last executing test programs: 4.181276541s ago: executing program 3 (id=2803): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x28040054) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="723b7096c8064b2c1573bed1b51b314df26ddf7b1cfa8bd4e1e974c656b816447791edf16041fe7a74dd459088109912347b3dc0dd124e36df309d6c2a8602b259d098d717f2589b6f9d873c3d651790ed43c3d0aefb4e0fa1ca949e3a43795c060973b8871dc589f52d9b1a1184ad1f772375c1434a7680b34ccda9acf04841bae9323099051cc102a10ddf29da94290c46622a651d68a5677cd383b41d63660301a5", @ANYRESHEX=r6], 0x40}}, 0x20000010) (async) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="723b7096c8064b2c1573bed1b51b314df26ddf7b1cfa8bd4e1e974c656b816447791edf16041fe7a74dd459088109912347b3dc0dd124e36df309d6c2a8602b259d098d717f2589b6f9d873c3d651790ed43c3d0aefb4e0fa1ca949e3a43795c060973b8871dc589f52d9b1a1184ad1f772375c1434a7680b34ccda9acf04841bae9323099051cc102a10ddf29da94290c46622a651d68a5677cd383b41d63660301a5", @ANYRESHEX=r6], 0x40}}, 0x20000010) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x73, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'fo\x00', 0x1, 0x7, 0x31}, 0x2c) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003e624bd7000040000008632f6aa5d1466bc8378528b74d12b73dc98f73615e0bf75c1000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r9, @ANYBLOB="134835d27302ab5868503837e0ffe0d3944449f63a847596eee70c4e48d915ce6d984bc48b6e77", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r11, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) r13 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r13, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0204965bf0"], 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 4.03201407s ago: executing program 2 (id=2805): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@gettaction={0x0, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}, @action_dump_flags, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x800}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}, {0x0, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xea}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xda034a4a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.711100375s ago: executing program 1 (id=2808): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r2, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r5, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f00000008c0)={0x60, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe5}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x40004) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xf8, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffc00}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xbffe}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0xfffffffffffffec7, &(0x7f0000000780)={&(0x7f0000000580)=@gettfilter={0x0, 0x2e, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0x7ff6, 0xfff6}, {0xffff, 0xf}}, [{0x0, 0xb, 0xffff8000}, {0x0, 0xb, 0xff}, {0x0, 0xb, 0x272}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0x4}, {0x0, 0xb, 0x7188}, {0x0, 0xb, 0xa}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 3.59157659s ago: executing program 2 (id=2809): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@bridge_newneigh={0xac, 0x1c, 0x200, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, r1, 0x8, 0x1a, 0xb}, [@NDA_FDB_EXT_ATTRS={0x3c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xf}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xc}]}, @NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_PROTOCOL={0x5, 0xc, 0xa}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_CACHEINFO={0x14, 0x3, {0x3fc, 0x6, 0x80, 0x2}}, @NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_VLAN={0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x488c4}, 0x4004000) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x210}}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000000) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="0021199f6dd1be01000000f69800721d5874f72cf86d", 0x16}], 0x1, 0x7, 0x1) (async) ioctl$TUNSETOWNER(r3, 0x400454cc, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 3.542008078s ago: executing program 4 (id=2810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 3.333326778s ago: executing program 3 (id=2811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x3, @remote}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}, 0xfd}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000180)=0x6, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x40}}, 0x24040800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.071077312s ago: executing program 2 (id=2812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000001c0), 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0x0, 0xfff3}, {0xfff1, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x4000) r9 = socket$unix(0x1, 0x1, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x20000400) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r11}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r12}, 0x8) setsockopt$X25_QBITINCL(r10, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r9, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0xb0, 0x24, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4000}}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0x401}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x7, 0x4, 0x4, 0x2, 0x7, 0x9e, 0x3}}, {0xa, 0x2, [0x65e, 0x4, 0x0]}}, {{0x1c, 0x1, {0x0, 0x65, 0x1cb9, 0x1, 0x2, 0x9, 0x5d428ad1, 0x5}}, {0xe, 0x2, [0x400, 0x8000, 0x9, 0xa1cf, 0x1ff]}}]}]}, 0xb0}}, 0x4001000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) 2.976194469s ago: executing program 4 (id=2814): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1}, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32], 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x9, 0x6ae4c34e, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x8000, 0xa, 