last executing test programs: 2.42589079s ago: executing program 3 (id=2677): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xffffffff, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0xfffffffc, 0xed, 0x7, 0x0, 0x78}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x17d9d65ca8f0eaa1, 0x7ff, 0x9, 0x7a2, 'netbios-ns\x00', 'syz0\x00', {0x8001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r6, r6, 0x2f}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r9, r7}, 0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0xc, 0x6, 0xdb}, {0x6, 0x0, 0xc1, 0x9}, {0x5, 0x8, 0x3, 0x4}, {0x6, 0x90, 0xa}, {0x1, 0x89, 0x0, 0x7}, {0x2, 0x9, 0x3, 0x10001}]}}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8016}, 0x40000) 1.875294139s ago: executing program 3 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x7e) (async) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), &(0x7f00000000c0)=0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000001c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x800) (async) write(r6, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9541503d7e1a894498b83f200969f7bc6e8906ce5755848d56b078dbe6e30e72f26c770d8599a17b77461e693d362119249781a44af89e23f58488a996b8e686665c8934564f2ddd53fc58a16a88793e096d1096ff87f255efbaa3ec993911c8149198af88c392bfa902368525995641057ceb169f55a0eef71f82de6cdc636554d336d976086cd1c862feca9b8a6e2552dd05bf29", @ANYRES16=r10, @ANYBLOB="55b627bd7000fbdbdf250b00000008000300", @ANYRES32=r13, @ANYBLOB="080037000200000004000a000400280008006e80040001000800370000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250400000008000a0004000000050007000300000008000900040000000600030006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x4) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040045}, 0x2400c400) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010425bd7000fcdbdf253700000008000300", @ANYRES32=r7, @ANYBLOB="08002700020000000800a100007f0000080026006c090000080057000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000002100)={0x13c8, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x5f}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x3c8d, 0x7ff, 0x0]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7, 0x1, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7]}]}, @NL80211_ATTR_CSA_IES={0x1358, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x15e, 0x2a, [@supported_rates={0x1, 0x6, [{0x60, 0x1}, {0x18}, {0x9, 0x1}, {0x6c}, {0x48}, {0x36}]}, @random={0x7, 0x9a, "55c96b570767ae768ef761c66b68e5e7f9fdf3fbdd89a77442e8decbed3999f8a14d852ad88731585d47b297d22f1c489cc18cee3eb741eda5647b1df20b2869c4ab421bcf8b06961cb59595a57e31ef04629241a61bb5acdc80b74c48e6dde1f7398237a0beec34459f9130edd1e856cdf300dc6d56c468cc0d515e654707209f60b6047b9f6fe15e7fc0fd1acf47b1cdb0fd82f7e6443576a8"}, @channel_switch={0x25, 0x3, {0x0, 0xa, 0x9}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x9d, @device_b, 0xfffffff8, @value, 0x5, 0x80000001, @device_b, 0x7}}, @peer_mgmt={0x75, 0x8, {0x1, 0x5, @val=0x9, @val=0x37, @void}}, @ibss={0x6, 0x2, 0x5}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @cf={0x4, 0x6, {0x8e, 0x8, 0x400, 0x74}}, @fast_bss_trans={0x37, 0x6f, {0x8, 0x2, "257af02d9fd29a51f0c5e5f9cc9aecc6", "b0c5cd8751a51943c0c6e9ce69438ff8eb3c8402859a83859ae5753e6612da37", "6b25093ddef72a032cea65ac5d3c8855cc5efad8d945a7e4b1d4062e2ec1f8d5", [{0x3, 0xd, "0b00a1fb6a3d5fd194ce19379e"}, {0x1, 0xc, "3f33ffc6e457ca269a86ca80"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x10e8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x2e, 0x3, "43de82729bfca32f919593e6093d28c997e1a2588d992617f8808c62ab53335631b6d5608c10d9983b83"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x21, 0x3, "8789079c3a069bb53f6b8337d16905283ca24bd4b209c12c80ba73a79c"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x88, 0x2, "27af90a45e296d13da76c8d6918145795e60fe1116c0101cb6494f9994daa7bb7a8730ee1a79a183813b522627dee41c2c3e5b12df7d3f4be193abad957359121ee0d080bed992b397adf14fc9c69cc8d0c69ce459f5c6041091ec6504ec9171189f1171d79474b7f4c14a2e5aee0f83995ef72946d144eddc0a778b2152c46d4c9307b0"}]}, @NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@mesh_chsw={0x76, 0x6, {0x5, 0x2, 0x24, 0x1}}, @peer_mgmt={0x75, 0x8, {0x1, 0x3, @val=0x67, @val=0x31, @void}}, @tim={0x5, 0x6, {0x1, 0x4e, 0x4, "3dc0e8"}}]}, @NL80211_ATTR_IE={0xdc, 0x2a, [@ssid={0x0, 0x2, @random="1333"}, @fast_bss_trans={0x37, 0xc6, {0x0, 0x7, "f0641df459e417648b9b58e6e957335a", "e978cd2219aed852ce0c7c0c71430f9a3442c9ada160f32b6c76be29b551ef19", "640f3e93e5ba7fd61afb88ff02d631745638d4f94f7e49b117a9d68e12129f72", [{0x4, 0x8, "943fd60b914ddb0c"}, {0x1, 0x1e, "3c23a4f49d771d38f8e5f2b4d9fbc9f8c42b2bdf1f84a3960dec6fb77f52"}, {0x4, 0x8, "8f1f0dcd6fa9a4bd"}, {0x1, 0x4, "2e4a8763"}, {0x2, 0x28, "19c8a58c5872c553853a4b341b9c2ad20651101f9bea4110cc2585e887d2af258b990cfc00000000"}, {0x1, 0x5, "8d3fb2364a"}, {0x4, 0x7, "e929633235a6f6"}]}}, @chsw_timing={0x68, 0x4, {0x1, 0xc34}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf9, 0xc, 0x79}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe, 0x80, [@supported_rates={0x1, 0x4, [{}, {0x5}, {0x12, 0x1}, {0x4, 0x1}]}, @ibss={0x6, 0x2, 0x6d90}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x13c8}, 0x1, 0x0, 0x0, 0xaef3bbb7e7ff629}, 0x80) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.739436224s ago: executing program 1 (id=2684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, 0x0, 0x4010) 1.669323499s ago: executing program 3 (id=2685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0xdd86, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0xe}], 0x1}, 0x20044001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) clock_gettime(0x0, &(0x7f0000004000)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003f40)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/226, 0xe2}], 0x3}, 0x2}, {{&(0x7f0000000580)=@ax25={{0x3, @bcast}, [@remote, @null, @default, @netrom, @default, @null, @null, @rose]}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)=""/196, 0xc4}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000001780)=""/244, 0xf4}, {&(0x7f0000001880)=""/94, 0x5e}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/208, 0xd0}, {&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/143, 0x8f}], 0xa}, 0x3}, {{&(0x7f0000002c40)=@nfc, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002cc0)=""/152, 0x98}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/126, 0x7e}], 0x3, &(0x7f0000003e40)=""/239, 0xef}, 0x7}], 0x3, 0x0, &(0x7f0000004040)={r4, r5+10000000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 1.552235652s ago: executing program 1 (id=2686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20a302, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x100}) 1.464012258s ago: executing program 1 (id=2687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "f3874b42f182707b", "de0150e616b7f9815a1db9f6cfad73e3e079a1197eeece5372092f5205dacf06", "76dd6230", "333a63d5ac35eec9"}, 0x38) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2d, 0x9, 0x70bd2d, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.282401644s ago: executing program 2 (id=2691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES32=r3], 0xd4}}, 0x4000044) 1.236241902s ago: executing program 1 (id=2692): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket(0x10, 0x4, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400043, 0x0) socket(0x1d, 0x2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r4, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="52067d2669dc06903002b22b1cf6b108b07a", 0x12) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r6 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x300, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8000, 0x0, 0x9}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r8, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) 1.229721887s ago: executing program 4 (id=2693): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2400000011005f0474b9585432ce7b4ae548ff14f9f4070009040003000000000000000000000008000f0001000000874e561619265a39bf5ead5ea7507328dd9cb3458889a26930ca56e5a123d2ac6288af22635a997f0b799b9b0e883e12e97161450951be18484caa8337964e3de83c73964912780b36d97a500f2fe982e2bb47eaac0710eb75ce392f1002fe2ef41c214ce7638fdda3220d85b92cb68b03b95b8f310982de3cee304332b6095129cb4cfb3bf0fc75daf1102c97b6acd4204ebb176c02ef73e43ac768529e5ca684ec53de8c26d616ec81ec011eca0308f3ee7ebb4c712fde88e9f0c18cdcf9ec17ebad7f96e1", 0xf5) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 1.229282147s ago: executing program 0 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78efb8abe4697255db0a95d58051bdd88bb7f063e5870df43110ba778743ed0d89fd11c0"], 0xfc}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) 1.138976191s ago: executing program 2 (id=2695): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) close(r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x140a, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8051}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000004a737f89e4c2d07becf32fecb72d00000000000000", @ANYRESOCT=r4, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4080) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @multicast1, r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffd86, &(0x7f0000000300)={&(0x7f0000000240)=@ipmr_delroute={0x0, 0x19, 0x200, 0x70bd2d, 0x25dfdbfd, {0x80, 0x0, 0x14, 0x7f, 0xfe, 0x2, 0xfd, 0xb, 0x2e00}, [@RTA_TABLE={0x0, 0xf, 0x9a9}, @RTA_IIF={0x0, 0x3, r3}, @RTA_GATEWAY={0x0, 0x5, @loopback}, @RTA_GATEWAY={0x0, 0x5, @dev={0xac, 0x14, 0x14, 0x6}}, @RTA_MULTIPATH={0x0, 0x9, {0xb, 0x0, 0x40, r3}}, @RTA_DPORT={0x0, 0x1d, 0x4e24}, @RTA_DPORT={0x0, 0x1d, 0x4e24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.125291367s ago: executing program 4 (id=2696): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0xb0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.072222197s ago: executing program 1 (id=2697): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xe32}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 1.049849585s ago: executing program 0 (id=2698): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) socket$kcm(0x10, 0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) close(0x4) close(r2) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000000)={@bcast, @bcast, 0x2, 0x20}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x24000481}, 0x4040084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newchain={0x3190, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x9}, {0x8, 0x3}, {0xf, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3144, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x1768, 0x2, [@m_ctinfo={0x60, 0xb, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}]}, {0x29, 0x6, "fc5be91b13debc536796f8d20bddadc7bb8cb15787762ba1d24a4500c42e8e8d9ab35d7577"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x188, 0xe, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7f, 0x2, 0xffffffffffffffff, 0x9, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x3, 0x2, 0x5, 0x9a2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffffffff, 0x2, 0x0, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x3, 0x7, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xfff, 0x0, 0x10000, 0x3}}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_DATA={0x7, 0x3, '*#\x00'}, @TCA_DEF_DATA={0x6, 0x3, '@\x00'}]}, {0xca, 0x6, "6e742a145f8cccb34f0870ffd0e1a0e34fb3118a08ef2da696c23303d7153c27679be0afe2dba8a9db293c186802b701a7d434c620bf8cb6fb75d086d841d73bdf671c416b24ee516c98db157e094bfbb4b626bc64916732f46da657c338880339bc71bd68365b110b0687b7d53a97c04ffb8f78f9d52ce024eda2b5dcd062af6bf3a99e1a129334632803e133dbc6f5abf3d3cc701e7629f2514b9a65a375733da39d5bf89da353b97b638938241bffb73f3f5a818ff9f4ae6657f6082cc41840ef5e4c460d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x158, 0x12, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x4, 0x4, 0xba7c, 0x5}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x93968}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa82b7}]}, {0xee, 0x6, "d5a7bf65acb1b2565eec9ab7fd2ba37660ee4d49d1b60df94a329cf535eccefffb2781921ff4cca8cb1ccef6bf67c778e19cc40494a4b0e7684d4c217b361086333054a55658e9a10988e7364d93e20bb1efec185c8cbb9cd44a36f7a1c7c1ba153fd7f69efd7c02e7a73b1ba6284b81f1fb1770a196d67e17f4ade30edb08ea65856cb767d7826cb6281ce03f271d33405249e8ca66430588047bf126278cc822fd46a2432a77150df9e7760495970c669eef46ce83319032d3ee1d32834f2694fbff90a6760c53d338c1eb7d24426649dc69f2d0bcd4ecbd792015528e0d56d237a26ca4ddde8f4b69"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x130, 0xe, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xa, 0x7, 0x5, 0x3ff, 0x7}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x6, 0x0, 0x101, 0x1}}]}, {0xd5, 0x6, "500422230a444c54efe05c51cdba27e2cabe722dfbfe4d1c14da6ac92597b1535381f3567de8777ad03f28936b2359abe0c31fdfe5bc3f59317382ad9c5e35ed2e44a35ed797625f5a99978bc5242293f87e90aa1ac6d15a65dd1d2d8f47e7bcdf42e6d11b6095921bbdcc357cc2b0729d5cea423834685e3b939988ff95196af70a1ce9c28e80158af88455dc6449dc658604bd13a0b290ea5abca8db863cc7ec5c350c8ac6ba341eb7d48616dc88d0591b0a83ce804db3c472723267db26e54befb9447746851d90e978cb6cd731d49f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x1080, 0x13, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x44d9ccb9, 0x0, 0x1, 0x10001, 0x800}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x31a7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x7, 0x3, 0x10000, 0x920}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x128, 0x20, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80, 0x7, 0x7, 0x3, 0x7}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6e, 0x20000000, 0x3, 0x8}}]}, {0xba, 0x6, "2fcc76149fc3cabdb8b812857a8b92dcfa233a70dfc4f386de9fb10cc418e58fbca73944c9bc3f9f598ee90042a45ddbc49855f84c03a3fe005a6af6a7b1bf6950b1574a68b3ece47cda2c889751db05c10ad98613b6bbbcf06a07ca6d9f52a0abba22b3c6530df7c89351a600a57bfea03a1df85974bc372ee7e9f28a38462dd078565be3ce0174fb48565e43c2acea77c5f5c61e3d7eb2157bf4bc96fd59c3cdd92d8442e259bd8389d9618026ccafd74e9e3caf72"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x14c, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x0, 0x0, 0xc, 0xc}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x7a3, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xffff0001, 0x1, 0x7d43, 0x45798d7d}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17f0, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xe2, 0x8, 0x7, 0x9}}]}, {0xbd, 0x6, "68e6325108124f27f978493893a53078b8c2670ccfd2b7a614c3859a9b7fd26136d4a5271386dbed88c6e3494ccbfc9e3144596a11eefcbd0d46a7a6b3abe9142a24ffa0b19234cfb8ee4bb2d0a12af1403c3a408f700a6d102b2deaef1d4f3f6d926e3b3bf1f9dadc05194f58da9259eecaef4c42b810ff86983ff598f7bcf8eee5543f2f4ac210fb518664a5a79f58d9755cc702e1b4a944794a34c66f644725ae6a523e8af6709e1848e45e0c24a24b2969c16be332be19"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_MATCHALL_ACT={0x470, 0x2, [@m_xt={0xb8, 0xd, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x63, 0x6, "2b398680fcad8dbf6bf6031848e5c70eda990509bb67a6fcb1f9bdb29ab6dfc10dfbb3aa747d66d125a51cb0336fedb048bf6f08cf11db32c77386bd4083c36c0ffbeb63189896ccd530e72669becfa22457cd0bef0e4eab60eca60685e92d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x84, 0xf, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}]}, {0x40, 0x6, "351a59271bf55593d0a9aa933f14f27a450d091a40e691ba61442545ef3278b8548bb054ccfb083a7db06ea4aa9d6757adee274c703ef167bae3a4e9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0xc8, 0x18, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0x5, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x68, 0x6, "99222db86bd72ce736e9db65a08188d4423e96453d6355464906aa7bbec44f6c3bf3e9b7c313f184b3eb7123caaa2152a81672dba2c4932fd5b18ecd3869a569d2f0160d40aeda00faead19aecfcebf7d51ddc6df944242400f2afee5ad7c1381bc59ea9"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xf0, 0xc, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x78b, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0x8, 0x0, 0x360b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a52, 0xfe069f3eb2981702}}]}, {0x93, 0x6, "84ae3f0c72b21eb5203258e284cd260ce6cf3b0dc98a021413bd335c96bbed7e851308468d70d2108f53541ead84c66c0b2c64373e5b0acf68a661b472828c2a786b520fd832f601ffa8db005f4cf17adf31501d04a1d4247658a4543dd0643941b6cf768e770cc740af9b8b48ba5ada6afdd81ebe48a399ae7c089034fcde1206f36d8d0e4cadc4125f9174d2953c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x6c, 0x1d, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_INDEX={0x8, 0x3, 0x400}]}, {0x7, 0x6, "fb6038"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x10c, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0xd7, 0x6, "47962570bfd64ebe976c0dda8177160115aba871844b81ba3e2c34fac17f9cdc6e43210f9d8c43be67ddaa9fc9bdfa4f1a930c3364009e1e1a6899bb2f789f6c97d174231ffb5bf2d21a5c548ee1fd03c25197df779dd7555fa980f70370d804e3446043b807cf0fda8e0bd06e544a07435b6a1e24d2eae71448c3a0f07f358de1c2396400a468a096ed198ff928d66d5e2d94b604a36e02f27e195969013efe3afa7964ab379c6a37a301856f950205fff2754182a76c90cec9137963776c7f3a9e60640344b557aa3bd4f82bedf1d16c53a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x4}}, @TCA_MATCHALL_ACT={0x1538, 0x2, [@m_ctinfo={0x108, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8001, 0x800, 0x1, 0x9, 0x8}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xbab8}]}, {0xac, 0x6, "d96bccbecbf38a44553b902a28bf2910766624f7885fb835d42409f008296437dc76f80219b305429151bd9838202ddf30dff5e5adee5c812cce576688ba5da3c0d068302ed018297d933f6aa140be5536bd29a7a4defd922972c80a96dc8f00cac71d7c60d0730d8fb68a9abf825f9536b30ae3a988be8f490ec2c452e26258ac5200165935cdcd0418cfb8e3ce545dc7038a74261e737369ec878e474e6d99b5f146b00ebbc7a4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xc0, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x8}, @multicast1, @rand_addr=0x64010101, 0xffffffff}}]}, {0x70, 0x6, "921289b0b51511dee9c02c36ebf7de3af89d0a61a6586f8baa475699329df695df87f726522edd01569ffdd77efa9df034c88169b490cef584a323f65fef48079dc6a28d4d9c8f9b5c735b1aa9c59f26ab67309571a110a060f68510f7ce37f5814415d35048bd5aaa9a116b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x16c, 0x14, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7fffffff, 0x5, 0x9, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb1, 0x1, 0x1, 0x1ce7, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xa0, 0x80000001, 0x4, 0x6}, 0x2}}]}, {0xdd, 0x6, "4f9e6a1b3ce99ed1ae399b83f746824cd9311f1dc80f5ea661684b71f735ede37fa78b9e7a076e6eb2398023d0658431d6181de078d0636679e19ce94bfc622bae13fa270bf8c8dec6b85b8684d281cdbc2785639c04b97b9218c9c52e6287f0d051a98787a6250ee0f57ad779414b5b8ab643486e10f704d46a68090aebf661ceff07bb64759a726e5e7916cff22c1568d03fe016757af17926d12039974e109b5356225744f793924973824e155884aec9750ab9ecf62f08dbcb5dbf7910b1862e4ade6da98822fd28b192193b887b20bbfa07ed6ef4ee64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xb0, 0x6, 0x0, 0x0, {{0xc}, {0x4}, {0x84, 0x6, "8d9cc2cbc25152208ff2d92a67c46906f57388f4509c0c64463f19fbd920bbaf563fcd6ee395701799dd1cbb9a645e98402684d7c00edabdb07887bc6fc96008b5c590c5435d28063c5f1f5f60ff7d85b0d9a0addad5020f379578aff73be84bbe7ec5b123a1c6fa590d8c0069da3e686bc6a948b2112a0dcbd2d43179b8cb3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x1080, 0x3, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x8, 0x81, 0x3ff}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xd14, 0x5, 0x4000, 0xc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x1004, 