T7768] should_fail_ex+0x414/0x560 [ 156.453531][ T7768] _copy_from_iter+0x1de/0x1790 [ 156.453558][ T7768] ? rcu_is_watching+0x15/0xb0 [ 156.453578][ T7768] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 156.453605][ T7768] ? __pfx__copy_from_iter+0x10/0x10 [ 156.453624][ T7768] ? __build_skb_around+0x257/0x3e0 [ 156.453646][ T7768] ? netlink_sendmsg+0x642/0xb30 [ 156.453661][ T7768] ? skb_put+0x11b/0x210 [ 156.453683][ T7768] netlink_sendmsg+0x6b2/0xb30 [ 156.453709][ T7768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.453730][ T7768] ? aa_sock_msg_perm+0xf1/0x1d0 [ 156.453749][ T7768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.453768][ T7768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.453786][ T7768] __sock_sendmsg+0x21c/0x270 [ 156.453814][ T7768] ____sys_sendmsg+0x505/0x830 [ 156.453845][ T7768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.453875][ T7768] ? import_iovec+0x74/0xa0 [ 156.453899][ T7768] ___sys_sendmsg+0x21f/0x2a0 [ 156.453921][ T7768] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.453978][ T7768] ? __fget_files+0x2a/0x420 [ 156.453993][ T7768] ? __fget_files+0x3a0/0x420 [ 156.454019][ T7768] __x64_sys_sendmsg+0x19b/0x260 [ 156.454042][ T7768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.454072][ T7768] ? __pfx_ksys_write+0x10/0x10 [ 156.454094][ T7768] ? rcu_is_watching+0x15/0xb0 [ 156.454118][ T7768] ? do_syscall_64+0xbe/0x3b0 [ 156.454139][ T7768] do_syscall_64+0xfa/0x3b0 [ 156.454155][ T7768] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.454181][ T7768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.454199][ T7768] ? clear_bhb_loop+0x60/0xb0 [ 156.454221][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.454238][ T7768] RIP: 0033:0x7f0b2918eba9 [ 156.454254][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.454269][ T7768] RSP: 002b:00007f0b29ff8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.454288][ T7768] RAX: ffffffffffffffda RBX: 00007f0b293d5fa0 RCX: 00007f0b2918eba9 [ 156.454301][ T7768] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 156.454313][ T7768] RBP: 00007f0b29ff8090 R08: 0000000000000000 R09: 0000000000000000 [ 156.454323][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.454353][ T7768] R13: 00007f0b293d6038 R14: 00007f0b293d5fa0 R15: 00007fff38d663f8 [ 156.454388][ T7768] [ 156.874688][ T1228] lo speed is unknown, defaulting to 1000 [ 156.895781][ T7778] gtp0: entered promiscuous mode [ 156.928984][ T7778] gtp0: entered allmulticast mode [ 157.194086][ T7796] __nla_validate_parse: 9 callbacks suppressed [ 157.194104][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 157.226036][ T7796] macvlan0: left promiscuous mode [ 157.247587][ T7796] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 157.248192][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 157.274581][ T7796] netlink: 'syz.3.496': attribute type 2 has an invalid length. [ 157.660374][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.503'. [ 157.704058][ T1163] tipc: Subscription rejected, illegal request [ 157.977697][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.507'. [ 158.769016][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 158.850291][ T7893] netlink: 100 bytes leftover after parsing attributes in process `syz.3.521'. [ 158.964077][ T7893] netlink: 104 bytes leftover after parsing attributes in process `syz.3.521'. [ 159.286484][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.529'. [ 159.370578][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'. [ 159.497728][ T7931] tipc: Started in network mode [ 159.511097][ T7931] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 159.536420][ T7931] tipc: Enabling of bearer rejected, failed to enable media [ 159.556825][ T7932] tipc: Enabling of bearer rejected, failed to enable media [ 159.900122][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 160.745408][ T7991] bridge0: port 1(veth5) entered blocking state [ 160.752178][ T7991] bridge0: port 1(veth5) entered disabled state [ 160.758779][ T7991] veth5: entered allmulticast mode [ 160.766689][ T7991] veth5: entered promiscuous mode [ 160.807161][ T7994] vlan2: entered allmulticast mode [ 160.817348][ T7994] veth0_to_bond: entered allmulticast mode [ 160.836268][ T7994] bridge0: port 2(vlan2) entered blocking state [ 160.856658][ T7994] bridge0: port 2(vlan2) entered disabled state [ 160.866781][ T7994] vlan2: entered promiscuous mode [ 161.156036][ T8016] netlink: 'syz.3.561': attribute type 6 has an invalid length. [ 162.192183][ T8058] netlink: 'syz.2.575': attribute type 8 has an invalid length. [ 162.333148][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.550282][ T8072] __nla_validate_parse: 5 callbacks suppressed [ 162.550301][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.580'. [ 162.573927][ T8072] netlink: 'syz.4.580': attribute type 7 has an invalid length. [ 162.628873][ T8072] netlink: 'syz.4.580': attribute type 8 has an invalid length. [ 162.666229][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 162.879421][ T8086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.931321][ T8097] syzkaller0: entered promiscuous mode [ 162.937017][ T8097] syzkaller0: entered allmulticast mode [ 163.009629][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.590'. [ 163.025257][ T8086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.150973][ T8086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.217574][ T8086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.318392][ T8108] C: renamed from lo (while UP) [ 163.341887][ T8108] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 163.433531][ T2957] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.463392][ T2957] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.492386][ T2957] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.554166][ T2957] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.563786][ T8120] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 163.662831][ T8124] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 163.675059][ T8124] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 163.697433][ T8094] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 163.762598][ T8120] gretap1: entered promiscuous mode [ 163.828281][ T8120] bond2: (slave gretap1): making interface the new active one [ 163.877901][ T8120] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 163.977352][ T8128] macvlan2: entered promiscuous mode [ 164.007419][ T8128] macvlan2: entered allmulticast mode [ 164.037602][ T8128] bond2: entered promiscuous mode [ 164.062123][ T8128] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.093450][ T8128] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 164.143478][ T8128] bond2: left promiscuous mode [ 164.359243][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 164.404964][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 164.435589][ T8161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.603'. [ 164.653598][ T8176] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 164.879484][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'. [ 164.897131][ T8187] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.612'. [ 164.910295][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 164.935918][ T8186] gretap1: entered promiscuous mode [ 164.960103][ T51] Bluetooth: hci3: command 0x0401 tx timeout [ 164.971065][ T8186] gretap1: entered allmulticast mode [ 165.303316][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 165.570397][ T8218] Bluetooth: MGMT ver 1.23 [ 165.629636][ T8218] team0: Device ip6gre1 is of different type [ 165.804254][ T8231] wg1: entered promiscuous mode [ 166.088958][ T8249] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 166.173402][ T8251] netlink: 'syz.3.622': attribute type 11 has an invalid length. [ 166.246564][ T8251] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 167.656272][ T8334] pim6reg1: entered promiscuous mode [ 167.662262][ T8334] pim6reg1: entered allmulticast mode [ 167.668127][ T8330] __nla_validate_parse: 8 callbacks suppressed [ 167.668143][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 167.896799][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 167.917373][ T8345] bond3: entered allmulticast mode [ 167.925815][ T8345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.933818][ T8345] bridge0: port 3(bond3) entered blocking state [ 167.941835][ T8345] bridge0: port 3(bond3) entered disabled state [ 167.951794][ T8345] bond3: entered promiscuous mode [ 167.957651][ T8345] bridge0: port 3(bond3) entered blocking state [ 167.964196][ T8345] bridge0: port 3(bond3) entered forwarding state [ 167.972486][ T8342] bridge_slave_1: left allmulticast mode [ 167.978800][ T8342] bridge_slave_1: left promiscuous mode [ 167.987159][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.999276][ T8345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.642'. [ 168.014309][ T8342] bridge_slave_0: left allmulticast mode [ 168.023172][ T8342] bridge_slave_0: left promiscuous mode [ 168.039464][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.121999][ T8319] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.128303][ T8319] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 168.147651][ T8319] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.179426][ T8319] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 168.208390][ T8319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.215121][ T8319] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 168.234920][ T8319] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.241208][ T8319] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 168.268449][ T8319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.307676][ T8319] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 168.589663][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 168.676279][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.957202][ T2919] bridge0: port 3(bond3) entered disabled state [ 169.014141][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 169.088588][ T8391] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.130224][ T8400] netlink: 'syz.4.651': attribute type 9 has an invalid length. [ 169.158191][ T8391] netlink: 'syz.4.651': attribute type 9 has an invalid length. [ 169.186954][ T8398] 8021q: VLANs not supported on gre0 [ 169.200561][ T8399] 8021q: VLANs not supported on gre0 [ 169.720755][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 169.736383][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 169.760795][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 169.789045][ T76] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.801854][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 169.820576][ T76] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.835124][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 169.861955][ T2919] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.879377][ T2919] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.937029][ T8434] : entered promiscuous mode [ 169.994086][ T8437] veth5: left allmulticast mode [ 170.014041][ T8437] veth5: left promiscuous mode [ 170.019190][ T8437] bridge0: port 1(veth5) entered disabled state [ 170.078665][ T8437] vlan2: left promiscuous