0x6, "53d88449ac568623c532d670804425fc83204e22407e68280b98c7d1c1ad1cf2fa240ae2736297e273b4fc035c626d7692bc1358346fce3ebba39128d28da023eabf9151ae57554c437f24114f54a81b48873b905a65de33291200699ff795158a1ba897425988629589516392d1a21190d8e2685156a6b34774f3c277d4742e03a9a35c9f4bb9b72136d8afa420111bb66daa68145dc6391044171ce2256a2b6b2f4245bd4de27919e4e1eee4cdb780121da3d36d72602c1b64841de256bb890855aab61522c3c9977d5bb888e666f24fe25db6ee0e62c8103a2145fa7baabc53dde339f54289369242af34b2e96229cef2bc45cc7580893fd173e939c4c2caea00d831b55b1c66c43779522a4b00851c9ce0f214bd17be0769cbf24e37d6a382203d928b72ca15fdce74da021a5c6ba3f6c5dc5e4667baf410114cd2ef273038cf89628784e9cb733b302dea9e50f1750a4e832bd9bf19b64974989943a44528adcd7baa553fffefd86940370dda2a86a1b485b3fef3edc02eca78e76a92b0eb4e885af00dc57013502ab8523c17d25709e6037cffabb935a7e6b15052fae71dc6a540e1c45502215b0395e294490cf1668850d1bdb6bcb78150a7982d7fc9ab1fe875a89eec18f85778bc8d58ded2149a2fc70d465329509d9af3237e8ef4a63d1f413addc31c29ead5d89f2de205943091263078fba0187a6b18779889106e28485fb2cd7b7c3e1cd4b32f48da9e4ecef5c15d2fe2fd6e269c0874250751995f08a03e8448a315d7598db1145aacabf0b8c1a3b1548696e8a2ef92a4c551ff373122215f0a1972e342e8a0a8eac35a0b9150bed96c6afe59adcad6e568a4c9fa53fadab2fc844b8cbaf4ddbe40276677cf0ef9127e4a97b6a92aed5300d44f908427e84be067a1bd3126da55e0246dfea6bccabe4c8113a478fd46f2600191e85b945bd14cef385ab83606f86e436e595600a5bff87e1422c5a28c77aad3279afdcaa95a1f4c4609e5e2783b3e10a18d8839cc4e52338deb1af0910287e17cb7f6cf12c7fe755f284d3e143599446151a6339f0016d3614006b7fd0a584e34d7754f7412f11485f96950e52e199c2d11fcb5d213fa96e1c23ab709ebd2e2f4f9840be321f9797ac9df25efdb175633f615f7afa04d59de361d53095cd0ae898f2aad032de8e7c8451c54d9f4cd9343bb7dfd98a1e94aeae6cc7bac6273d4c3333d46acda4030a177abd816d76a8440a9ec68b8f17004ed177f092bb462c248a30a5b81c4287c180b90ac444abfa3cb156ce26e5005d477b3090316028619f4f6612e41b489bfbc43d2629b96e4d50cdf6c866e1aea0239acf25279aa3e96f03cd50056e4bee7577e62fcb066a23074dc20b0c89c47e07a1081cc4d0beb2a5e2ae8784791bf6583b7a46c2ca8d4deeb62bb72cebe81331c46da9d910e1cb70a079187f7f403372f65d6e84c46164ab4bc27470c2acfa996d5a1027e64f8c4bc1687a554be2bf3ee597fc70fe8bde77d24c09252374a491715bd03a37dcfbe9352374fd472bd7643b30ebd81ec6165df1bb65a25fece0161345d93ed63053cbc8b1b30cb131d2767bf99fcc48701c2a3b9f49a768fd8ae573e8020fd1d2803e4494a2aec019586dc47a4301d86600eb30064ad0dd54abe64bbfb22500a9bbedbfc388e42786978b7ba9caaac00c6e02585471f08ae1e8818690ea948043aadcf60da46386a9e368ef4a1d011bad2a40ec04bce13d42f559d01a85050b03bf2c1f90308fba903e99dab375c222e2f592805e7b3379412d20afcb4ea5f8caa65c746f716441badb98dd57ce096ff528b1160073646f073175af4086260f61a3ee5b187d1a12c7615b37bb81a3dbc749952445053f4a6f2b8df084910c996c9399f73f4d35a50ada9726454d1383dc2310f3986d650ea461fb74a6b0cc7da3a953c546a2a6d171353facb8442c206ff334eb941ed43c5a9feeaa176a3e79769f6bb28c5d8bb6f085378366370fc15735cf9f941facb3a5a73bdf99aae8ced34ea9dddad68dbf5bc13048110d4171e9ede7a58fad02f2cc2545e8435490d1fd58a1462ccf4fa49dec000c4422481b2897b57bbc99337a96f8c4d0dfdcc84737d1a47181bcc933b5048602daded9b0f5406082edb7259017d7b9da7af4d5ea94723508a332967c053cf16dd5f50814362b74533cd65302e1de7668027f68bd49642c8e6615d1b05d7ca96bdf1b8c903278e1a0561506de90cf1263448052529e6d2c43bbc97e5b30c766f837576b99e75b59c5ae6c391db84caf04c02e5e055f4cc38a0c17ecb532275848d33b853de24ee52649c77543cc0aa299bcd02a7bacbbb49d65e95ac6eb898586968858ba57fe71b7cba170f06b81f69353907eeccd307af3148156d89b09d27ccb61b9bed5313055337d367a9f71e476214fd371d5a5b6a9589c5e34c542a13f880fad00ee2784308fd4383d3f735ff80e53f42aab56dc5a2e6b694cd2f4bd3f23e1b53e582301bacc528a2ddf9b4035c50fdf736cd2f0340bc1eeac27a353539515b4e25896ca998aa3cd786496c392487a754bbf13218207a05d0cf65acdc075038b15d79a40214b574324b5b74cc3e0d416805f5e9871e0e5df971d3aa9c5d916b3354820fd8aceef32bf8851772246ed50364033cfb93702ade3f95129f6d2d98e432e1062d40d7086e3f6b7d6a8df093af6d1c0a9fd9363da3cb527425e1b60abf1c541e00992a523c9f2797a0a27a321c55df1e5a0f501567bcaf2a84bd067244b0fee34035089900b3a868e893d87ef6d5839068707da4eb7afcf1e9cca5d7043750a914ac83cc8b8d4b3fcb899b68923a059ea008e0b9b28c276f6c62f0e155b606af66069cb2f0ef40ed456ea1ca0988cf1f0dc914a11e5ff1fe351330671c95154888fd10eb4bad16d8ba6b825e7b23af9ecf768ca585b64649317b490859de3748eee1b3b2af3f5bb2bad9d4d4ac2e77c0bc1ee048b08293bba2792ba851bd0bfd186390675e77ed70514caaf0147b78d39a0cd656b47fc89cf4d174ef19661b4970c9f8a159fb26fb92c763b86d7b75a9ec8f9ef30d4509013a5b45ba97d6fc370f0129a427b0bc79a96ee7db33a6ef1959bc310f064815971b161833d0910a7b7841d2e1f0eb869f7786a3e7c8387d378401b3d3ed23282df61b4b2b5c1bc3d5f505e7d2e1ab24258db6ce4c91d0f29a7f7342303b4425a4a8340f270e1121201b5b1ff0bf6bac90a5a569dead29bdb5e0af1c093ba18d68b9fc8a3cb85c9cd573449c7b4a157e38604a11688477f080dd11c3f3389fd72ad13a66536d5e9cf2a6ccb910787deb45ca16bb8cb20f4bfcead497487fdf8b2ea5f8f528ba2e5e926c82468326a9379618f27722df1fec0e3ed4827b2ad8ac23aaa2a8f9159ee8216b4548addcfdec01c17c79c9ab0a983469eacec870bea70203e2ff1415e61f78bda103d03e68bad640489daebf8dc083551e5e2315fa5a59d63ad91a30b6b6c7c548b05d088c5f88bb89eb1c97d4ce060fe86bb02086fd260ca41f8819a93fab775b09221258a093bae7affa99792563af2b428a9e34204a0743c18e68e6eef233a9c67ecf62dbc64623662b7ced2f7c2f6b7187ac6e96304dac18ad8fab0cfdebe8481dbce40975fb927a80113cec0445f1e987f6470767040522159fd520052c61de4f8184dea2b36ca3f88d72fc3dfb87856b9c9fed58a8bbf81042b8beb20387878737c0ccd09d46c3feb0894e6b5b812364e317a86daa485a93b8f467750c4ec0cd2841b1668f2d01241cc43cb798f7eacd6323471e7c0b84d3a7e35387151c9d7e08cb7061dcd8b7ac438da7dc969eeab353d2245c4f6bf1ee6bcb8ad8e7e586bd9a036baca6812aee96a88951d39b9f64dcd028545a30780482b31d3fcf078ac4ab478190ed705d8d038e532b3a154f17671c5adbef00a246d195b03564d9cf6a3b5badc9b9ee1ff43557ff48af65b9ccc7e4faf7dc5e5637bd8769a7bd024d6173330e0eb7f193e0e60ce391ff9ebc3540e511009047bed79bd511e10a2cc4cb331b6c951ed352b4e5926fa0786f911a93a62887d6c294b10aaf9318991b7745d7483092fe129aa63aff6e9e611f90c228c42886cd27827c5a4c5ec2b0f8fc6e7a615008b8bbb1de0ba9754487d042f96dff6b82a1f6806e82b9b7e3845107634a4f691134389736e2f3df3e5bad641c5d93fa155ad10072daa120145fdd22115d8b683c4ec78ed00d58d9c8ad6a60b0964727154e4e7a3f8c7fcaf4961b497b62c9d1e9d0d3fa240f1be8872a9ed0fa83534a8573ed857274220710cd3ee68d7f22f29a238cae62d391190553c3fce56495b5840392094fabeb1ec5905fc2c158276db680c77bee0c8c8e789029b26ee7715a1bb2d679ac8925b75aed09c0cf8ee179cce73f415751c039c00c4cb763ff536574d8df62ba9ad485a34a3fed617d6f6d6eaa3dee109f392bc3830aa324b46d797e3e16bf295246fd5987aa3c4da6323a241848a794b84751a4b39a80f3b581c9550edad150b42baea2a6661fc37e4ba21fef45ef0ee17ff7b26a0abda40337a711cc2d49d9efa0a5e3c5e3359cdc2a64975c1dd0b1fb290c7c958342052905f81385a95b47c575cde6176d3889f248aeb6434f729704c93662ec81e9ad9fa9e74ef555a6a20762a2fda3c71dd8c5f4b5275d2b99c8001bff9dafb8f2395fa47e4206147b192d5e6a01ebda8197e8d0415b062d819ff8343cf2602fc49f91817bc7e6f9ccfda22acb5e801bed5eb56902478c10647c3bdc51f2703c2028ece8bc68cc898513ec01f59e9adbb7f2bfad1c1e62f8d49712991c3508030bb546776649cd0175ab9808e1e8c5d06c1658c27b306fd1f6a63635d8fdf843e07d33b832ca6bd720426aca285bd07865b40e2216e828608eb6e323cc27113780b26aa6d379e183f6f9bd749790cee24f94ec33caa52367d383d95e3f070256a55e6005b032bede9a2afd5aebbc7592f1bc66790eb1cf368766f03aba54b65967a5895dca50acc3bef451bbacbbb3f4e433fc09bb1c868c8c8895e7a1feab08e37a6cc00a0ff95e9d7469212f5e7bd1c94fc4c8e0cd0995e489710727176b4c8b17de0fe690aa806d0e1fc229d30daaab2668636b4c9ae11edb188ab1f5fd501571b200ee75341282d89f42ed1f3056caa04adf83e0f57aeb59a50507496196c01c87743120b16c478082315fac94cac564dcb32de71149f0823726817211783e5488b2de2e07e97e80ccee8fc506b9136e5eac841a0aad2e7103a38b35a887db65077496efc88a1b298b68c61666ff99fd22d7157eb7d0949633e8371a9b7107030265b208bce39026cad6b7c6b13fa44b909b29c97a667352714ffe9f57f585a63d2fce1c8ca0873b929fdd60bad51de5f12b7cba959bd19f73486d17c67098e86ba41a8849cf667b293bca67e1e1a4c0a5d057662dc90f989d769dc5e1bdd7f255bddc657664dcaafe3fed3e85a3d57d5f8dc629e01d1871d756251654f6574bd04fb160a14183253eba8855bd1a28db6567274ca0cedb83f39ee09dd722902a44c9218af4719419b70f06f323e22ea9ecc9d0374e330c3fb5bf23c0dc586a57e5587a14e1dd4692ac0385018dffd6f4bd8af96b3e6b65b95d1de0000127e1ff571b1550a390c01b72f94125115f799a132493f9e79c222dc2a79dcf1a72b4df748821e37f2d7c2c9f15d1fdeb07885fc67e9621d9b28ac65ba2d4af0a92bcd703c36595a09aa9dd1c9aabcf17bda994c85417f77c1a576a5f5ec6ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xd0, 0xe, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0x8, 0x1, 0xfffffffd}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}]}, {0x7b, 0x6, "20ab3d4244a423fd5c6ea07254f225972b1fd9fb0520de26723faefa0db9d25a7bb8bb412b02df93316a887fd2ba50a514f5ffb85f1c5ef98251a37089f5acff2e7dc14405fc4a3c1156cbc72cdfdbfb0acb8fe965217a42a3bcd17b010f444544652f1ca55f22543299dfd69192a270322c6fafb45320"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_RATE={0x6, 0x5, {0x62, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3190}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x2b, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private=0x4}]}]}}}}}}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 957.928042ms ago: executing program 0 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x6, 0x1, 0x0, 0x20000000) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) read(r3, &(0x7f0000000180)=""/178, 0xb2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 875.839624ms ago: executing program 2 (id=2700): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x884) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000f7000000055000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001710000180080001006e617400020002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0) r9 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@bcast, @bcast, @null, @rose, @bcast, @null, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r11 = socket$nl_generic(0x11, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000009200102001a000900020073797a2100000000050001000700000004000780000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r13, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r13, 0x890b, &(0x7f0000000300)={0x1, @default, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCAX25ADDUID(r9, 0x89e1, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r10}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@setlink={0x30, 0x13, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4100, 0x22}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0xf}]}, 0x30}}, 0x0) 873.837684ms ago: executing program 4 (id=2701): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 811.440257ms ago: executing program 4 (id=2702): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) (async) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="070000000000000000000200000005000500050000000c8a702eeebcfad1caaa696fa5f407750ef09f0938170a53df9633158877f4ec3de408b6325a89b7d873a713c951a739d33c7a0b8bbcb61e27a3"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd30006d81df250b00000008000300040000000800020044000000915450b7f2e2de649bc3855d9820d7c72d006f503fdcb80c1c94219926c5de9a1fd102366e191a7ba5f9a165f635d846c66f30aed7b4ed310debdfa035a3ea2d68cdd20dc4bb5a293fe4bfc13c6bdcbd2f4b9c23a0508e85b668e6a68cd4992e47ba322be3741a7bb4467cb9dd5231a80642c3b2f00d8ee35c24c7a7ff95eaffcc7187d399a0838d32441e8485d2d9bb8ce17a3bef34775ee224d21ebc346f3ef19672c669ccc00de13a256c9a10309684b3b1744b8c50b0"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r8, @ANYBLOB="0000000000000000030000000000000000000000c698638b9954f30f000000c862217d8b1e94b43068e0ce65002bb231a7b833365bb13ec5e7a390770c92bd80adc209fac912b0d8b517579106ccebc375d391a6d115118fea2820af23e301bc8a255fbe2f67880c4c9e41a6675f455a4942ad0dfeb8a4ba845b60e38219cb9bd45731f800fd8e7520c86f118034abac89d1f6fc6d36fde818682ba3d368cf79a78fd7846781f7c99a2cf2dcac43cc7b385d268bfdc3463045de9cf735cee1b8aceae888ee000000000000649d42b1ba105f9475a22b425fe40216f9c9571baa3034f548ad81628a3fc5107fb81441775efa5b3df92080477e7e4c6f9fe4057929f91cbc3add6c69c83eebdf27a7f184ec26e272c63325c04c3c50f6ba885ce2c4f3162b2fc786005d993f365845667ca0bc62fcd927a474eb851355f10402444c86f379ab1dc058a02d29f2e43644d92ec77f8b929b044fc4eff42d53da3821e38536c9d42ec9b762ff907ed50b309638a5a7e4e8cb9e1588dcbb3a81fd006d6859ce0f351fa64f04c760e7444a48639f0e924832f4f37d166eec33762f4432ef62873e5790290cc99189f250ce9cea023efc660b2a8f0358869894b28ed56c858ff961d2c490a4f612ab2b8ee5b007bcfaccd89976ef14c915bfec0f738532d23d826b95af951ae15c0cab4146bc4601d043eec4d7232847ab0b5a25c310b68a911696"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) 679.828874ms ago: executing program 0 (id=2703): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_open_procfs$namespace(0x0, 0x0) 583.750906ms ago: executing program 4 (id=2704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4041, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000440)={'wg2\x00', @broadcast}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="b445da1e8ba83dec609f9a8fe06fb37c896d75668959edd80a47ee9134de899636c4f86dc9bcd0bc3cd1aa44ecfe608f687ddb4fdf5d7d2afa62d835395e358e4c0fa20260ced7923c114f9e9905b3e38dc3e93d93437df645121949926193eae32c40338aab7e5e5faaab4e4a5456d4b96db3bb4020f63331c54cea591e6ad3eed51af38c57aaec2a8843523e0f9cd3e171035344c11286d52138f26afb7cf89d7cbb0afa827aa545", 0xa9, 0x20004090, &(0x7f0000000380)={0x11, 0x2, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_FAMILY={0x5, 0xd, 0x2e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4840}, 0x4010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000003f000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0016800200b600884801"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', r2, 0x8, 0x8000, 0x2, 0x9, {{0x7, 0x4, 0x3, 0x1, 0x1c, 0x64, 0x0, 0x3a, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@generic={0x83, 0x6, "109cd278"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82140800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x1f8, 0x0, 0x108, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r2}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40844}, 0xc8c1) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 583.271506ms ago: executing program 3 (id=2705): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 564.225429ms ago: executing program 2 (id=2706): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) socket(0x1f, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) socket(0xa, 0x3, 0x5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x24048004) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 534.551594ms ago: executing program 0 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="14000000", 0x4}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x13, 0x35, 0x2, 0x26247835}}) 480.212681ms ago: executing program 1 (id=2708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000840)="06ff03076844268cb89e14f008004ee0ffff007ebabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000cf55c129cc6bcab6a353a6df69e2aaaaaaaaaa0179654cda8bc7796e00000011907808004db94038582f421bb5323e32001ce0000001000017c10008907807c2a9726968bc252ca04e7199ea9396ca7056c8f857cd8e8d56a550fc6e06f34519c31b3ec7d562314639fd688270ace837a32d48e70dd76bf40a4bb2f3ef3b5e1d5f1637a8fb93f57d59e961e09c67146055"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000cf55c129cc6bcab6a353a6df69e2aaaaaaaaaa0179654cda8bc7796e00000011907808004db94038582f421bb5323e32001ce0000001000017c10008907807c2a9726968bc252ca04e7199ea9396ca7056c8f857cd8e8d56a550fc6e06f34519c31b3ec7d562314639fd688270ace837a32d48e70dd76bf40a4bb2f3ef3b5e1d5f1637a8fb93f57d59e961e09c67146055"], 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r3, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 271.070158ms ago: executing program 0 (id=2709): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @broadcast, @broadcast}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x68}, @void}}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4cb4b900", @ANYRES16=r10, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900010000005b08000008000500020000001400040064766d727030000000000000000000000800050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 264.226595ms ago: executing program 3 (id=2710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x12c, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd6, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xc8, {0x1, 0xc, [{{0x0, 0x1}, @device_a, 0xb6, @value, 0x3}, {{0x0, 0x1}, @broadcast, 0x1000, @value, 0xf}, {{}, @broadcast, 0x8, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x2d}, {{}, @device_b, 0x3, @void, 0xd}, {{0x0, 0x1}, @device_b, 0xe7d, @value, 0x29}, {{}, @device_b, 0x8, @void, 0x3b}, {{}, @device_a, 0x2, @void, 0x1b}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x36}, {{0x0, 0x1}, @broadcast, 0xb6c, @value, 0x1c}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x2a}, {{}, @device_b, 0x4, @void, 0x9}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x821) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x12c, r1, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd6, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xc8, {0x1, 0xc, [{{0x0, 0x1}, @device_a, 0xb6, @value, 0x3}, {{0x0, 0x1}, @broadcast, 0x1000, @value, 0xf}, {{}, @broadcast, 0x8, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0xfff, @value=@broadcast, 0x2d}, {{}, @device_b, 0x3, @void, 0xd}, {{0x0, 0x1}, @device_b, 0xe7d, @value, 0x29}, {{}, @device_b, 0x8, @void, 0x3b}, {{}, @device_a, 0x2, @void, 0x1b}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x36}, {{0x0, 0x1}, @broadcast, 0xb6c, @value, 0x1c}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x2a}, {{}, @device_b, 0x4, @void, 0x9}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xfe}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x821) socketpair(0x15, 0x80000, 0x6, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xb0, "17b188ee0c31230a15640518934f201d1efceb2d4280122ea9a1f7e14bde8593f6dae0f3d73efbeab04bee43fd6220194bff348e82d649f622dbca2ad8f7d9686fa63212aa304165acf9dcd4dfac2c9fad70607f2e35374ceb16ecf448e6cc0b2450b1cf3fad343026dfbae8e72800d8d0c01d617577086dc82e8d3011d970d71b4c5e5f9a3c2c3abf73af1c82f9bd57d2dac4bd35f957f60d0131afe3f0372f1c5be2ec6002c9c1aec9f3da63629cc3"}, &(0x7f0000000380)=0xb8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={r4, 0x0, &(0x7f00000003c0)}, &(0x7f0000000440)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x104, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x20}, [@generic="a5f08af1b93d2c14fba8940ed9179b0ff7549ff54ad2dd8afa869f66d5d38fe288f6cfe940df9cdeaa309340402c34bb46b491132d17f33db97533f21a8f315aad69472ed78ada920880af2b053decbab224587118823d74398f092d3ce4b36f3a83013d49cc7796521f36efccdb0f4807c0b305303521564628d49dd97ed89dea36785b9b3449c9954ae4708e34d686428deff925325d4b25d3f6afdba492c3be5a2360ca5c340b5dbce31e98ab2222ef26427cbb329530d5c5b4279b341eef3b934c81f58d0116e3b5ada321e7e79f03b7dbeae7e5d532bfcbd724d0b849f79eaf1f79031761bad19d95f88b38d1ae"]}, 0x104}, 0x1, 0x0, 0x0, 0xc040}, 0x40004) (async) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x104, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfd, {0x20}, [@generic="a5f08af1b93d2c14fba8940ed9179b0ff7549ff54ad2dd8afa869f66d5d38fe288f6cfe940df9cdeaa309340402c34bb46b491132d17f33db97533f21a8f315aad69472ed78ada920880af2b053decbab224587118823d74398f092d3ce4b36f3a83013d49cc7796521f36efccdb0f4807c0b305303521564628d49dd97ed89dea36785b9b3449c9954ae4708e34d686428deff925325d4b25d3f6afdba492c3be5a2360ca5c340b5dbce31e98ab2222ef26427cbb329530d5c5b4279b341eef3b934c81f58d0116e3b5ada321e7e79f03b7dbeae7e5d532bfcbd724d0b849f79eaf1f79031761bad19d95f88b38d1ae"]}, 0x104}, 0x1, 0x0, 0x0, 0xc040}, 0x40004) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc804) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc804) bind$inet6(r3, &(0x7f0000000780)={0xa, 0x4e21, 0x67, @empty, 0x4}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0xb8d, 0xf2, 0x7, 0x1}, {0x4, 0x4, 0xf1, 0x4}, {0x3, 0x7, 0x4}, {0x1, 0x9, 0x8, 0x8}]}, 0x10) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000880)={0x4, &(0x7f0000000840)=[{0xb8d, 0xf2, 0x7, 0x1}, {0x4, 0x4, 0xf1, 0x4}, {0x3, 0x7, 0x4}, {0x1, 0x9, 0x8, 0x8}]}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000008c0)={r4, 0x2}, &(0x7f0000000900)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000008c0)={r4, 0x2}, &(0x7f0000000900)=0x8) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000940)="cb1f6dff", 0x4}, {&(0x7f0000000980)="01e367400ff02b925e26c5f5f5fbb584ba22d600967484f6b0a793eefed1498fda116df2e647f5e53b340f87fe1c05de2b0afb6b47be", 0x36}, {&(0x7f00000009c0)="e4cecbc5724f55c6b07d574143e85230b844ceef7ef3e38cbc0eb5a8352d9112b43e708dba06e5820cc15d6f9c30153488e1e5900094b534fb8c05a0514468e421270ce7d66d1ab05988bcb1f4bbd1d710f44882ef334c7ebfa55db1e4ffb22e6d57a154ad1b7413a5ef571ea4f5b1b9555ea4b5db97f62f5c0b81f92ec4dd", 0x7f}, {&(0x7f0000000a40)}], 0x4) (async) writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000940)="cb1f6dff", 0x4}, {&(0x7f0000000980)="01e367400ff02b925e26c5f5f5fbb584ba22d600967484f6b0a793eefed1498fda116df2e647f5e53b340f87fe1c05de2b0afb6b47be", 0x36}, {&(0x7f00000009c0)="e4cecbc5724f55c6b07d574143e85230b844ceef7ef3e38cbc0eb5a8352d9112b43e708dba06e5820cc15d6f9c30153488e1e5900094b534fb8c05a0514468e421270ce7d66d1ab05988bcb1f4bbd1d710f44882ef334c7ebfa55db1e4ffb22e6d57a154ad1b7413a5ef571ea4f5b1b9555ea4b5db97f62f5c0b81f92ec4dd", 0x7f}, {&(0x7f0000000a40)}], 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r3) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'team_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x7f, 0x6, 0x10, 