mode [ 170.101957][ T8437] bridge0: port 2(vlan2) entered disabled state [ 170.335590][ T8457] tipc: Enabled bearer , priority 0 [ 170.376740][ T8456] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 170.404499][ T8458] syzkaller0: entered promiscuous mode [ 170.422904][ T8458] syzkaller0: entered allmulticast mode [ 170.531701][ T8458] tipc: Resetting bearer [ 170.656000][ T8458] tipc: Disabling bearer [ 171.077808][ T8493] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 171.086740][ T8493] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 171.267081][ T8503] tipc: Cannot configure node identity twice [ 171.274213][ T8501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.313436][ T8503] bond2: entered promiscuous mode [ 171.319464][ T8503] bond2: entered allmulticast mode [ 171.326645][ T8503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.464556][ T8503] bond2 (unregistering): Released all slaves [ 171.852641][ T8532] IPVS: set_ctl: invalid protocol: 11608 172.20.20.11:21 [ 171.966451][ T8533] pim6reg: entered allmulticast mode [ 172.130620][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.367669][ T8546] netlink: 'syz.1.687': attribute type 5 has an invalid length. [ 172.703191][ T8583] __nla_validate_parse: 10 callbacks suppressed [ 172.703209][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 172.810930][ T8596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.027146][ T8605] netlink: 364 bytes leftover after parsing attributes in process `syz.4.700'. [ 173.129637][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.180920][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.210556][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.235608][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.258063][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.275734][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.287898][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 173.302572][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 174.080698][ T8650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.141337][ T8650] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 174.318012][ T8661] netlink: 'syz.4.714': attribute type 10 has an invalid length. [ 174.354821][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.390317][ T8661] bridge_slave_1: left allmulticast mode [ 174.412573][ T8661] bridge_slave_1: left promiscuous mode [ 174.423837][ T8666] sctp: [Deprecated]: syz.1.715 (pid 8666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.423837][ T8666] Use struct sctp_sack_info instead [ 174.444670][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.487419][ T8661] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 174.765388][ T2919] bond0: (slave wlan1): link status definitely down, disabling slave [ 177.209448][ T8796] kthread_run failed with err -4 [ 177.273113][ T8805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.349067][ T8804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.696471][ T8827] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 177.732279][ T8827] __nla_validate_parse: 94 callbacks suppressed [ 177.732300][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 178.050256][ T8841] netlink: 'syz.3.761': attribute type 11 has an invalid length. [ 178.090319][ T8841] netlink: 224 bytes leftover after parsing attributes in process `syz.3.761'. [ 178.259685][ T8849] syzkaller1: entered promiscuous mode [ 178.291883][ T8849] syzkaller1: entered allmulticast mode [ 178.410695][ T8863] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 178.612587][ T8863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.698915][ T8869] bond4: (slave geneve2): making interface the new active one [ 178.723007][ T8869] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 178.743505][ T8868] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 178.750580][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 179.136160][ T8908] netlink: 'syz.1.774': attribute type 21 has an invalid length. [ 179.549564][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 179.676455][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 179.677762][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.743721][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.792069][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.847840][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.977093][ T8938] tap0: tun_chr_ioctl cmd 1074025676 [ 180.000119][ T8938] tap0: owner set to 0 [ 180.048126][ T8936] netlink: 'syz.1.781': attribute type 29 has an invalid length. [ 180.154871][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.783'. [ 180.287560][ T8956] netlink: 'syz.4.784': attribute type 10 has an invalid length. [ 180.444619][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'. [ 180.674892][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.788'. [ 180.732344][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 180.743052][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.788'. [ 180.787140][ T8979] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 181.305906][ T9009] netlink: 'syz.0.795': attribute type 39 has an invalid length. [ 181.831668][ T9037] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.950207][ T9044] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 182.054612][ T9053] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 182.261477][ T9053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.747831][ T9085] __nla_validate_parse: 4 callbacks suppressed [ 182.747851][ T9085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.813'. [ 182.887171][ T9091] ve: renamed from ipvlan1 [ 183.145770][ T9103] netlink: 9 bytes leftover after parsing attributes in process `syz.0.817'. [ 183.236742][ T9103] gretap0: entered promiscuous mode [ 183.274915][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 183.305927][ T9116] netlink: 'syz.4.818': attribute type 6 has an invalid length. [ 183.306828][ T9117] netlink: 'syz.4.818': attribute type 6 has an invalid length. [ 183.347517][ T9103] ieee802154 phy1 wpan1: encryption failed: -22 [ 183.369114][ T9103] netlink: 5 bytes leftover after parsing attributes in process `syz.0.817'. [ 183.402983][ T9103] 0ªî{X¹¦: renamed from gretap0 [ 183.425579][ T9103] 0ªî{X¹¦: left promiscuous mode [ 183.435996][ T9103] 0ªî{X¹¦: entered allmulticast mode [ 183.456038][ T9103] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 183.620285][ T9131] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 183.659547][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.824'. [ 183.699402][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.824'. [ 183.734864][ T9132] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 183.746539][ T9135] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 183.754521][ T9132] netlink: 'syz.3.824': attribute type 1 has an invalid length. [ 184.114015][ T9153] pimreg: entered allmulticast mode [ 184.169536][ T9157] tipc: Enabled bearer , priority 0 [ 184.379362][ T9153] syzkaller0: entered promiscuous mode [ 184.385354][ T9153] syzkaller0: entered allmulticast mode [ 184.391932][ T9153] tipc: Resetting bearer [ 184.445191][ T9151] tipc: Resetting bearer [ 185.062703][ T9] IPVS: starting estimator thread 0... [ 185.160697][ T9183] IPVS: using max 28 ests per chain, 67200 per kthread [ 185.170459][ T9] tipc: Node number set to 3640619788 [ 186.157316][ T9151] tipc: Disabling bearer [ 186.502996][ T9207] lo speed is unknown, defaulting to 1000 [ 186.814467][ T9228] nbd4: detected capacity change from 0 to 63 [ 187.084541][ T51] block nbd4: Receive control failed (result -104) [ 187.109710][ T9245] IPv6: sit1: Disabled Multicast RS [ 187.221922][ T9245] sit1: entered allmulticast mode [ 187.822935][ T9260] netlink: 256 bytes leftover after parsing attributes in process `syz.0.855'. [ 188.031789][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.857'. [ 188.467292][ T9286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.507309][ T9290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.861'. [ 188.547437][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.861'. [ 188.667480][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 189.331495][ T9331] netlink: 108 bytes leftover after parsing attributes in process `syz.2.871'. [ 189.494440][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 189.558943][ T9342] veth0_to_team: entered promiscuous mode [ 189.573568][ T9342] veth0_to_team: entered allmulticast mode [ 190.356083][ T9363] veth0: entered promiscuous mode [ 190.382228][ T9368] veth0: left promiscuous mode [ 190.398781][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 190.444341][ T9364] tap0: tun_chr_ioctl cmd 1074025677 [ 190.450319][ T9364] tap0: linktype set to 65534 [ 190.601385][ T9379] netlink: 'syz.3.888': attribute type 8 has an invalid length. [ 190.666144][ T9381] netlink: 104 bytes leftover after parsing attributes in process `syz.0.889'. [ 190.684859][ T9382] netlink: 'syz.3.888': attribute type 8 has an invalid length. [ 190.947407][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'. [ 191.949335][ T9454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.956913][ T9454] IPv6: NLM_F_CREATE should be set when creating new route [ 191.991366][ T9454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.537710][ T9490] syzkaller0: entered promiscuous mode [ 192.549525][ T9490] syzkaller0: entered allmulticast mode [ 192.574790][ T9487] tipc: Started in network mode [ 192.581332][ T9487] tipc: Node identity 6a653df76c32, cluster identity 4711 [ 192.589438][ T9487] tipc: Enabled bearer , priority 0 [ 192.627766][ T9493] unsupported nlmsg_type 40 [ 192.645920][ T9493] netlink: 'syz.2.920': attribute type 21 has an invalid length. [ 192.658930][ T9487] tipc: Resetting bearer [ 192.754573][ T9487] tipc: Disabling bearer [ 193.155812][ T9522] __nla_validate_parse: 6 callbacks suppressed [ 193.155912][ T9522] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.928'. [ 193.413478][ T9537] netlink: 256 bytes leftover after parsing attributes in process `syz.0.933'. [ 193.534173][ T9542] netlink: 9 bytes leftover after parsing attributes in process `syz.2.934'. [ 193.682797][ T9545] netlink: 48 bytes leftover after parsing attributes in process `syz.0.935'. [ 193.741991][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 194.079619][ T9563] kthread_run failed with err -4 [ 194.245974][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.264951][ T9577] veth1_macvtap: left promiscuous mode [ 194.271183][ T9577] macsec0: entered promiscuous mode [ 194.277469][ T9577] macsec0: entered allmulticast mode [ 194.307766][ T9573] veth1_macvtap: entered promiscuous mode [ 194.341191][ T9573] veth1_macvtap: entered allmulticast mode [ 194.347279][ T9573] macsec0: left promiscuous mode [ 194.376139][ T9573] macsec0: left allmulticast mode [ 194.380188][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.944'. [ 194.384845][ T9573] veth1_macvtap: left allmulticast mode [ 194.421559][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.945'. [ 194.893501][ T9608] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 194.903636][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 195.630547][ T9645] tipc: Started in network mode [ 195.635474][ T9645] tipc: Node identity e0000002, cluster identity 4711 [ 195.676826][ T9645] tipc: Enabling of bearer rejected, failed to enable media [ 195.714225][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 195.778847][ T9645] netlink: 'syz.1.960': attribute type 13 has an invalid length. [ 195.811810][ T9645] netlink: 'syz.1.960': attribute type 58 has an invalid length. [ 195.835319][ T9645] netlink: 152 bytes leftover after parsing attributes in process `syz.1.960'. [ 195.926309][ T9664] tipc: Enabling of bearer rejected, failed to enable media [ 196.478055][ T1163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.489519][ T1163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.519260][ T1163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.651318][ T9695] 8021q: VLANs not supported on vcan0 [ 196.680698][ T9699] bridge0: entered promiscuous mode [ 196.881570][ T9708] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 196.932381][ T9708] netlink: 'syz.1.980': attribute type 2 has an invalid length. [ 198.209611][ T9787] __nla_validate_parse: 7 callbacks suppressed [ 198.209629][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 198.259648][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.997'. [ 198.474317][ T9797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.870425][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 199.163396][ T9841] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1012'. [ 199.673476][ T9862] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1019'. [ 200.121934][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.152001][ T9846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.362381][ T9] lo speed is unknown, defaulting to 1000 [ 200.384870][ T9854] bridge0: left promiscuous mode [ 200.389993][ T9] syz0: Port: 1 Link DOWN [ 200.414600][ T9854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.519448][ T9884] netlink: 'syz.2.1020': attribute type 39 has an invalid length. [ 200.562785][ T1163] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.600137][ T1163] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.618207][ T1163] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.628819][ T1163] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.649280][ T9] lo speed is unknown, defaulting to 1000 [ 200.698835][ T9894] sctp: [Deprecated]: syz.4.1022 (pid 9894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.698835][ T9894] Use struct sctp_sack_info instead [ 200.736898][ T1163] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.777500][ T1163] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.799171][ T1163] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.857411][ T1163] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.879258][ T9889] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 200.899255][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 200.899420][ T9861] lo speed is unknown, defaulting to 1000 [ 200.910709][ T9889] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1022'. [ 200.925310][ T9899] tipc: New replicast peer: 255.255.255.255 [ 200.932287][ T9899] tipc: Enabled bearer , priority 10 [ 200.967636][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 201.213719][ T9914] tipc: Enabled bearer , priority 0 [ 201.221599][ T9914] syzkaller0: entered promiscuous mode [ 201.227132][ T9914] syzkaller0: entered allmulticast mode [ 201.251082][ T9914] tipc: Resetting bearer [ 201.286236][ T9914] syzkaller1: entered promiscuous mode [ 201.294838][ T9914] syzkaller1: entered allmulticast mode [ 201.315452][ T9914] netlink: 'syz.0.1030': attribute type 23 has an invalid length. [ 201.364109][ T9920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.371431][ T9920] IPv6: NLM_F_CREATE should be set when creating new route [ 201.537417][ T9912] tipc: Resetting bearer [ 201.601318][ T9912] tipc: Disabling bearer [ 201.808855][ T9936] netlink: 'syz.1.1035': attribute type 2 has an invalid length. [ 202.011579][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 202.064854][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 202.079759][ T2957] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.119100][ T2957] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.152549][ T2957] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.211165][ T2957] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.486354][ T9962] openvswitch: netlink: Missing key (keys=40, expected=80) [ 202.773184][ T9971] netlink: 'syz.0.1052': attribute type 10 has an invalid length. [ 203.005451][ T9977] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.237676][ T9998] __nla_validate_parse: 7 callbacks suppressed [ 203.237696][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 203.314981][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'. [ 203.425409][T10005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1061'. [ 203.464577][T10008] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 203.528466][T10018] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 203.678580][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 203.715170][T10017] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1068'. [ 203.758539][ T30] audit: type=1107 audit(1757569411.368:2): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 204.095056][T10046] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 204.263357][T10059] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1079'. [ 204.308437][T10050] netlink: 'syz.4.1076': attribute type 25 has an invalid length. [ 204.384600][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 