0xc465, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x8000, 0x9, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x2, 0x7, 0x78, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x8001, 0xf807}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001080)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0xa8800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000d40)={0x2c4, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x11}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x12c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20048004}, 0x4014) socket$xdp(0x2c, 0x3, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000010c0)="d4a62074c5c915eecc678d3ac096bfcb8b6566244dcab9cadcbf9d0561bc8f147d3fe66f654f623c541f477bd2fe47646a97bb7fdeab69e9d395fb66dd759751d6fdbf29cf97827d2e8151a3eedaac571e94eb66332840c790d147b33cefcbbc808a0a8e74487103fc595fcf500d79de0144843c4c3dce84c23ceee4c6e1315f33334587fc43520761456fef6275dd96e2aea5552a98c19e16a743eb0ab27e79bbd343e901625fc884f2f810fba91eaa7e1b64d3e06af5689e", 0xb9) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x81}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r13, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x38, r12, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4f4548c3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_DEBUG={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0) sendmsg$BATADV_CMD_GET_HARDIF(r13, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r14, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001500)={r6, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x3, 0x3, 0x7f, 0x1, 0x4, 0x5}, 0x9c) ioctl$sock_SIOCADDRT(r13, 0x890b, &(0x7f00000015c0)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @xdp={0x2c, 0xc, r9, 0x20}, @generic={0x9, "c012c9d2a96b7e0c28db4b06b9b7"}, 0xdd37, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x3, 0x9}) 168.733664ms ago: executing program 4 (id=2711): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) recvmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) write$tun(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0080010006000100f5ff000000000000000000000f00000000000000000000000c00000000000000000000000f004eb800e9006400004006907864010102e00000014424f7237f000001000000000a0101010000000e7f00000100000001ac141412000010004e224e23", @ANYRES32=0x41424344, @ANYRES32=r8, @ANYBLOB="2004000090780001fe06e2d4c3d91312b42d430e1028189eb63193d66f6f06f91312192caf0d47bca43d15627bb0fda33227050600000001131223a039d44652021ef68346c6d0b7ed3500080a45d771360000520b051a00000004fffffffa00000005000000070000000000000001080a80000000ffffffff000000828e0e087290b0c6be5187c668412f4c36e5744150630730c2747e6d0c725bff9ccf74ed225d632fb986294dfbabfb35bb11d03245301cab10475dddbb389cadf15bbe8892104c52989888d10e702d1261c683594a8ede34403f8e10a00b18bebffa561412696d791b32883f84322ca8cfb7f39b9bd4b596d1a3c4f67002522f135ce508569f143f45e1d3e4215ef3f5961280794859ce5d64"], 0x117) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x10, 0x6, @remote}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0xfffffffe}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) 148.734392ms ago: executing program 2 (id=2712): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 71.124716ms ago: executing program 3 (id=2713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x42) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="58040000883ee190def92674ad9d4f2bc1bb4216d049ac9aabb2b21500c3ffe86b3a8c26b42b1db8e6a583d708619d4ab71b03b94e41ed2887f956114aaef9f410d87cf3281d2757b26887af88de3ae780ebfa64d830cf03e738c83e08e21fef341fdd715b84945578b65560af7d69a16eaf5fb94d", @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x44004052) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x0, 0x2, 0xdba165bad786fae3, 0x0, 0x5e}, 0x20) 0s ago: executing program 2 (id=2714): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000dd93"], 0x20}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x891b, 0x0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.2.307'. [ 99.415308][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.450141][ T7065] bond0: (slave team0): Enslaving as an active interface with an up link [ 99.520446][ T7069] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.538267][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 99.869561][ T7096] lo: entered allmulticast mode [ 99.880773][ T7096] lo: left allmulticast mode [ 99.973774][ T7105] ip6erspan0: entered promiscuous mode [ 100.016481][ T7096] veth0: entered promiscuous mode [ 100.040426][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 100.054404][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 100.509081][ T7126] tipc: Enabled bearer , priority 0 [ 100.536741][ T7126] syzkaller0: entered promiscuous mode [ 100.557122][ T7126] syzkaller0: entered allmulticast mode [ 100.586581][ T7126] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 100.691407][ T7126] tipc: Resetting bearer [ 100.754677][ T7124] tipc: Resetting bearer [ 100.767471][ T7136] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 100.769573][ T980] IPVS: starting estimator thread 0... [ 100.810214][ T7124] tipc: Disabling bearer [ 100.848292][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 100.867415][ T7145] IPVS: using max 25 ests per chain, 60000 per kthread [ 101.030728][ T7156] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 101.128443][ T7166] tipc: Enabling of bearer rejected, failed to enable media [ 101.209012][ T7171] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.287230][ T7180] netlink: 84 bytes leftover after parsing attributes in process `syz.4.337'. [ 101.446947][ T7183] tipc: Enabling of bearer rejected, failed to enable media [ 101.488211][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 101.589814][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 101.606939][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 101.733606][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.748693][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'. [ 101.757612][ T7154] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 101.766083][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.786388][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.811748][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.430594][ T7237] validate_nla: 3 callbacks suppressed [ 102.430613][ T7237] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 102.509810][ T7237] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 102.521212][ T7237] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 102.607075][ T7243] gretap1: entered promiscuous mode [ 102.616167][ T7243] bond1: (slave gretap1): making interface the new active one [ 102.639268][ T7243] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 102.665458][ T7245] netlink: 'syz.1.358': attribute type 12 has an invalid length. [ 102.695829][ T7237] macvlan2: entered promiscuous mode [ 102.701419][ T7237] macvlan2: entered allmulticast mode [ 102.708788][ T7237] bond1: entered promiscuous mode [ 102.717662][ T7237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.730868][ T7237] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 102.757721][ T7237] bond1: left promiscuous mode [ 102.853755][ T7245] vlan2: entered allmulticast mode [ 102.859304][ T7245] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 102.879062][ T7254] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 103.100262][ T7275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.335032][ T7293] ipvlan2: entered promiscuous mode [ 103.724913][ T7319] bond2: option min_links: invalid value (18446744073709551614) [ 103.734278][ T7319] bond2: option min_links: allowed values 0 - 2147483647 [ 103.752370][ T7319] bond2 (unregistering): Released all slaves [ 103.811658][ T7330] IPv6: sit1: Disabled Multicast RS [ 103.830265][ T7330] sit1: entered allmulticast mode [ 104.141441][ T7351] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 104.225551][ T7355] sctp: [Deprecated]: syz.0.388 (pid 7355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.225551][ T7355] Use struct sctp_sack_info instead [ 104.293436][ T7360] netlink: 'syz.4.386': attribute type 4 has an invalid length. [ 104.388448][ T7358] bond1: (slave bridge2): making interface the new active one [ 104.397443][ T7358] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 104.603907][ T7378] trusted_key: syz.0.392 sent an empty control message without MSG_MORE. [ 104.784081][ T7386] __nla_validate_parse: 7 callbacks suppressed [ 104.784098][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 104.858843][ T7387] tipc: Started in network mode [ 104.863875][ T7387] tipc: Node identity 46ce6e5ee73b, cluster identity 4711 [ 104.871257][ T7387] tipc: Enabled bearer , priority 0 [ 104.881583][ T7387] syzkaller0: entered promiscuous mode [ 104.887310][ T7387] syzkaller0: entered allmulticast mode [ 105.267613][ T7402] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 105.338269][ T7412] tipc: Resetting bearer [ 105.416158][ T7385] tipc: Resetting bearer [ 105.514639][ T7385] tipc: Disabling bearer [ 105.548992][ T7434] atomic_op ffff888027e14998 conn xmit_atomic 0000000000000000 [ 105.858389][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 105.872261][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.903908][ T7454] netlink: 'syz.0.412': attribute type 11 has an invalid length. [ 105.929048][ T7446] bond0: (slave rose0): Enslaving as an active interface with an up link [ 105.939589][ T7452] Bluetooth: MGMT ver 1.23 [ 105.944066][ T7452] Bluetooth: hci1: too big key_count value 32778 [ 105.954003][ T7454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.412'. [ 105.976240][ T7453] netlink: 'syz.1.411': attribute type 11 has an invalid length. [ 106.013389][ T7453] netlink: 224 bytes leftover after parsing attributes in process `syz.1.411'. [ 106.040364][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 106.066084][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 106.391008][ T7477] netlink: 96 bytes leftover after parsing attributes in process `syz.1.418'. [ 106.415346][ T7477] 8021q: VLANs not supported on sit0 [ 106.728208][ T7506] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 106.766084][ T7506] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 106.838154][ T7525] tipc: Enabled bearer , priority 0 [ 107.075689][ T7518] tipc: Disabling bearer [ 107.150356][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 107.311094][ T7535] hsr0 speed is unknown, defaulting to 1000 [ 107.381564][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'. [ 107.520998][ T7553] netlink: 128 bytes leftover after parsing attributes in process `syz.4.434'. [ 107.894646][ T7571] nbd: must specify at least one socket [ 108.351464][ T7600] x_tables: duplicate underflow at hook 2 [ 108.421519][ T7604] netlink: 'syz.0.445': attribute type 6 has an invalid length. [ 108.455172][ T7600] veth0_to_bridge: entered promiscuous mode [ 108.498532][ T7599] veth0_to_bridge: left promiscuous mode [ 108.829548][ T7625] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 108.977697][ T7625] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 108.986878][ T7625] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 109.004940][ T7625] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 109.067046][ T7629] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 109.104892][ T7629] bond2 (unregistering): Released all slaves [ 109.387987][ T7655] netlink: 'syz.2.456': attribute type 3 has an invalid length. [ 109.834742][ T7688] __nla_validate_parse: 4 callbacks suppressed [ 109.834758][ T7688] netlink: 52 bytes leftover after parsing attributes in process `syz.1.465'. [ 109.911020][ T7688] netlink: 52 bytes leftover after parsing attributes in process `syz.1.465'. [ 110.249451][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 110.372257][ T7728] tipc: Enabling of bearer rejected, failed to enable media [ 110.813391][ T7755] tipc: Enabled bearer , priority 0 [ 110.866645][ T7755] syzkaller0: entered promiscuous mode [ 110.872161][ T7755] syzkaller0: entered allmulticast mode [ 110.975347][ T7755] tipc: Resetting bearer [ 110.984414][ T7767] netlink: 64 bytes leftover after parsing attributes in process `syz.1.482'. [ 111.034842][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 111.043408][ T7775] sock: sock_timestamping_bind_phc: sock not bind to device [ 111.052512][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 111.266802][ T7753] tipc: Resetting bearer [ 111.350252][ T7753] tipc: Disabling bearer [ 111.368225][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 111.478748][ T7794] Bluetooth: MGMT ver 1.23 [ 111.491172][ T7790] netlink: 256 bytes leftover after parsing attributes in process `syz.2.488'. [ 111.507153][ T7790] netlink: 'syz.2.488': attribute type 9 has an invalid length. [ 111.682786][ T7797] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 111.691362][ T7797] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 111.785753][ T7803] tipc: Cannot configure node identity twice [ 111.829882][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 111.864448][ T7808] : entered promiscuous mode [ 112.104549][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.501'. [ 112.113211][ T7825] syzkaller0: entered promiscuous mode [ 112.119665][ T7825] syzkaller0: entered allmulticast mode [ 112.720957][ T7867] bridge1: entered promiscuous mode [ 112.731685][ T7867] bridge1: entered allmulticast mode [ 113.097145][ T7889] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 113.270790][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.344850][ T7901] bond2: Removing last ns target with arp_interval on [ 113.812917][ T44] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 114.261720][ T7960] netlink: 'syz.0.542': attribute type 30 has an invalid length. [ 114.393621][ T7962] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 114.476556][ T7978] xt_l2tp: missing protocol rule (udp|l2tpip) [ 114.485267][ T43] IPVS: starting estimator thread 0... [ 114.506318][ T7974] x_tables: duplicate underflow at hook 2 [ 114.569435][ T7976] SET target dimension over the limit! [ 114.598343][ T7979] IPVS: using max 35 ests per chain, 84000 per kthread [ 114.762540][ T7990] bridge0: port 3(batadv0) entered disabled state [ 114.773038][ T7990] bridge_slave_1: left allmulticast mode [ 114.781169][ T7990] bridge_slave_1: left promiscuous mode [ 114.790674][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.803902][ T7990] bridge_slave_0: left allmulticast mode [ 114.810624][ T7990] bridge_slave_0: left promiscuous mode [ 114.819998][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.093496][ T8012] delete_channel: no stack [ 115.280531][ T8023] netlink: 'syz.1.561': attribute type 3 has an invalid length. [ 115.406210][ T8033] tipc: Enabled bearer , priority 0 [ 115.413110][ T8035] __nla_validate_parse: 13 callbacks suppressed [ 115.413128][ T8035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.566'. [ 115.430162][ T8038] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 115.430677][ T8033] syzkaller0: entered promiscuous mode [ 115.443721][ T8038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.567'. [ 115.444680][ T8033] syzkaller0: entered allmulticast mode [ 115.519480][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 115.634188][ T8031] tipc: Resetting bearer [ 115.681960][ T8031] tipc: Disabling bearer [ 115.918083][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 115.960540][ T8071] sctp: [Deprecated]: syz.2.575 (pid 8071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.960540][ T8071] Use struct sctp_sack_info instead [ 115.979434][ T8070] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 116.192632][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 116.212238][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 116.250820][ T8082] netlink: 'syz.4.577': attribute type 11 has an invalid length. [ 116.298435][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.577'. [ 116.298718][ T7504] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.322114][ T8082] netlink: 'syz.4.577': attribute type 11 has an invalid length. [ 116.339469][ T7504] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.354901][ T7504] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.413444][ T7504] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.535094][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.581'. [ 116.712041][ T8113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.933765][ T8125] netlink: 88 bytes leftover after parsing attributes in process `syz.2.589'. [ 117.100730][ T8136] tipc: Enabled bearer , priority 0 [ 117.108887][ T8136] syzkaller0: entered promiscuous mode [ 117.117040][ T8136] syzkaller0: entered allmulticast mode [ 117.136842][ T8136] tipc: Resetting bearer [ 117.189814][ T8142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.593'. [ 117.205058][ T8139] tipc: Resetting bearer [ 117.228260][ T8139] tipc: Disabling bearer [ 117.358140][ T8151] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 117.405362][ T8151] bond2: (slave gretap2): making interface the new active one [ 117.415071][ T8151] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 117.491696][ T8159] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 117.579341][ T8166] : renamed from bridge_slave_0 (while UP) [ 117.682469][ T8170] netlink: 'syz.0.603': attribute type 7 has an invalid length. [ 117.696834][ T8170] netlink: 'syz.0.603': attribute type 8 has an invalid length. [ 117.910270][ T8179] tipc: Started in network mode [ 117.915180][ T8179] tipc: Node identity 0ed7abf15738, cluster identity 4711 [ 117.959656][ T8179] tipc: Enabled bearer , priority 0 [ 118.001630][ T8189] netlink: 'syz.0.607': attribute type 4 has an invalid length. [ 118.040966][ T8179] tipc: Resetting bearer [ 118.048387][ T8189] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 118.062839][ T8196] Unsupported ieee802154 address type: 0 [ 118.147166][ T8200] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 118.204877][ T8200] batman_adv: batadv0: Adding interface: gretap2 [ 118.213968][ T8200] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.242303][ T8200] batman_adv: batadv0: Interface activated: gretap2 [ 118.292621][ T8176] tipc: Disabling bearer [ 118.539303][ T8211] tipc: Enabling of bearer rejected, failed to enable media [ 118.637629][ T8235] ieee802154 phy1 wpan1: encryption failed: -22 [ 118.804469][ T8236] tipc: Enabled bearer , priority 0 [ 118.849354][ T8244] syz.1.621: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.872867][ T8244] CPU: 1 UID: 0 PID: 8244 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) [ 118.872914][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.872941][ T8244] Call Trace: [ 118.872950][ T8244] [ 118.872958][ T8244] dump_stack_lvl+0x189/0x250 [ 118.872990][ T8244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.873010][ T8244] ? __pfx__printk+0x10/0x10 [ 118.873031][ T8244] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 118.873051][ T8244] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 118.873070][ T8244] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 118.873090][ T8244] warn_alloc+0x214/0x310 [ 118.873110][ T8244] ? stack_depot_save_flags+0x41b/0x860 [ 118.873132][ T8244] ? __pfx_warn_alloc+0x10/0x10 [ 118.873152][ T8244] ? kasan_save_track+0x3e/0x80 [ 118.873168][ T8244] ? __kasan_kmalloc+0x93/0xb0 [ 118.873187][ T8244] ? xsk_setsockopt+0x4dc/0x8d0 [ 118.873210][ T8244] ? do_sock_setsockopt+0x17c/0x1b0 [ 118.873234][ T8244] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 118.873258][ T8244] ? do_syscall_64+0xfa/0xfa0 [ 118.873272][ T8244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.873297][ T8244] __vmalloc_node_range_noprof+0x125/0x12d0 [ 118.873348][ T8244] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.873369][ T8244] ? __kasan_kmalloc+0x93/0xb0 [ 118.873393][ T8244] vmalloc_user_noprof+0xad/0xf0 [ 118.873412][ T8244] ? xskq_create+0xbf/0x170 [ 118.873435][ T8244] xskq_create+0xbf/0x170 [ 118.873472][ T8244] xsk_init_queue+0xb0/0x110 [ 118.873498][ T8244] xsk_setsockopt+0x4dc/0x8d0 [ 118.873523][ T8244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.873549][ T8244] ? __pfx_aa_sk_perm+0x10/0x10 [ 118.873568][ T8244] ? aa_sock_opt_perm+0xff/0x1b0 [ 118.873590][ T8244] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 118.873612][ T8244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.873635][ T8244] do_sock_setsockopt+0x17c/0x1b0 [ 118.873666][ T8244] __x64_sys_setsockopt+0x13f/0x1b0 [ 118.873697][ T8244] do_syscall_64+0xfa/0xfa0 [ 118.873714][ T8244] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.873729][ T8244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.873746][ T8244] ? clear_bhb_loop+0x60/0xb0 [ 118.873767][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.873783][ T8244] RIP: 0033:0x7fe1fbd8efc9 [ 118.873808][ T8244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.873821][ T8244] RSP: 002b:00007fe1fcc46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.873845][ T8244] RAX: ffffffffffffffda RBX: 00007fe1fbfe5fa0 RCX: 00007fe1fbd8efc9 [ 118.873858][ T8244] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 118.873869][ T8244] RBP: 00007fe1fbe11f91 R08: 0000000000000004 R09: 0000000000000000 [ 118.873881][ T8244] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.873892][ T8244] R13: 00007fe1fbfe6038 R14: 00007fe1fbfe5fa0 R15: 00007ffcd6f5a7c8 [ 118.873925][ T8244] [ 118.873962][ T8244] Mem-Info: [ 119.137475][ T8249] tipc: Enabled bearer , priority 10 [ 119.168237][ T8244] active_anon:5937 inactive_anon:0 isolated_anon:0 [ 119.168237][ T8244] active_file:2564 inactive_file:39890 isolated_file:0 [ 119.168237][ T8244] unevictable:768 dirty:51 writeback:0 [ 119.168237][ T8244] slab_reclaimable:10682 slab_unreclaimable:100316 [ 119.168237][ T8244] mapped:29023 shmem:1355 pagetables:1301 [ 119.168237][ T8244] sec_pagetables:0 bounce:0 [ 119.168237][ T8244] kernel_misc_reclaimable:0 [ 119.168237][ T8244] free:1321895 free_pcp:15814 free_cma:0 [ 119.271958][ T8244] Node 0 active_anon:23848kB inactive_anon:0kB active_file:10256kB inactive_file:159356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116092kB dirty:200kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13064kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.345278][ T8244] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.378728][ T8244] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.412610][ T8244] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 119.419437][ T8244] Node 0 DMA32 free:1383720kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24148kB inactive_anon:0kB active_file:10256kB inactive_file:159356kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:44400kB local_pcp:22996kB free_cma:0kB [ 119.455280][ T8244] lowmem_reserve[]: 0 0 1 1 1 [ 119.460389][ T8244] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.525743][ T8244] lowmem_reserve[]: 0 0 0 0 0 [ 119.532015][ T8244] Node 1 Normal free:3888500kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19460kB local_pcp:8004kB free_cma:0kB [ 119.573474][ T8244] lowmem_reserve[]: 0 0 0 0 0 [ 119.578747][ T8244] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 119.600394][ T8271] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 119.616782][ T8244] Node 0 DMA32: 499*4kB (UME) 334*8kB (UME) 151*16kB (UME) 133*32kB (UME) 51*64kB (UME) 30*128kB (UM) 21*256kB (UM) 17*512kB (UME) 6*1024kB (UME) 5*2048kB (UM) 326*4096kB (UM) = 1384204kB [ 119.639881][ T8271] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 119.656715][ T8244] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 119.673453][ T8271] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 119.679283][ T8244] Node 1 Normal: 203*4kB (UME) 65*8kB (UME) 40*16kB (UME) 66*32kB (UME) 20*64kB (UME) 7*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888500kB [ 119.710907][ T8244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.723199][ T8244] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.734530][ T8244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.744703][ T8244] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.786355][ T8244] 45330 total pagecache pages [ 119.792154][ T8244] 0 pages in swap cache [ 119.816204][ T8244] Free swap = 124996kB [ 119.830270][ T8244] Total swap = 124996kB [ 119.838891][ T8244] 2097051 pages RAM [ 119.842819][ T8244] 0 pages HighMem/MovableOnly [ 119.847938][ T8244] 424556 pages reserved [ 119.852194][ T8244] 0 pages cma reserved [ 119.945146][ T8279] netlink: 'syz.3.631': attribute type 29 has an invalid length. [ 119.958295][ T8279] netlink: 'syz.3.631': attribute type 29 has an invalid length. [ 119.983975][ T8282] x_tables: duplicate underflow at hook 1 [ 120.146207][ T5893] tipc: Node number set to 2717216350 [ 120.331399][ T8300] netlink: 'syz.3.638': attribute type 3 has an invalid length. [ 120.475180][ T8304] __nla_validate_parse: 13 callbacks suppressed [ 120.475199][ T8304] netlink: 348 bytes leftover after parsing attributes in process `syz.0.639'. [ 120.513529][ T8314] netlink: 'syz.2.640': attribute type 2 has an invalid length. [ 120.675142][ T8324] tipc: Enabled bearer , priority 0 [ 120.683824][ T8324] syzkaller0: entered promiscuous mode [ 120.693454][ T8324] syzkaller0: entered allmulticast mode [ 120.715558][ T8324] tipc: Resetting bearer [ 120.781679][ T8327] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 120.840575][ T8331] netlink: 'syz.4.647': attribute type 5 has an invalid length. [ 120.912809][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 121.065645][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 121.079651][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 121.101357][ T8345] netlink: 'syz.4.652': attribute type 2 has an invalid length. [ 121.110431][ T8345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.121473][ T8345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.652'. [ 121.133916][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 121.144447][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'. [ 121.252171][ T8353] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 121.264880][ T8353] bond2 (unregistering): Released all slaves [ 121.289292][ T8302] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.609777][ T8317] tipc: Resetting bearer [ 121.662264][ T8317] tipc: Disabling bearer [ 121.769178][ T8386] syzkaller0: entered promiscuous mode [ 121.774696][ T8386] syzkaller0: entered allmulticast mode [ 121.913630][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 121.926051][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 122.165787][ T8399] netlink: 'syz.0.664': attribute type 4 has an invalid length. [ 122.539750][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 123.318963][ T8459] bond_slave_1: entered promiscuous mode [ 123.728476][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.750205][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.764290][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.806633][ T44] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.313305][ T8529] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.553432][ T8548] sctp: [Deprecated]: syz.1.701 (pid 8548) Use of int in maxseg socket option. [ 124.553432][ T8548] Use struct sctp_assoc_value instead [ 124.789453][ T8563] validate_nla: 1 callbacks suppressed [ 124.789471][ T8563] netlink: 'syz.3.706': attribute type 29 has an invalid length. [ 124.852968][ T8563] netlink: 'syz.3.706': attribute type 29 has an invalid length. [ 124.879801][ T8571] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 125.199353][ T8585] netlink: 'syz.4.711': attribute type 5 has an invalid length. [ 125.340565][ T8601] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.388098][ T8601] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.520951][ T8612] tipc: Enabled bearer , priority 0 [ 125.529910][ T8612] syzkaller0: entered promiscuous mode [ 125.535471][ T8612] syzkaller0: entered allmulticast mode [ 125.554948][ T8612] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.605195][ T8612] tipc: Resetting bearer [ 125.626646][ T8609] tipc: Resetting bearer [ 125.673561][ T8609] tipc: Disabling bearer [ 125.773062][ T8620] netlink: 'syz.1.722': attribute type 21 has an invalid length. [ 125.816666][ T8620] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.818655][ T8622] netlink: 'syz.2.723': attribute type 21 has an invalid length. [ 125.846410][ T8622] __nla_validate_parse: 18 callbacks suppressed [ 125.846429][ T8622] netlink: 128 bytes leftover after parsing attributes in process `syz.2.723'. [ 125.847188][ T8620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.868555][ T8622] netlink: 'syz.2.723': attribute type 4 has an invalid length. [ 125.869510][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 125.879652][ T8622] netlink: 'syz.2.723': attribute type 5 has an invalid length. [ 125.884537][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 125.893196][ T8622] netlink: 3 bytes leftover after parsing attributes in process `syz.2.723'. [ 125.899436][ T8620] IPv6: NLM_F_CREATE should be set when creating new route [ 126.095247][ T8633] netlink: 104 bytes leftover after parsing attributes in process `syz.3.726'. [ 126.156706][ T8620] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 126.173421][ T8637] netlink: 'syz.4.730': attribute type 10 has an invalid length. [ 126.183438][ T8620] bond3: entered promiscuous mode [ 126.189588][ T8620] bond3: entered allmulticast mode [ 126.195298][ T8620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.207926][ T8637] team0: Device ipvlan1 failed to register rx_handler [ 126.242210][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 126.287871][ T8635] vlan2: entered promiscuous mode [ 126.293356][ T8635] erspan0: entered promiscuous mode [ 126.594147][ T8666] netlink: 'syz.3.733': attribute type 8 has an invalid length. [ 126.877834][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 126.961225][ T8683] netlink: 'syz.3.742': attribute type 11 has an invalid length. [ 127.109128][ T8694] openvswitch: netlink: Key type 1040 is out of range max 32 [ 127.749311][ T8724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 127.954845][ T8728] xt_l2tp: wrong L2TP version: 0 [ 128.284354][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.761'. [ 128.480330][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.685355][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.704030][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.888861][ T8748] bond1: left promiscuous mode [ 128.893752][ T8748] bond1: left allmulticast mode [ 128.909159][ T8748] veth4: left promiscuous mode [ 128.914254][ T8748] veth5: left promiscuous mode [ 128.920959][ T8748] ip6erspan0: left promiscuous mode [ 129.002741][ T8748] ipvlan2: left promiscuous mode [ 129.014552][ T8748] batman_adv: batadv0: Interface deactivated: gretap2 [ 129.056990][ T7504] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.108739][ T7504] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.140792][ T7504] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.160875][ T7504] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.258748][ T8786] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 129.311526][ T8786] bond2 (unregistering): Released all slaves [ 129.714388][ T8822] netlink: 44 bytes leftover after parsing attributes in process `syz.3.776'. [ 129.724783][ T8811] tipc: Enabling of bearer rejected, failed to enable media [ 129.887076][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 129.897347][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.910595][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 129.920518][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.191128][ T8846] validate_nla: 3 callbacks suppressed [ 130.191146][ T8846] netlink: 'syz.2.781': attribute type 8 has an invalid length. [ 130.717029][ T8877] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 130.819716][ T8884] netlink: 'syz.1.795': attribute type 21 has an invalid length. [ 130.981832][ T8898] __nla_validate_parse: 8 callbacks suppressed [ 130.981848][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 131.005281][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 131.015176][ T8899] netlink: 'syz.1.800': attribute type 30 has an invalid length. [ 131.029318][ T8898] netlink: 'syz.1.800': attribute type 30 has an invalid length. [ 131.035511][ T8901] netlink: 36 bytes leftover after parsing attributes in process `syz.2.801'. [ 131.037737][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 131.052855][ T8902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.801'. [ 131.055679][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 131.259936][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 131.306649][ T8922] netlink: 'syz.0.807': attribute type 2 has an invalid length. [ 131.386118][ T8928] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 131.438424][ T8931] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.808'. [ 131.452573][ T8931] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 131.759548][ T8945] x_tables: duplicate underflow at hook 4 [ 131.766204][ T8945] x_tables: duplicate underflow at hook 1 [ 132.274268][ T8958] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 132.283030][ T8958] netlink: 220 bytes leftover after parsing attributes in process `syz.4.814'. [ 132.536629][ T8973] ipt_rpfilter: unknown options [ 132.873958][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.013507][ T9007] syzkaller1: entered promiscuous mode [ 133.026178][ T9007] syzkaller1: entered allmulticast mode [ 133.040517][ T9007] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 133.164247][ T9015] hsr0 speed is unknown, defaulting to 1000 [ 133.411735][ T9030] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.835'. [ 133.544484][ T9041] netlink: 'syz.0.840': attribute type 11 has an invalid length. [ 133.612218][ T9043] openvswitch: netlink: IPv6 tunnel dst address is zero [ 133.654838][ T9045] tipc: Enabled bearer , priority 0 [ 133.664218][ T9045] syzkaller0: entered promiscuous mode [ 133.671515][ T9045] syzkaller0: entered allmulticast mode [ 133.718213][ T9045] tipc: Resetting bearer [ 133.738338][ T9044] tipc: Resetting bearer [ 133.755389][ T9044] tipc: Disabling bearer [ 133.841746][ T9053] Bluetooth: hci0: invalid length 39, exp 2 for type 19 [ 134.324054][ T9082] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 134.347881][ T9082] bond3 (unregistering): Released all slaves [ 134.667128][ T5840] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 134.922702][ T9130] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 134.924606][ T9132] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 134.952090][ T9132] veth1_macvtap: left promiscuous mode [ 134.952320][ T9130] netlink: 'syz.3.869': attribute type 3 has an invalid length. [ 134.967558][ T9132] team0: Device veth1_macvtap failed to register rx_handler [ 134.981504][ T9130] NCSI netlink: No device for ifindex 0 [ 135.113272][ T9147] x_tables: duplicate underflow at hook 3 [ 135.281768][ T9163] veth0_to_team: entered promiscuous mode [ 135.308735][ T9163] veth0_to_team: entered allmulticast mode [ 135.368709][ T9170] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 135.480771][ T9181] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 135.781626][ T9198] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 135.886637][ T9205] Bluetooth: hci0: unsupported parameter 512 [ 135.889534][ T9207] sock: sock_set_timeout: `syz.1.893' (pid 9207) tries to set negative timeout [ 135.892680][ T9205] Bluetooth: hci0: unsupported parameter 57307 [ 135.892716][ T9205] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 136.056846][ T9216] __nla_validate_parse: 8 callbacks suppressed [ 136.056865][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 136.073544][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 136.083294][ T9216] netlink: 'syz.2.895': attribute type 6 has an invalid length. [ 136.087225][ T9218] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 136.125765][ T9218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.135085][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 136.148983][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 136.160212][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.895'. [ 136.173673][ T9216] netlink: 'syz.2.895': attribute type 6 has an invalid length. [ 136.381777][ T9218] "syz.3.896" (9218) uses obsolete ecb(arc4) skcipher [ 136.602171][ T9247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.900'. [ 136.698730][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.4.902'. [ 136.704792][ T9253] netlink: 68 bytes leftover after parsing attributes in process `syz.0.900'. [ 136.824959][ T9263] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 136.840861][ T9269] netlink: 104 bytes leftover after parsing attributes in process `syz.1.905'. [ 137.165184][ T9291] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.185121][ T9289] syzkaller0: entered promiscuous mode [ 137.216944][ T9289] syzkaller0: entered allmulticast mode [ 137.257486][ T9288] tipc: Enabled bearer , priority 0 [ 137.265681][ T9300] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 137.284280][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 137.300580][ T9300] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 137.349535][ T9289] tipc: Resetting bearer [ 137.393122][ T9289] tipc: Disabling bearer [ 137.466256][ T9309] tipc: Enabled bearer , priority 0 [ 137.474320][ T9309] syzkaller0: entered promiscuous mode [ 137.480476][ T9309] syzkaller0: entered allmulticast mode [ 137.511648][ T9309] tipc: Resetting bearer [ 137.522127][ T9308] tipc: Resetting bearer [ 137.559052][ T9308] tipc: Disabling bearer [ 137.714859][ T9328] netlink: 'syz.0.925': attribute type 4 has an invalid length. [ 138.004864][ T9351] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 138.030786][ T9350] netlink: 'syz.3.928': attribute type 11 has an invalid length. [ 138.037517][ T9351] bond5 (unregistering): Released all slaves [ 138.090018][ T30] audit: type=1800 audit(1760922635.621:2): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.929" name="memory.events" dev="tmpfs" ino=885 res=0 errno=0 [ 138.148333][ T9354] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 138.769566][ T9394] netlink: 'syz.1.938': attribute type 9 has an invalid length. [ 138.830640][ T9395] netlink: del zone limit has 4 unknown bytes [ 139.456738][ T5852] Bluetooth: hci4: link tx timeout [ 139.462280][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.472447][ T5849] Bluetooth: hci4: link tx timeout [ 139.477699][ T5849] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.821880][ T9459] netlink: 'syz.2.953': attribute type 33 has an invalid length. [ 140.480421][ T9511] netlink: 'syz.1.968': attribute type 30 has an invalid length. [ 140.595561][ T9511] bond4: option arp_missed_max: invalid value (0) [ 140.617233][ T9511] bond4: option arp_missed_max: allowed values 1 - 255 [ 140.629186][ T9511] bond4 (unregistering): Released all slaves [ 141.507048][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 151.520687][ T9545] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 151.796647][ T9564] __nla_validate_parse: 14 callbacks suppressed [ 151.796665][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 151.811173][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'. [ 152.013251][ T9589] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 152.134240][ T9588] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 152.180232][ T9588] bond3: entered promiscuous mode [ 152.188197][ T9588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.198024][ T9601] tc_dump_action: action bad kind [ 152.250142][ T9588] netlink: 312 bytes leftover after parsing attributes in process `syz.2.984'. [ 152.292851][ T9588] bond3: (slave bridge1): making interface the new active one [ 152.318782][ T9588] bridge1: entered promiscuous mode [ 152.335810][ T9588] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 152.760567][ T9620] netlink: 256 bytes leftover after parsing attributes in process `syz.0.990'. [ 152.774756][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'. [ 152.844769][ T9626] xt_addrtype: ipv6 does not support BROADCAST matching [ 152.853002][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 152.887577][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 152.947973][ T9631] netlink: 96 bytes leftover after parsing attributes in process `syz.4.994'. [ 152.990760][ T9634] netlink: 'syz.1.995': attribute type 8 has an invalid length. [ 153.159006][ T9643] tipc: Enabled bearer , priority 13 [ 153.173177][ T9646] team_slave_0: entered promiscuous mode [ 153.179151][ T9646] team_slave_1: entered promiscuous mode [ 153.206662][ T9646] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.229095][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 153.267810][ T9646] vlan2: entered allmulticast mode [ 153.273125][ T9646] bridge0: entered allmulticast mode [ 153.292753][ T9648] tipc: Enabling of bearer rejected, already enabled [ 153.304820][ T9656] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 153.313021][ T9656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1002'. [ 153.372589][ T9646] C: renamed from team_slave_0 (while UP) [ 153.390629][ T9646] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 153.409541][ T9646] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 153.434960][ T9655] tipc: Enabled bearer , priority 0 [ 153.466508][ T9658] syzkaller0: entered promiscuous mode [ 153.475098][ T9658] syzkaller0: entered allmulticast mode [ 153.498834][ T9655] tipc: Resetting bearer [ 153.512684][ T9654] tipc: Resetting bearer [ 153.541126][ T9654] tipc: Disabling bearer [ 153.593735][ T9672] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 153.607692][ T9672] bond3 (unregistering): Released all slaves [ 154.281607][ T10] tipc: Node number set to 1860026183 [ 154.352824][ T9706] netlink: 'syz.2.1016': attribute type 39 has an invalid length. [ 154.432617][ T9704] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 154.503475][ T5840] IPVS: starting estimator thread 0... [ 154.633689][ T9718] IPVS: using max 25 ests per chain, 60000 per kthread [ 154.810217][ T9735] block nbd4: not configured, cannot reconfigure [ 154.953361][ T9743] netlink: 'syz.2.1026': attribute type 10 has an invalid length. [ 155.173871][ T9757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.546297][ T9774] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 155.880068][ T9795] bond5: entered allmulticast mode [ 155.901056][ T9795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.459023][ T9829] openvswitch: netlink: Flow key attr not present in new flow. [ 157.101180][ T9872] __nla_validate_parse: 13 callbacks suppressed [ 157.101232][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 157.467718][ T9886] bond6: entered allmulticast mode [ 157.485480][ T9886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.512250][ T9886] bridge0: port 3(bond6) entered blocking state [ 157.540983][ T9886] bridge0: port 3(bond6) entered disabled state [ 157.550147][ T9886] bond6: entered promiscuous mode [ 157.628520][ T9900] netlink: 'syz.4.1064': attribute type 21 has an invalid length. [ 157.677087][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1064'. [ 157.806625][ T9907] netlink: 'syz.3.1067': attribute type 11 has an invalid length. [ 157.856138][ T9914] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1067'. [ 157.903145][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1070'. [ 157.929647][ T9919] block nbd1: Unsupported socket: should be TCP or UNIX. [ 157.997683][ T9917] netlink: 'syz.0.1071': attribute type 2 has an invalid length. [ 158.021741][ T9923] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 158.056301][ T9923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1072'. [ 158.187153][ T9931] nbd: must specify an index to disconnect [ 158.498845][ T9960] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 158.592865][ T9968] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1080'. [ 158.771295][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1086'. [ 158.826767][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 158.858371][ T9987] netlink: 'syz.2.1086': attribute type 4 has an invalid length. [ 158.890041][ T9987] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1086'. [ 159.092437][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 159.154202][T10004] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 159.700119][T10040] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 159.755545][T10040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.871108][T10040] veth1: entered promiscuous mode [ 159.912084][T10040] bond3: (slave veth1): Enslaving as an active interface with an up link [ 159.937956][T10061] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 159.976621][T10061] block nbd1: not configured, cannot reconfigure [ 160.664778][T10110] netem: change failed [ 161.369399][T10161] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 161.394976][T10161] macvlan0: entered promiscuous mode [ 161.402967][T10161] batadv0: entered promiscuous mode [ 161.410040][T10161] hsr1: entered allmulticast mode [ 161.415094][T10161] macvlan0: entered allmulticast mode [ 161.476055][T10161] veth1_vlan: entered allmulticast mode [ 161.495808][T10161] batadv0: entered allmulticast mode [ 161.526082][T10161] macvlan0: left promiscuous mode [ 161.543107][T10161] batadv0: left promiscuous mode [ 161.578997][T10168] C: renamed from team_slave_0 [ 161.594199][T10168] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 161.634970][T10177] xt_hashlimit: max too large, truncated to 1048576 [ 161.648708][T10168] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.695017][T10175] xt_hashlimit: max too large, truncated to 1048576 [ 161.924648][T10192] sch_fq: defrate 0 ignored. [ 162.239407][T10202] bond4: option xmit_hash_policy: invalid value (64) [ 162.260802][T10202] bond4 (unregistering): Released all slaves [ 162.365247][T10207] netlink: 'syz.2.1142': attribute type 21 has an invalid length. [ 162.384048][T10207] __nla_validate_parse: 16 callbacks suppressed [ 162.384066][T10207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1142'. [ 162.516174][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 162.620142][T10226] Cannot find add_set index 1 as target [ 162.632950][T10228] xt_TCPMSS: Only works on TCP SYN packets [ 162.655851][T10230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.672904][T10230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.780161][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 162.795027][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.932547][T10246] netlink: zone id is out of range [ 162.943541][T10246] netlink: zone id is out of range [ 162.955270][T10246] netlink: zone id is out of range [ 162.968239][T10249] netlink: 'syz.4.1151': attribute type 11 has an invalid length. [ 162.972162][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 162.989364][T10246] netlink: zone id is out of range [ 162.994518][T10246] netlink: zone id is out of range [ 163.011963][T10246] netlink: zone id is out of range [ 163.026162][T10246] netlink: zone id is out of range [ 163.177167][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 163.532904][T10285] syzkaller0: entered promiscuous mode [ 163.539808][T10285] syzkaller0: entered allmulticast mode [ 163.780319][T10249] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 163.982316][T10300] sctp: [Deprecated]: syz.4.1167 (pid 10300) Use of int in maxseg socket option. [ 163.982316][T10300] Use struct sctp_assoc_value instead [ 164.281768][T10311] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 164.596758][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1178'. [ 164.672220][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 164.686100][T10336] netlink: 'syz.4.1178': attribute type 8 has an invalid length. [ 164.712988][T10346] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1179'. [ 164.824052][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1179'. [ 164.849806][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 165.028497][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 165.180653][T10375] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 165.202551][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.255757][T10375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 165.290229][T10369] syzkaller0: entered promiscuous mode [ 165.316319][T10369] syzkaller0: entered allmulticast mode [ 166.207779][T10443] 8021q: VLANs not supported on sit0 [ 166.331578][T10453] tc_dump_action: action bad kind [ 166.440532][ T30] audit: type=1800 audit(1760922663.971:3): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1208" name="memory.events" dev="tmpfs" ino=1273 res=0 errno=0 [ 166.554234][T10469] gtp0: entered promiscuous mode [ 166.565968][T10469] gtp0: entered allmulticast mode [ 166.630378][T10468] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 166.644346][T10468] bond4: entered promiscuous mode [ 166.650886][T10468] bond4: entered allmulticast mode [ 166.658887][T10468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.118469][T10453] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 167.766506][T10531] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 167.788636][T10531] xt_SECMARK: invalid mode: 9 [ 167.988843][T10549] __nla_validate_parse: 5 callbacks suppressed [ 167.988860][T10549] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1228'. [ 168.217251][T10559] netlink: 'syz.2.1234': attribute type 11 has an invalid length. [ 168.430119][T10567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1237'. [ 168.441322][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 168.589248][T10575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'. [ 168.602746][T10575] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1240'. [ 168.613318][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 168.628559][T10577] net_ratelimit: 17 callbacks suppressed [ 168.628578][T10577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.652940][T10576] nbd: device at index 1 is going down [ 168.678395][T10576] nbd: device at index 1 is going down [ 168.695713][T10575] netlink: 'syz.2.1240': attribute type 11 has an invalid length. [ 168.699148][T10580] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1242'. [ 168.725304][T10575] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1240'. [ 168.958072][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 169.463326][T10605] : entered promiscuous mode [ 169.469519][T10624] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1252'. [ 169.832917][T10643] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 169.925428][T10643] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1257'. [ 169.993992][T10649] team1: entered promiscuous mode [ 170.000919][T10649] team1: entered allmulticast mode [ 170.004367][T10648] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 170.550080][T10685] tipc: Enabling of bearer rejected, already enabled [ 170.563025][T10685] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 170.572131][T10685] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 170.638552][T10685] tipc: Resetting bearer [ 170.675344][T10691] sch_fq: defrate 0 ignored. [ 170.715403][T10696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.942379][T10714] sctp: [Deprecated]: syz.0.1272 (pid 10714) Use of int in maxseg socket option. [ 170.942379][T10714] Use struct sctp_assoc_value instead [ 171.173710][T10729] bridge0: entered promiscuous mode [ 171.218138][T10727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.238596][T10727] bridge0: port 1(bond4) entered blocking state [ 171.275080][T10727] bridge0: port 1(bond4) entered disabled state [ 171.319622][T10727] bond4: entered allmulticast mode [ 171.336932][T10727] bond4: entered promiscuous mode [ 171.369484][T10724] bridge0: left promiscuous mode [ 171.600935][T10756] lo: entered promiscuous mode [ 171.610910][T10756] tunl0: entered promiscuous mode [ 171.636929][T10756] gre0: entered promiscuous mode [ 171.647990][T10756] gretap0: entered promiscuous mode [ 171.662756][T10756] erspan0: entered promiscuous mode [ 171.671648][T10756] ip_vti0: entered promiscuous mode [ 172.152700][T10788] netlink: 'syz.3.1293': attribute type 1 has an invalid length. [ 172.558829][T10816] x_tables: duplicate underflow at hook 1 [ 172.741781][T10830] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20002 [ 173.548298][T10886] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 174.438007][T10937] bridge0: port 4(syz_tun) entered blocking state [ 174.457368][T10937] bridge0: port 4(syz_tun) entered disabled state [ 174.526789][T10937] syz_tun: entered allmulticast mode [ 174.538594][T10937] syz_tun: entered promiscuous mode [ 174.550572][T10954] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 174.558636][T10954] netlink: 'syz.2.1336': attribute type 11 has an invalid length. [ 174.586224][T10954] __nla_validate_parse: 10 callbacks suppressed [ 174.586240][T10954] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1336'. [ 174.667563][T10957] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 174.750107][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1337'. [ 174.878826][T10970] tipc: Enabling of bearer rejected, failed to enable media [ 174.974175][T10975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'. [ 175.337176][T10994] tipc: Enabled bearer , priority 0 [ 175.423401][T10994] syzkaller0: entered promiscuous mode [ 175.431213][T10994] syzkaller0: entered allmulticast mode [ 175.456546][T11001] tipc: Resetting bearer [ 175.597068][T10992] tipc: Resetting bearer [ 175.672673][T11012] xt_SECMARK: invalid mode: 9 [ 175.699070][T11012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1348'. [ 175.748628][T11019] Unsupported ieee802154 address type: 0 [ 175.775740][T11019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1349'. [ 176.456075][ T8782] tipc: Node number set to 1508879345 [ 177.090743][T10992] tipc: Disabling bearer [ 177.300330][T11046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 177.323132][T11055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1356'. [ 177.358766][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1356'. [ 177.369686][T11055] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 [ 177.649902][T11082] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 177.769310][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 177.782907][T11090] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1362'. [ 177.797106][T11090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1362'. [ 177.833401][T11090] bridge0: entered promiscuous mode [ 178.057130][T11109] netlink: 'syz.4.1367': attribute type 21 has an invalid length. [ 178.316390][T11127] sit0: entered promiscuous mode [ 178.321733][T11127] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 178.428796][T11135] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 178.578508][T11147] tipc: Enabling of bearer rejected, already enabled [ 178.938442][T11164] netlink: 'syz.2.1382': attribute type 10 has an invalid length. [ 178.984662][T11168] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 178.992672][T11170] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 179.013751][T11168] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 179.021579][T11170] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 179.088157][T11164] dummy0: entered promiscuous mode [ 179.118233][T11164] team0: Port device dummy0 added [ 179.301772][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.303528][T11186] x_tables: duplicate underflow at hook 3 [ 179.389637][T11188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.442060][T11190] batadv_slave_1: entered promiscuous mode [ 179.519168][T11196] batadv_slave_1: left promiscuous mode [ 179.665289][T11208] macvtap1: entered allmulticast mode [ 179.673604][T11208] veth0_macvtap: entered allmulticast mode [ 179.758839][T11210] __nla_validate_parse: 8 callbacks suppressed [ 179.758854][T11210] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1394'. [ 179.866667][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1397'. [ 180.002007][T11210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.020537][T11210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.033554][T11210] bond0 (unregistering): Released all slaves [ 180.090415][T11234] tipc: Enabling of bearer rejected, already enabled [ 180.256899][T11245] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 [ 180.582690][T11272] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.717265][T11278] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 180.739298][T11282] x_tables: unsorted underflow at hook 3 [ 180.751319][T11278] bond7 (unregistering): Released all slaves [ 180.813701][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1413'. [ 181.038789][T11300] xt_hashlimit: size too large, truncated to 1048576 [ 181.137160][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 181.217170][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1419'. [ 181.517428][T11323] tipc: New replicast peer: 0.0.0.0 [ 181.535424][T11323] tipc: Enabled bearer , priority 10 [ 181.557785][T11324] tipc: New replicast peer: 255.255.255.255 [ 181.844222][T11345] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.1429'. [ 181.877904][T11345] openvswitch: netlink: Duplicate key (type 1). [ 181.903540][T11347] syzkaller1: entered promiscuous mode [ 181.917331][T11347] syzkaller1: entered allmulticast mode [ 181.956733][T11347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1431'. [ 182.273325][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 182.487255][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 182.526098][ T5840] tipc: Node number set to 2125523725 [ 182.595296][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 182.665824][T11412] netlink: 'syz.1.1445': attribute type 10 has an invalid length. [ 182.785496][T11409] IPVS: persistence engine module ip_vs_pe_À not found [ 182.807009][T11412] team0: Device veth1_macvtap failed to register rx_handler [ 183.012649][T11428] batman_adv: batadv0: Adding interface: vlan0 [ 183.038391][T11428] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.095232][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.106230][T11436] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 183.129836][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.176430][T11428] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 183.242261][T11439] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 183.475153][T11450] tap0: tun_chr_ioctl cmd 2148553947 [ 183.631081][T11471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.797625][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.862454][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.007225][T11492] netlink: 'syz.1.1469': attribute type 1 has an invalid length. [ 184.088421][T11497] netlink: 'syz.3.1470': attribute type 11 has an invalid length. [ 184.126494][T11497] netlink: 'syz.3.1470': attribute type 11 has an invalid length. [ 184.243501][T11492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.468620][T11526] gre0: left promiscuous mode [ 185.019178][T11548] netlink: 'syz.3.1480': attribute type 2 has an invalid length. [ 185.027619][T11549] netlink: 'syz.3.1480': attribute type 2 has an invalid length. [ 185.442732][T11565] __nla_validate_parse: 8 callbacks suppressed [ 185.442752][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 185.590720][T11574] : entered promiscuous mode [ 185.763373][T11592] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1490'. [ 186.149184][T11613] xt_connbytes: Forcing CT accounting to be enabled [ 186.157443][T11613] Cannot find set identified by id 0 to match [ 186.290337][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'. [ 186.304845][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'. [ 186.368485][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1502'. [ 186.395464][ T30] audit: type=1800 audit(1760922683.921:4): pid=11619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1498" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 186.412003][T11635] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 186.440424][T11635] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1502'. [ 186.446776][T11619] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 186.461048][T11629] syz.2.1498 (11629) used greatest stack depth: 17976 bytes left [ 186.528595][T11585] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 186.536311][T11619] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 186.556772][T11619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 186.580652][T11644] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 186.945342][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'. [ 187.608860][T11699] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1519'. [ 187.778227][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 187.893841][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 