204.505256][T10066] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1080'. [ 204.595247][T10059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.607148][T10059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.621493][T10059] bond0 (unregistering): Released all slaves [ 204.661880][T10070] team0: Cannot enslave team device to itself [ 204.720960][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 204.892169][T10085] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1086'. [ 205.336498][T10106] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 205.378127][T10106] netlink: 'syz.1.1094': attribute type 2 has an invalid length. [ 205.950855][T10142] netlink: 'syz.4.1103': attribute type 2 has an invalid length. [ 206.220933][T10152] Can't find ip_set type xash:net,idace [ 206.579415][T10177] vlan0: entered promiscuous mode [ 206.779153][T10190] sctp: [Deprecated]: syz.3.1116 (pid 10190) Use of int in max_burst socket option. [ 206.779153][T10190] Use struct sctp_assoc_value instead [ 206.994646][T10203] siw: device registration error -23 [ 207.132852][T10212] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 207.180602][T10212] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.199645][T10212] gretap2: entered promiscuous mode [ 207.224533][T10212] gretap2: entered allmulticast mode [ 207.455084][T10229] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.588521][T10235] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 207.641589][T10235] veth1_macvtap: left promiscuous mode [ 207.694494][T10246] netlink: 'syz.0.1130': attribute type 2 has an invalid length. [ 207.722900][T10238] netlink: 'syz.0.1130': attribute type 2 has an invalid length. [ 207.782665][T10248] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 207.798598][T10248] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 208.288490][T10269] syzkaller1: entered promiscuous mode [ 208.323182][T10269] syzkaller1: entered allmulticast mode [ 208.340454][T10280] tipc: Enabled bearer , priority 10 [ 208.358788][T10281] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 208.400452][T10281] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 208.423262][T10288] __nla_validate_parse: 15 callbacks suppressed [ 208.423283][T10288] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1146'. [ 208.514118][T10288] xt_socket: unknown flags 0xd0 [ 208.577902][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 208.674809][T10298] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1149'. [ 208.715068][T10298] netlink: 1408 bytes leftover after parsing attributes in process `syz.1.1149'. [ 208.717513][T10301] netlink: 'syz.4.1150': attribute type 64 has an invalid length. [ 208.738873][T10301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1150'. [ 208.847227][T10304] netlink: 'syz.2.1152': attribute type 10 has an invalid length. [ 209.403658][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 209.471839][T10338] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1160'. [ 209.520190][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.561870][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 209.611356][T10348] veth0: entered promiscuous mode [ 209.662570][T10348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1163'. [ 209.738260][T10347] veth0: left promiscuous mode [ 209.783529][T10359] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.810737][T10358] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 209.955526][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 210.093772][T10373] veth0: entered promiscuous mode [ 210.128405][T10372] veth0: left promiscuous mode [ 210.859404][T10407] netlink: 'syz.4.1179': attribute type 1 has an invalid length. [ 210.890950][T10407] bond6: entered promiscuous mode [ 210.897110][T10407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.977844][T10407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.019118][T10407] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 211.033898][T10407] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 211.061075][T10407] bond6: (slave wireguard0): making interface the new active one [ 211.070449][T10407] wireguard0: entered promiscuous mode [ 211.078467][T10407] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 211.097975][T10427] tipc: Enabled bearer , priority 0 [ 211.106536][T10418] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 211.137380][T10418] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 211.177703][T10418] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 211.335149][T10430] IPVS: Error connecting to the multicast addr [ 211.342977][T10440] IPVS: Error connecting to the multicast addr [ 211.441783][T10418] tipc: Resetting bearer [ 211.651938][T10450] tipc: Enabled bearer , priority 0 [ 211.679704][T10450] syzkaller0: entered promiscuous mode [ 211.698046][T10450] syzkaller0: entered allmulticast mode [ 211.960903][T10448] tipc: Resetting bearer [ 211.988856][T10448] tipc: Disabling bearer [ 212.140201][ T980] tipc: Node number set to 3758096386 [ 212.143310][T10479] xt_l2tp: unknown flags: 10 [ 212.505690][T10503] xt_l2tp: unknown flags: 10 [ 212.766265][T10523] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 212.792157][T10523] netlink: 'syz.1.1209': attribute type 2 has an invalid length. [ 212.918067][T10529] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 213.105954][T10535] tipc: Enabled bearer , priority 0 [ 213.116169][T10535] syzkaller0: entered promiscuous mode [ 213.124230][T10535] syzkaller0: entered allmulticast mode [ 213.133243][T10539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.140513][T10539] IPv6: NLM_F_CREATE should be set when creating