188.053015][T11731] openvswitch: netlink: IP tunnel dst address not specified [ 188.661104][T11771] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.991947][T11791] netlink: 'syz.2.1543': attribute type 6 has an invalid length. [ 189.200538][T11812] syz_tun: entered allmulticast mode [ 189.243806][T11812] syz_tun: left allmulticast mode [ 189.583962][T11840] sctp: [Deprecated]: syz.2.1556 (pid 11840) Use of int in max_burst socket option. [ 189.583962][T11840] Use struct sctp_assoc_value instead [ 190.445024][T11907] netlink: 'syz.0.1572': attribute type 29 has an invalid length. [ 190.504362][T11907] netlink: 'syz.0.1572': attribute type 29 has an invalid length. [ 190.764772][T11926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.781536][T11930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.817622][T11932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.860178][T11943] netlink: 'syz.0.1584': attribute type 18 has an invalid length. [ 191.305810][T11959] veth0_virt_wifi: left allmulticast mode [ 191.318851][T11959] vlan2: left allmulticast mode [ 191.323717][T11959] gretap0: left allmulticast mode [ 191.347794][T11959] tipc: Resetting bearer [ 191.368577][T11959] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 191.369559][T11960] __nla_validate_parse: 5 callbacks suppressed [ 191.369574][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 191.376274][T11959] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 191.405497][T11960] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1588'. [ 191.422839][T11959] team1: left promiscuous mode [ 191.428063][T11959] team1: left allmulticast mode [ 191.437639][ T44] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.449665][ T44] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.458286][ T44] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.467854][ T44] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.493915][T11960] geneve2: entered promiscuous mode [ 191.501405][T11960] geneve2: entered allmulticast mode [ 191.510388][ T44] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.568926][ T44] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.604679][ T44] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.625973][ T44] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.714693][T11967] netlink: 'syz.3.1593': attribute type 33 has an invalid length. [ 191.740750][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'. [ 191.749273][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 191.778141][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'. [ 191.786699][T11973] netlink: 'syz.2.1592': attribute type 24 has an invalid length. [ 191.792913][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 192.162472][T11998] lo: left promiscuous mode [ 192.167964][T11998] tunl0: left promiscuous mode [ 192.173209][T11998] ip_vti0: left promiscuous mode [ 192.184478][T11998] sit0: left promiscuous mode [ 192.221035][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 192.221239][T11998] bond5: left allmulticast mode [ 192.254794][T11998] veth0_macvtap: left allmulticast mode [ 192.261976][T11998] macvtap1: left allmulticast mode [ 192.303818][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 192.758270][T12031] tap0: tun_chr_ioctl cmd 2148553947 [ 192.883179][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 192.892406][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 192.902945][T12038] syzkaller0: entered promiscuous mode [ 192.912063][T12038] syzkaller0: entered allmulticast mode [ 192.959937][T12036] bond4: Invalid ad_actor_system MAC address. [ 192.966282][T12036] bond4: option ad_actor_system: invalid value (1) [ 192.986878][T12036] bond4 (unregistering): Released all slaves [ 193.229068][T12068] tipc: Enabled bearer , priority 0 [ 193.240457][T12068] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 193.248239][T12068] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 193.256632][T12068] tipc: Resetting bearer [ 193.297491][T12068] tipc: Resetting bearer [ 193.695478][ T7499] tipc: Resetting bearer [ 193.703817][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.713048][T12091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.729263][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.757125][T12091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.917518][ T7504] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x1e [ 193.919316][T12107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.005722][T12114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.047056][T12099] netlink: 'syz.4.1625': attribute type 11 has an invalid length. [ 194.868341][ T5150] Bluetooth: hci1: command 0x0401 tx timeout [ 195.468634][T12211] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 195.633439][T12227] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 195.735220][T12227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.749900][T12234] netlink: 'syz.4.1654': attribute type 4 has an invalid length. [ 195.812366][T12227] bond4: (slave veth0_to_bond): making interface the new active one [ 195.870880][T12227] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 196.386213][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 196.386316][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 196.621628][T12281] __nla_validate_parse: 11 callbacks suppressed [ 196.621647][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 196.866926][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1672'. [ 196.949277][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 197.495792][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1690'. [ 197.558958][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1692'. [ 198.391846][T12386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1708'. [ 198.457744][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 198.658074][T12404] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1712'. [ 198.688833][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1712'. [ 198.864862][T12423] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1717'. [ 199.145478][T12445] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1721'. [ 199.218753][T12445] 0ªî{X¹¦: renamed from gretap0 [ 199.278293][T12445] 0ªî{X¹¦: entered allmulticast mode [ 199.305641][T12445] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 199.734129][T12475] bond4: Invalid ad_actor_system MAC address. [ 199.765750][T12475] bond4: option ad_actor_system: invalid value (1) [ 199.808661][T12475] bond4 (unregistering): Released all slaves [ 200.636954][ T8781] hsr0 speed is unknown, defaulting to 1000 [ 201.240450][T12564] Bluetooth: hci0: invalid length 39, exp 2 for type 19 [ 201.352748][ T30] audit: type=1107 audit(1760922698.861:5): pid=12571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='s£¸‹ö ÛM)s®©Ùo[a¬*&A°™LàÊßæ¼wÔ [ 201.352748][ T30] Çå' [ 201.437473][T12578] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 201.485682][T12578] bond7 (unregistering): Released all slaves [ 201.672424][T12591] __nla_validate_parse: 7 callbacks suppressed [ 201.672441][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 201.692080][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1753'. [ 201.739281][T12597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1753'. [ 201.867008][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 202.543033][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 203.001029][ T7511] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8f [ 203.249577][T12704] netlink: 'syz.4.1774': attribute type 4 has an invalid length. [ 203.273392][T12697] bridge0: port 3(batadv1) entered blocking state [ 203.297000][T12697] bridge0: port 3(batadv1) entered disabled state [ 203.312435][T12697] batadv1: entered allmulticast mode [ 203.328411][T12697] batadv1: entered promiscuous mode [ 203.572239][T12717] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1776'. [ 203.583044][T12717] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1776'. [ 203.593167][T12717] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1776'. [ 203.749185][ T7499] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 203.758995][ T7499] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 204.081674][T12737] ip6gre1: entered allmulticast mode [ 204.121691][T12737] openvswitch: netlink: IPv4 tunnel dst address is zero [ 204.199410][T12743] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 204.409584][T12757] tipc: Enabled bearer , priority 0 [ 204.428939][T12757] syzkaller0: entered promiscuous mode [ 204.443731][T12757] syzkaller0: entered allmulticast mode [ 204.506895][T12757] tipc: Resetting bearer [ 204.656938][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1785'. [ 204.726784][T12756] tipc: Resetting bearer [ 204.841695][T12756] tipc: Disabling bearer [ 204.895139][T12780] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 204.935099][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 205.593356][T12818] IPVS: Unknown mcast interface: netpci0 [ 205.760717][T12835] 8021q: VLANs not supported on lo [ 205.940831][T12847] sctp: [Deprecated]: syz.2.1806 (pid 12847) Use of int in max_burst socket option deprecated. [ 205.940831][T12847] Use struct sctp_assoc_value instead [ 205.972589][T12849] sctp: [Deprecated]: syz.2.1806 (pid 12849) Use of int in max_burst socket option deprecated. [ 205.972589][T12849] Use struct sctp_assoc_value instead [ 206.069825][T12849] IPVS: length: 183 != 24 [ 206.098153][T12859] IPVS: length: 183 != 24 [ 206.968864][T12910] __nla_validate_parse: 13 callbacks suppressed [ 206.968882][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 206.986845][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'. [ 207.108209][T12919] hsr0 speed is unknown, defaulting to 1000 [ 207.265028][T12921] xt_CT: No such helper "syz1" [ 207.473072][T12934] netlink: 'syz.4.1834': attribute type 2 has an invalid length. [ 208.059711][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1844'. [ 208.076944][ T24] IPVS: starting estimator thread 0... [ 208.157426][T12971] hsr0 speed is unknown, defaulting to 1000 [ 208.167150][T12979] IPVS: using max 28 ests per chain, 67200 per kthread [ 208.404873][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 208.414087][T13000] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.473190][T13000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.688213][T13021] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1853'. [ 208.701228][T13023] openvswitch: netlink: Missing key (keys=40, expected=80) [ 208.789439][T13030] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1857'. [ 208.968278][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 208.978440][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 209.229675][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1848'. [ 209.276295][T13044] netlink: 'syz.3.1861': attribute type 1 has an invalid length. [ 209.393233][T13046] bond5: (slave gretap1): making interface the new active one [ 209.394075][T13044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 209.415342][T13046] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 209.428089][T13044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.620495][T13063] veth9: entered allmulticast mode [ 209.688650][T13061] sctp: [Deprecated]: syz.3.1865 (pid 13061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.688650][T13061] Use struct sctp_sack_info instead [ 209.710783][T13069] vlan1: entered allmulticast mode [ 209.717117][T13069] veth0_vlan: entered allmulticast mode [ 209.727183][T13073] syz_tun: left allmulticast mode [ 209.732245][T13073] syz_tun: left promiscuous mode [ 209.776161][T13073] bridge0: port 4(syz_tun) entered disabled state [ 209.785188][T13076] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 209.794984][T13073] bond6: left allmulticast mode [ 209.807086][T13073] bond6: left promiscuous mode [ 209.812177][T13073] bridge0: port 3(bond6) entered disabled state [ 209.821093][T13073] bridge_slave_1: left allmulticast mode [ 209.827088][T13073] bridge_slave_1: left promiscuous mode [ 209.832904][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.844226][T13073] bridge_slave_0: left allmulticast mode [ 209.850307][T13073] bridge_slave_0: left promiscuous mode [ 209.857744][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.960531][T13078] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 210.399308][T13112] tipc: Enabling of bearer rejected, already enabled [ 210.594570][T13130] IPv6: sit2: Disabled Multicast RS [ 210.603051][T13130] sit2: entered allmulticast mode [ 210.614999][T13133] netlink: 'syz.3.1888': attribute type 28 has an invalid length. [ 210.626877][T13133] netlink: 'syz.3.1888': attribute type 3 has an invalid length. [ 210.653597][T13139] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 210.777176][T13141] syzkaller1: entered promiscuous mode [ 210.806073][T13141] syzkaller1: entered allmulticast mode [ 211.200109][T13173] team_slave_0: mtu greater than device maximum [ 211.292504][T13178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.491742][T13189] openvswitch: netlink: IP tunnel dst address not specified [ 211.771735][T13212] netlink: 'syz.2.1916': attribute type 4 has an invalid length. [ 211.839951][T13212] `: renamed from bond0 (while UP) [ 211.951877][T13220] tipc: Enabling of bearer rejected, already enabled [ 211.978457][T13221] tap0: tun_chr_ioctl cmd 1074025678 [ 211.993219][T13221] tap0: group set to 0 [ 212.110847][T13230] syzkaller0: entered promiscuous mode [ 212.117196][T13230] syzkaller0: entered allmulticast mode [ 212.184753][T13233] __nla_validate_parse: 17 callbacks suppressed [ 212.184770][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 212.225185][T13233] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1925'. [ 212.252952][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 212.352637][T13242] rdma_op ffff8880739fd1f0 conn xmit_rdma 0000000000000000 [ 212.389782][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 212.398951][T13242] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1928'. [ 212.463297][T13246] netlink: 'syz.1.1929': attribute type 32 has an invalid length. [ 212.475685][T13236] vlan1 (unregistering): left allmulticast mode [ 212.483023][T13245] netlink: 'syz.1.1929': attribute type 32 has an invalid length. [ 212.490995][T13236] veth0_vlan (unregistering): left allmulticast mode [ 212.583095][T13248] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20000 [ 212.637391][T13254] netlink: 'syz.3.1932': attribute type 10 has an invalid length. [ 212.738155][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 212.795770][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 212.872153][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 212.902993][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 212.918264][T13277] x_tables: duplicate underflow at hook 2 [ 213.139245][T13294] xt_bpf: check failed: parse error [ 213.195161][T13297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.259323][T13305] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1944'. [ 213.563109][T13320] erspan0: entered promiscuous mode [ 213.587440][T13320] gretap0: entered promiscuous mode [ 213.767639][T13325] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 213.868770][T13335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.939650][T13347] syz.3.1955: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 213.968095][T13344] veth0_to_team: entered promiscuous mode [ 213.973864][T13344] veth0_to_team: entered allmulticast mode [ 214.028377][T13347] CPU: 0 UID: 0 PID: 13347 Comm: syz.3.1955 Not tainted syzkaller #0 PREEMPT(full) [ 214.028402][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.028413][T13347] Call Trace: [ 214.028421][T13347] [ 214.028430][T13347] dump_stack_lvl+0x189/0x250 [ 214.028467][T13347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.028495][T13347] ? __pfx__printk+0x10/0x10 [ 214.028514][T13347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.028534][T13347] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 214.028555][T13347] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 214.028577][T13347] warn_alloc+0x214/0x310 [ 214.028597][T13347] ? stack_depot_save_flags+0x40/0x860 [ 214.028619][T13347] ? __pfx_warn_alloc+0x10/0x10 [ 214.028641][T13347] ? kasan_save_track+0x3e/0x80 [ 214.028658][T13347] ? __kasan_kmalloc+0x93/0xb0 [ 214.028677][T13347] ? xsk_setsockopt+0x4dc/0x8d0 [ 214.028699][T13347] ? do_sock_setsockopt+0x17c/0x1b0 [ 214.028722][T13347] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 214.028744][T13347] ? do_syscall_64+0xfa/0xfa0 [ 214.028759][T13347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.028787][T13347] __vmalloc_node_range_noprof+0x125/0x12d0 [ 214.028839][T13347] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.028863][T13347] ? __kasan_kmalloc+0x93/0xb0 [ 214.028890][T13347] vmalloc_user_noprof+0xad/0xf0 [ 214.028909][T13347] ? xskq_create+0xbf/0x170 [ 214.028934][T13347] xskq_create+0xbf/0x170 [ 214.028962][T13347] xsk_init_queue+0xb0/0x110 [ 214.028989][T13347] xsk_setsockopt+0x4dc/0x8d0 [ 214.029015][T13347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.029043][T13347] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.029064][T13347] ? aa_sock_opt_perm+0xff/0x1b0 [ 214.029088][T13347] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 214.029108][T13347] ? __pfx_xsk_setsockopt+0x10/0x10 [ 214.029132][T13347] do_sock_setsockopt+0x17c/0x1b0 [ 214.029162][T13347] __x64_sys_setsockopt+0x13f/0x1b0 [ 214.029192][T13347] do_syscall_64+0xfa/0xfa0 [ 214.029208][T13347] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.029225][T13347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.029243][T13347] ? clear_bhb_loop+0x60/0xb0 [ 214.029265][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.029282][T13347] RIP: 0033:0x7f0b1fb8efc9 [ 214.029306][T13347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.029320][T13347] RSP: 002b:00007f0b209f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.029339][T13347] RAX: ffffffffffffffda RBX: 00007f0b1fde6090 RCX: 00007f0b1fb8efc9 [ 214.029352][T13347] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 214.029363][T13347] RBP: 00007f0b1fc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 214.029374][T13347] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.029384][T13347] R13: 00007f0b1fde6128 R14: 00007f0b1fde6090 R15: 00007ffe005d38e8 [ 214.029415][T13347] [ 214.029422][T13347] Mem-Info: [ 214.103448][T13356] NCSI netlink: No device for ifindex 0 [ 214.139038][T13347] active_anon:6456 inactive_anon:0 isolated_anon:0 [ 214.139038][T13347] active_file:2885 inactive_file:39926 isolated_file:0 [ 214.139038][T13347] unevictable:768 dirty:100 writeback:0 [ 214.139038][T13347] slab_reclaimable:12000 slab_unreclaimable:106520 [ 214.139038][T13347] mapped:30262 shmem:1387 pagetables:1256 [ 214.139038][T13347] sec_pagetables:0 bounce:0 [ 214.139038][T13347] kernel_misc_reclaimable:0 [ 214.139038][T13347] free:1315237 free_pcp:12965 free_cma:0 [ 214.382747][T13347] Node 0 active_anon:26024kB inactive_anon:0kB active_file:11540kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121148kB dirty:396kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13984kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.428964][T13347] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 214.459603][T13347] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.493340][T13347] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 214.499265][T13347] Node 0 DMA32 free:1355292kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25924kB inactive_anon:0kB active_file:11540kB inactive_file:159500kB unevictable:1536kB writepending:396kB zspages:0kB present:3129332kB managed:2561620kB mlocked:0kB bounce:0kB free_pcp:34432kB local_pcp:12592kB free_cma:0kB [ 214.532849][T13347] lowmem_reserve[]: 0 0 1 1 1 [ 214.537634][T13347] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 214.567439][T13347] lowmem_reserve[]: 0 0 0 0 0 [ 214.572207][T13347] Node 1 Normal free:3890296kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17732kB local_pcp:10980kB free_cma:0kB [ 214.641648][T13347] lowmem_reserve[]: 0 0 0 0 0 [ 214.682165][T13347] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 214.726838][T13347] Node 0 DMA32: 1130*4kB (UME) 1016*8kB (UME) 506*16kB (UM) 192*32kB (UME) 127*64kB (UM) 30*128kB (UM) 