new route [ 213.147860][T10539] IPv6: NLM_F_CREATE should be set when creating new route [ 213.177622][T10540] netlink: 'syz.2.1213': attribute type 4 has an invalid length. [ 213.194262][T10539] ------------[ cut here ]------------ [ 213.199957][T10539] WARNING: CPU: 1 PID: 10539 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 213.210733][T10539] Modules linked in: [ 213.214654][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.0.1215 Not tainted syzkaller #0 PREEMPT(full) [ 213.224393][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.234537][T10539] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 213.240548][T10539] Code: fa be 02 00 00 00 eb 0a e8 45 1d a8 fa be 01 00 00 00 4c 89 f7 e8 48 8d b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 29 1d a8 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 213.260531][T10539] RSP: 0018:ffffc900035f6f08 EFLAGS: 00010283 [ 213.266634][T10539] RAX: ffffffff87179127 RBX: 0000000000000002 RCX: 0000000000080000 [ 213.274672][T10539] RDX: ffffc9000b7e9000 RSI: 0000000000005967 RDI: 0000000000005968 [ 213.282791][T10539] RBP: dffffc0000000000 R08: ffff888054f97c2f R09: 1ffff1100a9f2f85 [ 213.291068][T10539] R10: dffffc0000000000 R11: ffffed100a9f2f86 R12: ffff888078e9a000 [ 213.299058][T10539] R13: ffffc900035f7080 R14: 0000000000000001 R15: ffffc900035f7098 [ 213.307102][T10539] FS: 00007f0b29ff86c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 213.316136][T10539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.323040][T10539] CR2: 00007fcd7fca8fb8 CR3: 0000000079728000 CR4: 00000000003526f0 [ 213.331087][T10539] Call Trace: [ 213.334382][T10539] [ 213.337355][T10539] notifier_call_chain+0x1b3/0x3e0 [ 213.342615][T10539] ? atomic_notifier_call_chain+0x26/0x180 [ 213.348457][T10539] atomic_notifier_call_chain+0xda/0x180 [ 213.354445][T10539] call_fib_notifiers+0x31/0x60 [ 213.359331][T10539] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 213.366298][T10539] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 213.373471][T10539] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 213.378792][T10539] inet6_rtm_newroute+0x12f5/0x18c0 [ 213.384340][T10539] ? nlmon_xmit+0xb0/0x100 [ 213.388785][T10539] ? kmem_cache_free+0x18f/0x400 [ 213.393792][T10539] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 213.399369][T10539] ? __local_bh_enable_ip+0x12d/0x1c0 [ 213.404979][T10539] ? __dev_queue_xmit+0x27b/0x3b50 [ 213.410467][T10539] ? __dev_queue_xmit+0x1d79/0x3b50 [ 213.415726][T10539] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 213.421362][T10539] rtnetlink_rcv_msg+0x7cf/0xb70 [ 213.426350][T10539] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 213.431645][T10539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.437178][T10539] ? ref_tracker_free+0x63a/0x7d0 [ 213.443620][T10539] ? __asan_memcpy+0x40/0x70 [ 213.448248][T10539] ? __pfx_ref_tracker_free+0x10/0x10 [ 213.453704][T10539] netlink_rcv_skb+0x205/0x470 [ 213.458503][T10539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.464043][T10539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.469374][T10539] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.474939][T10539] netlink_unicast+0x82f/0x9e0 [ 213.479760][T10539] ? __pfx_netlink_unicast+0x10/0x10 [ 213.485130][T10539] ? netlink_sendmsg+0x642/0xb30 [ 213.490132][T10539] ? skb_put+0x11b/0x210 [ 213.494415][T10539] netlink_sendmsg+0x805/0xb30 [ 213.499227][T10539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.504867][T10539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 213.509890][T10539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.515207][T10539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.520570][T10539] __sock_sendmsg+0x21c/0x270 [ 213.525276][T10539] ____sys_sendmsg+0x52d/0x830 [ 213.530410][T10539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.535727][T10539] ? import_iovec+0x74/0xa0 [ 213.540303][T10539] ___sys_sendmsg+0x21f/0x2a0 [ 213.545009][T10539] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.550362][T10539] ? __fget_files+0x2a/0x420 [ 213.554971][T10539] ? __fget_files+0x3a0/0x420 [ 213.559670][T10539] __sys_sendmmsg+0x227/0x430 [ 213.564671][T10539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.569933][T10539] ? do_futex+0x333/0x420 [ 213.574296][T10539] ? fput+0xa0/0xd0 [ 213.578156][T10539] ? rcu_is_watching+0x15/0xb0 [ 213.583024][T10539] __x64_sys_sendmmsg+0xa0/0xc0 [ 213.587906][T10539] do_syscall_64+0xfa/0x3b0 [ 213.592743][T10539] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.597975][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.604162][T10539] ? clear_bhb_loop+0x60/0xb0 [ 213.608874][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.614847][T10539] RIP: 0033:0x7f0b2918eba9 [ 213.619282][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.639337][T10539] RSP: 002b:00007f0b29ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.647859][T10539] RAX: ffffffffffffffda RBX: 00007f0b293d5fa0 RCX: 00007f0b2918eba9 [ 213.655884][T10539] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 213.664190][T10539] RBP: 00007f0b29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 213.672242][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.680329][T10539] R13: 00007f0b293d6038 R14: 00007f0b293d5fa0 R15: 00007fff38d663f8 [ 213.688354][T10539] [ 213.691710][T10539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.699058][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.0.1215 Not tainted syzkaller #0 PREEMPT(full) [ 213.708428][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.718484][T10539] Call Trace: [ 213.721761][T10539] [ 