15*256kB (UM) 5*512kB (UME) 3*1024kB (UE) 7*2048kB (UME) 316*4096kB (M) = 1357000kB [ 214.771712][T13347] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 214.809452][T13347] Node 1 Normal: 204*4kB (UME) 65*8kB (UME) 40*16kB (UME) 104*32kB (UME) 29*64kB (UME) 7*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3890296kB [ 214.844372][T13376] validate_nla: 5 callbacks suppressed [ 214.844390][T13376] netlink: 'syz.2.1964': attribute type 1 has an invalid length. [ 214.865269][T13347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.911984][T13347] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.966809][T13347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.997254][T13347] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.072206][T13347] 44194 total pagecache pages [ 215.094652][T13347] 0 pages in swap cache [ 215.099415][T13347] Free swap = 124996kB [ 215.103581][T13347] Total swap = 124996kB [ 215.128859][T13347] 2097051 pages RAM [ 215.147789][T13347] 0 pages HighMem/MovableOnly [ 215.166937][T13347] 424556 pages reserved [ 215.171137][T13347] 0 pages cma reserved [ 215.408240][T13401] bond4: option xmit_hash_policy: invalid value (64) [ 215.435438][T13401] bond4 (unregistering): Released all slaves [ 215.572311][T13412] syzkaller1: entered allmulticast mode [ 215.589855][T13415] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.700381][T13457] tipc: Enabling of bearer rejected, already enabled [ 216.729488][T13457] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 216.745822][T13457] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 216.767119][T13457] tipc: Resetting bearer [ 216.774567][T13460] tipc: Resetting bearer [ 216.827683][T13460] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 216.836016][T13460] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 216.863936][T13470] sch_tbf: burst 206 is lower than device syzkaller0 mtu (313) ! [ 217.114600][T13488] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 217.143957][T13492] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 217.329353][T13501] __nla_validate_parse: 25 callbacks suppressed [ 217.329372][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 217.349880][T13503] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 217.382790][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 217.517389][T13520] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 217.538829][T13516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2000'. [ 217.554918][T13521] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2002'. [ 217.989644][T13545] netlink: 'syz.0.2010': attribute type 2 has an invalid length. [ 217.997887][T13545] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2010'. [ 218.024909][T13545] nbd: must specify at least one socket [ 218.024933][T13552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'. [ 218.151332][T13564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.436819][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2022'. [ 218.578815][T13595] Bluetooth: hci0: unsupported parameter 512 [ 218.589635][T13591] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 218.613410][T13595] Bluetooth: hci0: unsupported parameter 6278 [ 218.625783][T13595] Bluetooth: hci0: unsupported parameter 512 [ 218.637243][T13595] Bluetooth: hci0: unsupported parameter 6278 [ 218.731795][T13603] sctp: [Deprecated]: syz.1.2028 (pid 13603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.731795][T13603] Use struct sctp_sack_info instead [ 219.163266][T13619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.173443][T13647] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2034'. [ 219.187081][T13659] tap0: tun_chr_ioctl cmd 2148553947 [ 219.195960][T13653] netlink: 'syz.1.2038': attribute type 1 has an invalid length. [ 219.427055][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 219.488874][T13679] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 219.498595][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'. [ 219.686462][T13693] netlink: 'syz.3.2046': attribute type 4 has an invalid length. [ 220.023465][T13718] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2053'. [ 220.531394][T13755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.971148][ T5839] udevd[5839]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 221.651899][T13833] veth1_vlan: left allmulticast mode [ 222.573895][T13865] __nla_validate_parse: 8 callbacks suppressed [ 222.573913][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 222.678177][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2092'. [ 222.712156][T13878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2095'. [ 222.731295][T13874] syzkaller1: entered promiscuous mode [ 222.739487][T13874] syzkaller1: entered allmulticast mode [ 222.751720][T13877] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 222.768211][T13879] netlink: 'syz.4.2094': attribute type 1 has an invalid length. [ 223.034523][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 223.064023][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 223.276688][T13912] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 223.699567][T13945] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.2118'. [ 223.918378][T13967] sock: sock_set_timeout: `syz.3.2124' (pid 13967) tries to set negative timeout [ 224.005249][ T7504] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 224.670893][T13989] C: left promiscuous mode [ 224.675702][T13989] team_slave_1: left promiscuous mode [ 224.681997][T13989] dummy0: left promiscuous mode [ 224.880966][T13997] can: request_module (can-proto-5) failed. [ 224.894808][ T24] IPVS: starting estimator thread 0... [ 224.927662][T13992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.987615][T14004] IPVS: using max 27 ests per chain, 64800 per kthread [ 225.065715][T13989] team0 (unregistering): Port device C removed [ 225.093690][T13989] team0 (unregistering): Port device team_slave_1 removed [ 225.094170][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 225.133787][T13989] team0 (unregistering): Port device dummy0 removed [ 225.408496][T14021] tipc: Enabled bearer , priority 0 [ 225.428578][T14021] syzkaller0: entered promiscuous mode [ 225.435503][T14021] syzkaller0: entered allmulticast mode [ 225.513111][T14027] tipc: Resetting bearer [ 225.562769][T14020] tipc: Resetting bearer [ 225.595482][T14020] tipc: Disabling bearer [ 225.639559][T14047] sctp: [Deprecated]: syz.4.2145 (pid 14047) Use of int in max_burst socket option. [ 225.639559][T14047] Use struct sctp_assoc_value instead [ 225.683208][T14048] netlink: 'syz.0.2143': attribute type 10 has an invalid length. [ 225.712169][T14050] block nbd2: not configured, cannot reconfigure [ 225.732958][T14050] netlink: 'syz.2.2146': attribute type 9 has an invalid length. [ 225.744592][T14050] netlink: 'syz.2.2146': attribute type 7 has an invalid length. [ 225.754517][T14050] netlink: 'syz.2.2146': attribute type 8 has an invalid length. [ 225.812417][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 226.279553][T14086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.291720][T14093] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2160'. [ 226.490104][T14102] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 226.493721][T14099] hsr0 speed is unknown, defaulting to 1000 [ 226.525619][T14103] netlink: 'syz.4.2163': attribute type 10 has an invalid length. [ 226.694351][T14111] sctp: [Deprecated]: syz.1.2167 (pid 14111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.694351][T14111] Use struct sctp_sack_info instead [ 226.732545][T14114] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 226.872263][T14119] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 226.881423][T14119] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 227.015375][T14120] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 227.031523][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 227.033637][T14120] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 227.162283][T14125] bond6: (slave bridge0): Enslaving as an active interface with a down link [ 227.394592][T14155] netlink: 'syz.0.2176': attribute type 21 has an invalid length. [ 227.445089][T14155] bond0: entered promiscuous mode [ 227.451524][T14155] bond_slave_0: entered promiscuous mode [ 227.459284][T14155] bond_slave_1: entered promiscuous mode [ 227.609529][T14168] __nla_validate_parse: 2 callbacks suppressed [ 227.609547][T14168] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2182'. [ 227.665431][T14168] NCSI netlink: No device for ifindex 0 [ 227.742889][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 228.072964][T14199] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2191'. [ 228.164374][T14208] netem: change failed [ 228.313607][T14210] Cannot find add_set index 0 as target [ 228.332700][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 228.422123][T14217] netlink: 'syz.0.2199': attribute type 14 has an invalid length. [ 228.444370][T14221] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2200'. [ 228.531653][T14226] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2202'. [ 228.672586][T14233] netlink: 'syz.1.2203': attribute type 13 has an invalid length. [ 228.681370][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2204'. [ 228.692432][T14233] netlink: 'syz.1.2203': attribute type 17 has an invalid length. [ 228.700957][T14234] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 228.711892][T14234] gretap3: entered promiscuous mode [ 228.718269][T14234] gretap3: entered allmulticast mode [ 228.860655][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2209'. [ 228.870631][T14233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.918525][T14241] syzkaller1: entered promiscuous mode [ 228.924028][T14241] syzkaller1: entered allmulticast mode [ 228.983337][T14251] netlink: 'syz.3.2210': attribute type 10 has an invalid length. [ 229.087908][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'. [ 229.166320][T14267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2215'. [ 229.530697][T14285] bond4: option xmit_hash_policy: invalid value (64) [ 229.550193][T14285] bond4 (unregistering): Released all slaves [ 229.694974][T14296] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 229.790150][T14296] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.799265][T14296] bond7: (slave bond8): making interface the new active one [ 229.807443][T14296] bond7: (slave bond8): Enslaving as an active interface with an up link [ 229.849312][T14296] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.864576][T14296] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 230.071128][T14321] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 230.203009][T14334] netlink: 'syz.2.2234': attribute type 5 has an invalid length. [ 230.224814][T14335] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 230.406743][T14346] netlink: 'syz.3.2238': attribute type 2 has an invalid length. [ 231.233633][T14393] bridge0: port 1(batadv2) entered blocking state [ 231.268445][T14393] bridge0: port 1(batadv2) entered disabled state [ 231.275077][T14393] batadv2: entered allmulticast mode [ 231.293634][T14393] batadv2: entered promiscuous mode [ 231.508044][T14410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.562181][T14415] Bluetooth: hci0: invalid length 39, exp 2 for type 23 [ 231.580158][T14415] netlink: 'syz.0.2257': attribute type 21 has an invalid length. [ 231.606081][T14415] netlink: 'syz.0.2257': attribute type 1 has an invalid length. [ 231.736208][ T7499] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 231.745499][ T7499] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 231.790339][T14430] netlink: 'syz.1.2259': attribute type 6 has an invalid length. [ 232.069314][T14446] openvswitch: netlink: ct_state flags 14ac5e6f unsupported [ 232.770179][T14481] __nla_validate_parse: 11 callbacks suppressed [ 232.770198][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 232.800002][T14481] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2272'. [ 233.101273][T14479] geneve2: left promiscuous mode [ 233.107211][T14479] geneve2: left allmulticast mode [ 233.126043][T14479] veth1: left promiscuous mode [ 233.137465][T14479] gtp0: left promiscuous mode [ 233.142164][T14479] gtp0: left allmulticast mode [ 233.164458][T14481] geneve3: entered promiscuous mode [ 233.169979][T14481] geneve3: entered allmulticast mode [ 233.179408][T14495] tipc: Enabling of bearer rejected, already enabled [ 233.198091][ T7504] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 19999 - 0 [ 233.220926][ T7504] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 233.240357][ T7504] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 233.267603][T14486] sch_tbf: burst 206 is lower than device syzkaller0 mtu (313) ! [ 233.295140][ T7504] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 233.304995][T14494] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 233.318362][T14498] syzkaller1: entered promiscuous mode [ 233.323858][T14498] syzkaller1: entered allmulticast mode [ 233.654703][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'. [ 233.693470][T14525] netlink: 'syz.2.2286': attribute type 10 has an invalid length. [ 233.720545][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'. [ 234.335525][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2297'. [ 234.412989][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 234.443843][T14566] hsr0 speed is unknown, defaulting to 1000 [ 234.578252][T14583] Bluetooth: hci0: invalid len left 70, exp >= 222 [ 234.637489][T14584] xt_l2tp: unknown flags: 10 [ 234.693489][T14586] tipc: Enabled bearer , priority 0 [ 234.721549][T14586] tipc: Resetting bearer [ 234.748937][T14585] tipc: Disabling bearer [ 234.859579][T14594] Cannot find add_set index 0 as target [ 234.902517][T14597] tipc: Enabling of bearer rejected, already enabled [ 235.377420][T14605] team0: Port device geneve4 added [ 235.405881][T14621] 8021q: adding VLAN 0 to HW filter on device ` [ 235.417881][T14621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.438773][ T7499] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20003 - 0 [ 235.450446][ T7499] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 235.464880][ T7499] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 235.474728][ T7499] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 235.874711][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2319'. [ 235.883697][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 235.883724][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 235.910405][T14647] bridge0: mtu less than device minimum [ 236.031065][T14662] netlink: 'syz.4.2323': attribute type 2 has an invalid length. [ 236.381524][T14687] netlink: 'syz.0.2332': attribute type 2 has an invalid length. [ 236.394119][T14688] netlink: 'syz.0.2332': attribute type 2 has an invalid length. [ 236.617074][T14699] tipc: Enabled bearer , priority 0 [ 236.629670][T14699] syzkaller0: entered promiscuous mode [ 236.639080][T14699] syzkaller0: entered allmulticast mode [ 236.651348][T14707] netlink: 'syz.0.2337': attribute type 16 has an invalid length. [ 236.672229][T14707] netlink: 'syz.0.2337': attribute type 17 has an invalid length. [ 236.675059][T14698] tipc: Resetting bearer [ 236.745762][T14698] tipc: Disabling bearer [ 236.870663][T14707] bond0: left promiscuous mode [ 236.893032][T14707] bond_slave_0: left promiscuous mode [ 236.908107][T14707] bond_slave_1: left promiscuous mode [ 236.917072][T14707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.929962][T14707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.400185][T14754] tipc: Enabled bearer , priority 0 [ 237.434218][T14754] syzkaller0: entered promiscuous mode [ 237.446456][T14754] syzkaller0: entered allmulticast mode [ 237.861829][T14782] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 237.869899][T14782] netlink: 'syz.4.2358': attribute type 3 has an invalid length. [ 237.878033][T14782] __nla_validate_parse: 15 callbacks suppressed [ 237.878050][T14782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2358'. [ 237.893659][T14782] NCSI netlink: No device for ifindex 131080 [ 237.968703][T14791] netlink: 'syz.4.2360': attribute type 21 has an invalid length. [ 237.980725][T14791] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2360'. [ 238.072069][T14736] tipc: Resetting bearer [ 238.093307][T14797] netlink: 'syz.0.2363': attribute type 10 has an invalid length. [ 238.103109][T14736] tipc: Disabling bearer [ 238.212430][T14797] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 238.268688][T14797] Cannot find add_set index 65532 as target [ 238.330742][T14797] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2363'. [ 238.355173][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.378517][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.387957][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.402392][T14797] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2363'. [ 238.419304][T14797] 0ªî{X¹¦: renamed from gretap0 [ 238.430222][T14797] 0ªî{X¹¦: entered allmulticast mode [ 238.433865][T14807] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 238.489452][T14797] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 238.583056][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.609887][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.621843][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.647956][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.668788][T14827] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2373'. [ 238.711128][T14807] wg1 speed is unknown, defaulting to 1000 [ 238.929075][T14838] netlink: 'syz.1.2375': attribute type 9 has an invalid length. [ 239.317523][T14866] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 239.336704][T14869] netlink: 'syz.4.2384': attribute type 10 has an invalid length. [ 239.408293][T14869] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 239.826844][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 239.841461][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2392'. [ 240.019115][T14902] tipc: Enabling of bearer rejected, already enabled [ 240.159534][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 240.438075][T14942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2402'. [ 240.489216][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2402'. [ 240.533833][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 240.776778][T14966] tipc: Enabled bearer , priority 0 [ 240.893410][T14966] syzkaller0: entered promiscuous mode [ 240.919787][T14966] syzkaller0: entered allmulticast mode [ 240.937257][T14966] tipc: Resetting bearer [ 240.985233][T14965] tipc: Resetting bearer [ 241.145021][T14992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.376569][T14965] tipc: Disabling bearer [ 242.394133][T14995] bridge6: entered promiscuous mode [ 242.399808][T14995] bridge6: entered allmulticast mode [ 242.473218][T14998] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 242.482978][T14998] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 242.492584][T14998] tipc: Resetting bearer [ 242.507480][T15011] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 242.571977][T15008] bond6: option min_links: invalid value (18446744073709551614) [ 242.581218][T15008] bond6: option min_links: allowed values 0 - 2147483647 [ 242.611109][T15008] bond6 (unregistering): Released all slaves [ 242.995459][T15034] ipvlan3: entered promiscuous mode [ 243.282467][T15056] tipc: Enabled bearer , priority 0 [ 243.290060][T15056] tipc: Enabling of bearer rejected, already enabled [ 243.411656][T15057] syzkaller0: entered promiscuous mode [ 243.418393][T15057] syzkaller0: entered allmulticast mode [ 243.424755][T15057] tipc: Resetting bearer [ 243.454837][T15057] tipc: Resetting bearer [ 243.522046][T15070] __nla_validate_parse: 3 callbacks suppressed [ 243.522066][T15070] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2436'. [ 243.599892][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 243.913628][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2440'. [ 244.877085][T15057] tipc: Disabling bearer [ 244.886705][T15070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2436'. [ 244.904922][T15072] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 245.226365][T15106] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2449'. [ 245.467824][T15123] veth0: entered promiscuous mode [ 245.475234][T15123] veth0: left promiscuous mode [ 245.481599][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 245.494843][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2453'. [ 245.531196][T15126] netlink: 'syz.4.2455': attribute type 10 has an invalid length. [ 245.569967][T15124] geneve2: entered promiscuous mode [ 245.579949][T15124] geneve2: entered allmulticast mode [ 245.609910][ T7496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.626404][ T7496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.655524][ T7496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.680522][ T7496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.719246][T15134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2458'. [ 245.875484][T15147] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2462'. [ 246.122956][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 246.408698][T15186] gtp0: entered promiscuous mode [ 246.413846][T15186] gtp0: entered allmulticast mode [ 247.001510][T15222] bridge3: entered promiscuous mode [ 247.016947][T15222] bridge3: entered allmulticast mode [ 247.605580][T15260] delete_channel: no stack [ 247.720384][T15263] hsr0 speed is unknown, defaulting to 1000 [ 247.756210][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 247.764137][T15263] wg1 speed is unknown, defaulting to 1000 [ 247.918142][T15272] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 248.547518][T15307] __nla_validate_parse: 11 callbacks suppressed [ 248.547538][T15307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2513'. [ 248.611993][T15309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2514'. [ 248.653276][T15304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2513'. [ 248.693236][T15313] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2516'. [ 248.796156][T15315] tap0: tun_chr_ioctl cmd 1074025672 [ 248.801487][T15315] tap0: ignored: set checksum disabled [ 248.909230][T15322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2520'. [ 248.943706][T15323] hsr0 speed is unknown, defaulting to 1000 [ 248.971506][T15323] wg1 speed is unknown, defaulting to 1000 [ 248.985639][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2519'. [ 249.042263][T15317] vlan0: entered allmulticast mode [ 249.051818][T15317] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 249.131561][T15296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 249.234979][T15337] bridge4: entered allmulticast mode [ 249.292048][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2527'. [ 249.379620][T15345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2528'. [ 249.547694][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 249.641227][T15364] netlink: 'syz.1.2534': attribute type 29 has an invalid length. [ 249.687761][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 249.882888][T15370] netlink: 'syz.1.2534': attribute type 29 has an invalid length. [ 250.174883][T15398] macvtap1: entered promiscuous mode [ 250.181096][T15398] vlan0: entered promiscuous mode [ 250.186881][T15398] macvtap1: entered allmulticast mode [ 250.206835][T15398] vlan0: entered allmulticast mode [ 250.214474][T15398] veth0_vlan: entered allmulticast mode [ 250.670877][T15404] nbd2: detected capacity change from 0 to 127 [ 250.697326][ T5852] block nbd2: Receive control failed (result -104) [ 250.815790][T15431] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 250.830852][T15433] netlink: 'syz.0.2548': attribute type 29 has an invalid length. [ 250.909664][T15433] netlink: 'syz.0.2548': attribute type 29 has an invalid length. [ 251.103402][T15448] netlink: 'syz.3.2555': attribute type 6 has an invalid length. [ 251.223079][T15465] IPVS: set_ctl: invalid protocol: 12 172.30.1.1:20001 [ 251.242376][T15463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 253.063583][T15497] tipc: Enabling of bearer rejected, failed to enable media [ 253.252408][T15522] netlink: 'syz.3.2570': attribute type 1 has an invalid length. [ 253.272894][T15522] netlink: 'syz.3.2570': attribute type 1 has an invalid length. [ 253.623002][T15545] hsr0 speed is unknown, defaulting to 1000 [ 253.643718][T15545] wg1 speed is unknown, defaulting to 1000 [ 254.099780][T15578] xt_connbytes: Forcing CT accounting to be enabled [ 254.130001][T15578] set match dimension is over the limit! [ 254.458676][T15602] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 254.681228][T15620] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 254.737908][T15624] __nla_validate_parse: 3 callbacks suppressed [ 254.737930][T15624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2596'. [ 254.764579][T15620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 254.796055][T15628] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.814334][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2596'. [ 254.833369][T15624] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2596'. [ 254.872454][T15637] netlink: 'syz.2.2600': attribute type 2 has an invalid length. [ 255.201778][T15653] only policy match revision 0 supported [ 255.201798][T15653] unable to load match [ 255.258557][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2605'. [ 255.297742][T15661] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 255.365325][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2609'. [ 255.528250][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2612'. [ 255.608781][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 255.612948][T15681] IPVS: Unknown mcast interface: vcan0 [ 255.643566][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 255.678736][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 255.698516][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 256.057117][T15710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.210999][T15728] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 256.221418][T15728] 0ªî{X¹¦: entered allmulticast mode [ 256.237438][T15728] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 256.494439][T15747] netlink: 'syz.0.2636': attribute type 1 has an invalid length. [ 256.859606][T15766] netlink: 'syz.4.2639': attribute type 4 has an invalid length. [ 257.589462][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 258.590634][T15866] netlink: 'syz.4.2670': attribute type 9 has an invalid length. [ 259.036779][T15894] FAULT_INJECTION: forcing a failure. [ 259.036779][T15894] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 259.064350][T15894] CPU: 0 UID: 0 PID: 15894 Comm: syz.4.2676 Not tainted syzkaller #0 PREEMPT(full) [ 259.064376][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.064387][T15894] Call Trace: [ 259.064396][T15894] [ 259.064404][T15894] dump_stack_lvl+0x189/0x250 [ 259.064428][T15894] ? __pfx____ratelimit+0x10/0x10 [ 259.064454][T15894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.064473][T15894] ? __pfx__printk+0x10/0x10 [ 259.064492][T15894] ? __might_fault+0xb0/0x130 [ 259.064522][T15894] should_fail_ex+0x414/0x560 [ 259.064555][T15894] _copy_from_user+0x2d/0xb0 [ 259.064579][T15894] kstrtouint_from_user+0xc4/0x170 [ 259.064601][T15894] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 259.064639][T15894] proc_fail_nth_write+0x88/0x200 [ 259.064664][T15894] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 259.064696][T15894] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 259.064722][T15894] vfs_write+0x27e/0xb30 [ 259.064751][T15894] ? __pfx_vfs_write+0x10/0x10 [ 259.064772][T15894] ? __fget_files+0x2a/0x420 [ 259.064798][T15894] ? __fget_files+0x3a0/0x420 [ 259.064817][T15894] ? __fget_files+0x2a/0x420 [ 259.064847][T15894] ksys_write+0x145/0x250 [ 259.064869][T15894] ? __pfx_ksys_write+0x10/0x10 [ 259.064890][T15894] ? do_syscall_64+0xbe/0xfa0 [ 259.064912][T15894] do_syscall_64+0xfa/0xfa0 [ 259.064928][T15894] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.064945][T15894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.064970][T15894] ? clear_bhb_loop+0x60/0xb0 [ 259.064993][T15894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.065009][T15894] RIP: 0033:0x7f4547d8da7f [ 259.065025][T15894] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 259.065041][T15894] RSP: 002b:00007f4548c75030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 259.065060][T15894] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4547d8da7f [ 259.065073][T15894] RDX: 0000000000000001 RSI: 00007f4548c750a0 RDI: 0000000000000005 [ 259.065084][T15894] RBP: 00007f4548c75090 R08: 0000000000000000 R09: 0000000000000000 [ 259.065095][T15894] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 259.065105][T15894] R13: 00007f4547fe6128 R14: 00007f4547fe6090 R15: 00007ffe4333ad68 [ 259.065135][T15894] [ 259.339906][T15899] xt_hashlimit: max too large, truncated to 1048576 [ 260.124961][T15945] __nla_validate_parse: 69 callbacks suppressed [ 260.124980][T15945] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2689'. [ 260.287783][T15953] netlink: 'syz.1.2692': attribute type 21 has an invalid length. [ 260.296113][T15953] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2692'. [ 260.307685][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2693'. [ 260.423420][T15960] netlink: 'syz.1.2697': attribute type 2 has an invalid length. [ 260.448050][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2695'. [ 260.461679][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2697'. [ 260.719134][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'. [ 261.081965][T16006] netlink: 'syz.2.2706': attribute type 1 has an invalid length. [ 261.134634][T16006] 8021q: adding VLAN 0 to HW filter on device bond7 [ 261.144275][T16007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.159817][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 261.200147][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 261.304889][T16016] xt_ecn: cannot match TCP bits for non-tcp packets [ 261.324659][T16002] syzkaller0: entered promiscuous mode [ 261.330281][T16002] syzkaller0: entered allmulticast mode [ 261.493804][T16027] ipt_rpfilter: unknown options [ 261.502784][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 261.520213][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'. [ 261.589685][T16032] ------------[ cut here ]------------ [ 261.595427][T16032] WARNING: CPU: 0 PID: 16032 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 261.604118][T16032] Modules linked in: [ 261.608284][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.2.2714 Not tainted syzkaller #0 PREEMPT(full) [ 261.617883][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.628032][T16032] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 261.633090][T16032] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 261.652846][T16032] RSP: 0018:ffffc9000bc57180 EFLAGS: 00010286 [ 261.659012][T16032] RAX: bee4f5f35c278600 RBX: ffff888070c59000 RCX: bee4f5f35c278600 [ 261.667033][T16032] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 261.675013][T16032] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 261.683032][T16032] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 261.691049][T16032] R13: dffffc0000000000 R14: ffff888070c59000 R15: ffff888021af9e00 [ 261.699075][T16032] FS: 00007ffbb11a86c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 261.708043][T16032] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.714618][T16032] CR2: 00007ffbb11a7f98 CR3: 000000007b14a000 CR4: 00000000003526f0 [ 261.722637][T16032] Call Trace: [ 261.725979][T16032] [ 261.728920][T16032] ip_push_pending_frames+0xbe/0x150 [ 261.734223][T16032] __icmp_send+0xfc3/0x1320 [ 261.738781][T16032] ? __icmp_send+0x1b9/0x1320 [ 261.743576][T16032] ? __pfx___icmp_send+0x10/0x10 [ 261.748594][T16032] ? ip_route_input_noref+0x98/0x250 [ 261.753922][T16032] ? __pfx_ip_route_input_noref+0x10/0x10 [ 261.759734][T16032] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 261.764954][T16032] ip_options_compile+0x80/0xb0 [ 261.769858][T16032] ip_rcv_finish_core+0xaa2/0x1c00 [ 261.775000][T16032] ip_rcv_finish+0x14c/0x2f0 [ 261.779654][T16032] NF_HOOK+0x30c/0x3a0 [ 261.783743][T16032] ? __pfx_ip_rcv_finish+0x10/0x10 [ 261.788896][T16032] ? NF_HOOK+0x9a/0x3a0 [ 261.793078][T16032] ? __pfx_NF_HOOK+0x10/0x10 [ 261.797713][T16032] ? ip_rcv_core+0x7f7/0xd00 [ 261.802351][T16032] ? __pfx_ip_rcv_finish+0x10/0x10 [ 261.807548][T16032] ? __pfx_ip_rcv+0x10/0x10 [ 261.812151][T16032] __netif_receive_skb+0x143/0x380 [ 261.817315][T16032] ? netif_receive_skb+0x115/0x790 [ 261.822444][T16032] netif_receive_skb+0x1cb/0x790 [ 261.827424][T16032] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 261.833272][T16032] ? __pfx_netif_receive_skb+0x10/0x10 [ 261.838800][T16032] ? tun_rx_batched+0x160/0x730 [ 261.843665][T16032] tun_rx_batched+0x1b9/0x730 [ 261.848387][T16032] ? __lock_acquire+0xab9/0xd20 [ 261.853253][T16032] ? __pfx_tun_rx_batched+0x10/0x10 [ 261.858533][T16032] ? tun_get_user+0x272f/0x3e90 [ 261.863407][T16032] tun_get_user+0x2b65/0x3e90 [ 261.868138][T16032] ? tun_get_user+0x6f6/0x3e90 [ 261.872919][T16032] ? tun_get_user+0x272f/0x3e90 [ 261.877838][T16032] ? aa_file_perm+0x44d/0x1550 [ 261.882609][T16032] ? __pfx_tun_get_user+0x10/0x10 [ 261.887694][T16032] ? __futex_wait+0x34a/0x3d0 [ 261.892383][T16032] ? __pfx___futex_wait+0x10/0x10 [ 261.897453][T16032] ? ref_tracker_alloc+0x318/0x460 [ 261.902565][T16032] ? __lock_acquire+0xab9/0xd20 [ 261.907477][T16032] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 261.912946][T16032] ? tun_get+0x1c/0x2f0 [ 261.917196][T16032] ? tun_get+0x1c/0x2f0 [ 261.921370][T16032] ? tun_get+0x1c/0x2f0 [ 261.925542][T16032] tun_chr_write_iter+0x113/0x200 [ 261.930607][T16032] vfs_write+0x5c9/0xb30 [ 261.934871][T16032] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 261.940464][T16032] ? __pfx_vfs_write+0x10/0x10 [ 261.945252][T16032] ? __fget_files+0x2a/0x420 [ 261.949906][T16032] ksys_write+0x145/0x250 [ 261.954253][T16032] ? __pfx_ksys_write+0x10/0x10 [ 261.959177][T16032] ? do_syscall_64+0xbe/0xfa0 [ 261.963864][T16032] do_syscall_64+0xfa/0xfa0 [ 261.968413][T16032] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.973629][T16032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.979740][T16032] ? clear_bhb_loop+0x60/0xb0 [ 261.984426][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.990363][T16032] RIP: 0033:0x7ffbb038da7f [ 261.994792][T16032] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 262.014566][T16032] RSP: 002b:00007ffbb11a8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 262.023063][T16032] RAX: ffffffffffffffda RBX: 00007ffbb05e6090 RCX: 00007ffbb038da7f [ 262.031096][T16032] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 262.039116][T16032] RBP: 00007ffbb0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 262.047136][T16032] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 262.055118][T16032] R13: 00007ffbb05e6128 R14: 00007ffbb05e6090 R15: 00007ffeaec9dfe8 [ 262.063160][T16032] [ 262.066221][T16032] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.073495][T16032] CPU: 0 UID: 0 PID: 16032 Comm: syz.2.2714 Not tainted syzkaller #0 PREEMPT(full) [ 262.082854][T16032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.092916][T16032] Call Trace: [ 262.096208][T16032] [ 262.099139][T16032] dump_stack_lvl+0x99/0x250 [ 262.103724][T16032] ? __asan_memcpy+0x40/0x70 [ 262.108403][T16032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.113588][T16032] ? __pfx__printk+0x10/0x10 [ 262.118177][T16032] vpanic+0x237/0x6d0 [ 262.122149][T16032] ? __pfx_vpanic+0x10/0x10 [ 262.126671][T16032] panic+0xb9/0xc0 [ 262.130401][T16032] ? __pfx_panic+0x10/0x10 [ 262.134831][T16032] __warn+0x31b/0x4b0 [ 262.138829][T16032] ? ip_rt_bug+0x2c/0x110 [ 262.143153][T16032] ? ip_rt_bug+0x2c/0x110 [ 262.147467][T16032] report_bug+0x2be/0x4f0 [ 262.151779][T16032] ? ip_rt_bug+0x2c/0x110 [ 262.156093][T16032] ? ip_rt_bug+0x2c/0x110 [ 262.160415][T16032] ? ip_rt_bug+0x2e/0x110 [ 262.164737][T16032] handle_bug+0x84/0x160 [ 262.169011][T16032] exc_invalid_op+0x1a/0x50 [ 262.173529][T16032] asm_exc_invalid_op+0x1a/0x20 [ 262.178398][T16032] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 262.183350][T16032] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 8b dd 08 f8 66 90 e8 84 dd 08 f8 31 ff 48 89 de ba 02 00 00 00 e8 d5 0d 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 11 9e 97 01 cc f3 0f [ 262.202950][T16032] RSP: 0018:ffffc9000bc57180 EFLAGS: 00010286 [ 262.209023][T16032] RAX: bee4f5f35c278600 RBX: ffff888070c59000 RCX: bee4f5f35c278600 [ 262.216981][T16032] RDX: 0000000000000002 RSI: ffffffff8d7e845f RDI: ffffffff8bc077e0 [ 262.224940][T16032] RBP: 0000000000000001 R08: ffffffff8f9e1377 R09: 1ffffffff1f3c26e [ 262.232899][T16032] R10: dffffc0000000000 R11: fffffbfff1f3c26f R12: dffffc0000000000 [ 262.240869][T16032] R13: dffffc0000000000 R14: ffff888070c59000 R15: ffff888021af9e00 [ 262.248852][T16032] ip_push_pending_frames+0xbe/0x150 [ 262.254146][T16032] __icmp_send+0xfc3/0x1320 [ 262.258669][T16032] ? __icmp_send+0x1b9/0x1320 [ 262.263340][T16032] ? __pfx___icmp_send+0x10/0x10 [ 262.268295][T16032] ? ip_route_input_noref+0x98/0x250 [ 262.273573][T16032] ? __pfx_ip_route_input_noref+0x10/0x10 [ 262.279318][T16032] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 262.284552][T16032] ip_options_compile+0x80/0xb0 [ 262.289397][T16032] ip_rcv_finish_core+0xaa2/0x1c00 [ 262.294525][T16032] ip_rcv_finish+0x14c/0x2f0 [ 262.299159][T16032] NF_HOOK+0x30c/0x3a0 [ 262.303330][T16032] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.308440][T16032] ? NF_HOOK+0x9a/0x3a0 [ 262.312639][T16032] ? __pfx_NF_HOOK+0x10/0x10 [ 262.317222][T16032] ? ip_rcv_core+0x7f7/0xd00 [ 262.321839][T16032] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.327023][T16032] ? __pfx_ip_rcv+0x10/0x10 [ 262.331546][T16032] __netif_receive_skb+0x143/0x380 [ 262.336660][T16032] ? netif_receive_skb+0x115/0x790 [ 262.341769][T16032] netif_receive_skb+0x1cb/0x790 [ 262.346705][T16032] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 262.352508][T16032] ? __pfx_netif_receive_skb+0x10/0x10 [ 262.357975][T16032] ? tun_rx_batched+0x160/0x730 [ 262.362815][T16032] tun_rx_batched+0x1b9/0x730 [ 262.367483][T16032] ? __lock_acquire+0xab9/0xd20 [ 262.372323][T16032] ? __pfx_tun_rx_batched+0x10/0x10 [ 262.377513][T16032] ? tun_get_user+0x272f/0x3e90 [ 262.382358][T16032] tun_get_user+0x2b65/0x3e90 [ 262.387109][T16032] ? tun_get_user+0x6f6/0x3e90 [ 262.391859][T16032] ? tun_get_user+0x272f/0x3e90 [ 262.396784][T16032] ? aa_file_perm+0x44d/0x1550 [ 262.401537][T16032] ? __pfx_tun_get_user+0x10/0x10 [ 262.406544][T16032] ? __futex_wait+0x34a/0x3d0 [ 262.411225][T16032] ? __pfx___futex_wait+0x10/0x10 [ 262.416237][T16032] ? ref_tracker_alloc+0x318/0x460 [ 262.421332][T16032] ? __lock_acquire+0xab9/0xd20 [ 262.426179][T16032] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.431740][T16032] ? tun_get+0x1c/0x2f0 [ 262.435895][T16032] ? tun_get+0x1c/0x2f0 [ 262.440045][T16032] ? tun_get+0x1c/0x2f0 [ 262.444191][T16032] tun_chr_write_iter+0x113/0x200 [ 262.449205][T16032] vfs_write+0x5c9/0xb30 [ 262.453532][T16032] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 262.459072][T16032] ? __pfx_vfs_write+0x10/0x10 [ 262.463832][T16032] ? __fget_files+0x2a/0x420 [ 262.468512][T16032] ksys_write+0x145/0x250 [ 262.472835][T16032] ? __pfx_ksys_write+0x10/0x10 [ 262.477682][T16032] ? do_syscall_64+0xbe/0xfa0 [ 262.482384][T16032] do_syscall_64+0xfa/0xfa0 [ 262.486881][T16032] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.492067][T16032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.498144][T16032] ? clear_bhb_loop+0x60/0xb0 [ 262.502819][T16032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.508701][T16032] RIP: 0033:0x7ffbb038da7f [ 262.513103][T16032] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 262.532696][T16032] RSP: 002b:00007ffbb11a8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 262.541098][T16032] RAX: ffffffffffffffda RBX: 00007ffbb05e6090 RCX: 00007ffbb038da7f [ 262.549068][T16032] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 262.557055][T16032] RBP: 00007ffbb0411f91 R08: 0000000000000000 R09: 0000000000000000 [ 262.565021][T16032] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 262.572982][T16032] R13: 00007ffbb05e6128 R14: 00007ffbb05e6090 R15: 00007ffeaec9dfe8 [ 262.580962][T16032] [ 262.584251][T16032] Kernel Offset: disabled [ 262.588562][T16032] Rebooting in 86400 seconds..