213.724693][T10539] dump_stack_lvl+0x99/0x250 [ 213.729290][T10539] ? __asan_memcpy+0x40/0x70 [ 213.733888][T10539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.739103][T10539] ? __pfx__printk+0x10/0x10 [ 213.743723][T10539] vpanic+0x281/0x750 [ 213.747714][T10539] ? __pfx__printk+0x10/0x10 [ 213.752309][T10539] ? __pfx_vpanic+0x10/0x10 [ 213.756814][T10539] ? is_bpf_text_address+0x26/0x2b0 [ 213.762029][T10539] panic+0xb9/0xc0 [ 213.765752][T10539] ? __pfx_panic+0x10/0x10 [ 213.770197][T10539] __warn+0x31b/0x4b0 [ 213.774183][T10539] ? nsim_fib_event_nb+0xed8/0x1080 [ 213.779383][T10539] ? nsim_fib_event_nb+0xed8/0x1080 [ 213.784573][T10539] report_bug+0x2be/0x4f0 [ 213.788908][T10539] ? nsim_fib_event_nb+0xed8/0x1080 [ 213.794111][T10539] ? nsim_fib_event_nb+0xed8/0x1080 [ 213.799306][T10539] ? nsim_fib_event_nb+0xeda/0x1080 [ 213.804501][T10539] handle_bug+0x84/0x160 [ 213.808780][T10539] exc_invalid_op+0x1a/0x50 [ 213.813282][T10539] asm_exc_invalid_op+0x1a/0x20 [ 213.818132][T10539] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 213.823955][T10539] Code: fa be 02 00 00 00 eb 0a e8 45 1d a8 fa be 01 00 00 00 4c 89 f7 e8 48 8d b0 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 29 1d a8 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 213.843562][T10539] RSP: 0018:ffffc900035f6f08 EFLAGS: 00010283 [ 213.849626][T10539] RAX: ffffffff87179127 RBX: 0000000000000002 RCX: 0000000000080000 [ 213.857598][T10539] RDX: ffffc9000b7e9000 RSI: 0000000000005967 RDI: 0000000000005968 [ 213.865569][T10539] RBP: dffffc0000000000 R08: ffff888054f97c2f R09: 1ffff1100a9f2f85 [ 213.873538][T10539] R10: dffffc0000000000 R11: ffffed100a9f2f86 R12: ffff888078e9a000 [ 213.881506][T10539] R13: ffffc900035f7080 R14: 0000000000000001 R15: ffffc900035f7098 [ 213.889487][T10539] ? nsim_fib_event_nb+0xed7/0x1080 [ 213.894697][T10539] ? nsim_fib_event_nb+0xed7/0x1080 [ 213.899901][T10539] notifier_call_chain+0x1b3/0x3e0 [ 213.905017][T10539] ? atomic_notifier_call_chain+0x26/0x180 [ 213.910830][T10539] atomic_notifier_call_chain+0xda/0x180 [ 213.916464][T10539] call_fib_notifiers+0x31/0x60 [ 213.921322][T10539] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 213.927744][T10539] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 213.934784][T10539] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 213.940077][T10539] inet6_rtm_newroute+0x12f5/0x18c0 [ 213.945296][T10539] ? nlmon_xmit+0xb0/0x100 [ 213.949709][T10539] ? kmem_cache_free+0x18f/0x400 [ 213.954665][T10539] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 213.960228][T10539] ? __local_bh_enable_ip+0x12d/0x1c0 [ 213.965609][T10539] ? __dev_queue_xmit+0x27b/0x3b50 [ 213.970723][T10539] ? __dev_queue_xmit+0x1d79/0x3b50 [ 213.975948][T10539] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 213.981487][T10539] rtnetlink_rcv_msg+0x7cf/0xb70 [ 213.986441][T10539] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 213.991562][T10539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.997024][T10539] ? ref_tracker_free+0x63a/0x7d0 [ 214.002059][T10539] ? __asan_memcpy+0x40/0x70 [ 214.006650][T10539] ? __pfx_ref_tracker_free+0x10/0x10 [ 214.012040][T10539] netlink_rcv_skb+0x205/0x470 [ 214.016834][T10539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.022308][T10539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.027605][T10539] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.032832][T10539] netlink_unicast+0x82f/0x9e0 [ 214.037605][T10539] ? __pfx_netlink_unicast+0x10/0x10 [ 214.042903][T10539] ? netlink_sendmsg+0x642/0xb30 [ 214.047844][T10539] ? skb_put+0x11b/0x210 [ 214.052085][T10539] netlink_sendmsg+0x805/0xb30 [ 214.056861][T10539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.062149][T10539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.067085][T10539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.072373][T10539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.077651][T10539] __sock_sendmsg+0x21c/0x270 [ 214.082336][T10539] ____sys_sendmsg+0x52d/0x830 [ 214.087104][T10539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.092401][T10539] ? import_iovec+0x74/0xa0 [ 214.096915][T10539] ___sys_sendmsg+0x21f/0x2a0 [ 214.101600][T10539] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.106829][T10539] ? __fget_files+0x2a/0x420 [ 214.111420][T10539] ? __fget_files+0x3a0/0x420 [ 214.116102][T10539] __sys_sendmmsg+0x227/0x430 [ 214.120820][T10539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 214.126018][T10539] ? do_futex+0x333/0x420 [ 214.130360][T10539] ? fput+0xa0/0xd0 [ 214.134187][T10539] ? rcu_is_watching+0x15/0xb0 [ 214.138955][T10539] __x64_sys_sendmmsg+0xa0/0xc0 [ 214.143804][T10539] do_syscall_64+0xfa/0x3b0 [ 214.148303][T10539] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.153505][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.159586][T10539] ? clear_bhb_loop+0x60/0xb0 [ 214.164268][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.170163][T10539] RIP: 0033:0x7f0b2918eba9 [ 214.174585][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.194189][T10539] RSP: 002b:00007f0b29ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.202603][T10539] RAX: ffffffffffffffda RBX: 00007f0b293d5fa0 RCX: 00007f0b2918eba9 [ 214.210570][T10539] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 214.218564][T10539] RBP: 00007f0b29211e19 R08: 0000000000000000 R09: 0000000000000000 [ 214.226529][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.234502][T10539] R13: 00007f0b293d6038 R14: 00007f0b293d5fa0 R15: 00007fff38d663f8 [ 214.242488][T10539] [ 214.245869][T10539] Kernel Offset: disabled [ 214.250196][T10539] Rebooting in 86400 seconds..