0x3}}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00000009000000050000000600000007400100", @ANYRES32=r4, @ANYBLOB="1d0b00000000000000000000000005a9f33edda5e724b8dd70c371a3bf5a55abca000000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="5730000004000000010000000800"/24, @ANYRES32=r6, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000080), 0x0}, 0x20) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000100)=0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000380)=r9) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) accept(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) 2.451441516s ago: executing program 1 (id=2815): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x74, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de4ae73123911ff129ace2f9df9a9cce5e26e3e8b2895337"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0xd040}, 0x40041) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r8, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x340, r4, 0x40b, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x325, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x2}, @broadcast, @device_b, @random="406a65971e09", {0x5, 0x298}}, 0x20, 0x5, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x1}, {0x60, 0x1}]}, @void, [{0xdd, 0xb0, "29c6372056d909fd5ebc276ec86c15a1294db5ee01ccb0a648235fd63579214911c18301f9e55ca5b8fdafd398ebfa1f3d80f1dcd80cca4633b6c13cdb74850af40aac7bde7cc69130c382d6162e1df3f91cfeffb848428b61d41e0af52c22d404d934ef69862990593f2833b85c0ba6aa0f20c3dfbf35491196e700dff4afa9f47e1a5bd77b4e192feee50396e797f09d404cab9f7434f94ba52dde87ec15a2b6c67a5b0e51dcc2929836eabd0c965c"}, {0xdd, 0x39, "da676d93a122c4d3b29962692a8bb2b35ae5b520e9b5304925c9f96f65ccb399b0b8c4e343fcf94b5ddb5e8fb431bfe7a42d94e9349e1d6ed6"}, {0xdd, 0xce, "cda4a0070cf35d4e7f7a87a4250c085b8e08c0251067ba802af8089b7109ef546dbd813f87b1e212badfc094d3f57ec727572c82731fb1ae6f3e6e4baa33e8d757766295fe77a6f8551b4bb02401f8f124bc06003562df951f7bad40dc96fe3042f30c12fb6e4772cff6c565aebce644cda5517268c8cdd2e42d31a1523dd46d5ed385665ba3fd51c416ab0c7e2ec9b4113eac82a72b16d683b8ef8ae1558ef6da1595e200f1d114b0fcabb43f4455bb668bae75e6d76461b73c46455c418cba80c2cda90598cf4814a16a7db725"}, {0xdd, 0x7b, "c0d39d98c6d246c6d2387ca758471e9eee4bbb0772cfdbc91db1771f7ada842b2458eb3f3e414398f895a9276aa1d9962cba5fd48410599ae8dd86aaeb04bd69b0ea386d98d1df49ed47319656fe5b11df601fb449c2fa4d9eaa507891a4a64107feeca51ed0ecbbef61562eccafc03f9729463689b949206406ce"}, {0xdd, 0x5e, "596f940d8829247250bf356afe5336530a6fea50d21537b220405b39b4f67268f259082a2d68d47744d08b1d332d1ad1886e1a5a3f743579731a088c08d6cb5e1e7e1f57865f4000a20ac2c67fa56a28e8f29230885ab3f55c0939792b66"}, {0xdd, 0x3d, "ebe4c211c17cb86344737e82ca6d6148b4828aad2d2f1af0c38b5a513a896361be59f6bd138bc15fa153c99e35143111c706e1967d58fc1c585cb9395b"}, {0xdd, 0x1e, "121c09a69383c1e90ab702b50d0612cb216c71048ab4723a8f3e25733113"}]}}]}, 0x340}, 0x1, 0x0, 0x0, 0x24006880}, 0x40) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) syz_emit_ethernet(0x13e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x108, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1c, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5"}]}}}}}}, 0x0) close(r1) close(r2) 2.154407709s ago: executing program 3 (id=2817): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) accept(r5, 0x0, 0x0) 2.08339748s ago: executing program 2 (id=2818): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000200af501000000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x844}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271f, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r6, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="20000280", @ANYRES32=r7, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r9], 0x58}}, 0x0) 2.080454899s ago: executing program 4 (id=2819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r1, 0x0, 0x0) r2 = socket(0x10, 0x1, 0xfffffffe) getsockopt$sock_int(r2, 0x1, 0x30, 0x0, &(0x7f0000000580)) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0xf7}}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000cfa519a6e2e9029dc32bd0f048ee9c5f113e1a889db3476ea7df737e349dc51508c13550daf4696b14828967308b3feaa9f3533d3f5b2653cf3c9bf45ac9bf0bf726978776494b40a66b56903dfc04c3424c9b18d101e7c44d3cf8b259b9daa4ae", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf254500000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000300000014000400", @ANYRESDEC], 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x0) close(r3) connect(r3, &(0x7f0000000240)=@nl=@unspec, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg(r2, &(0x7f00000004c0)={&(0x7f00000002c0)=@can={0x1d, r6}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000380)="829734eebd85fc67120109cbd502adc3f089026e87ddaf8d94b71ce96bc22cd825a874e8692bad6fe5996ad08ca9ac38dc14d1", 0x33}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000440)="301644896cd827ce347d8df2e5b65fbe", 0x10}, {&(0x7f00000015c0)="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", 0xfe}, {&(0x7f0000000480)="4f99e5b0", 0x4}, {&(0x7f00000016c0)="9ffec91b5d34f449387b79956b700ed392fc39097f8f467f05925a5c70cc8d980df56cdb708a40e6b41c0edb7d4b51461db3754715329b20a7d3e67adf19da0091308c0fefb1ad36785263134dede75ec113c8d72cabfdf86501592140b058d3d22f69b3a613709a8eeb3351e5d7321691114f318841150636683e1addbf1a961b0a6eb7f50ea43713aae448b28991051f12b56f64e9d4a27cb0c524ba", 0x9d}], 0x6, &(0x7f0000001800)=[{0x70, 0x84, 0x8, "6f236b755e6d361c038d347c3258fc1dfb4a42f9721ee32186e02afc076c5c9d7305b0cfda397f8e3fdb41acd88e3daa0c67da0cbd6c162606045dbc4a6e101695ca404746527706e4adbea1818f058cb5c23c97adf44c09fe"}, {0xf0, 0x3a, 0x7ff, "0a5bb51efb98d1004d6514e8bcee08571b3301c370dc38fe6a7f727591e18ec2c54527a37489695376046bf68c70f1c66577be5485772c76258d80fab5af5da6cde5488f4a086db02b1003958ef4a09b17d49551d1432c4e9e8689c198b12cf9edebcdc32a5065cd2b0e2d05d945badda0c62f8cf9467502b1613e07401b364fad41ee316b54ca6a9114374a3e14035ed0151947091d8f928a381ca43656cf871fb877e17f3824a0abef951006488d048406463bc0c489bd94ba1d1af2c4a1fc7b6e004240c810c1e4ff5a7ccd7055df07455a80fa693546df3e"}, {0x38, 0xff, 0x1, "b8a108335e7b3b3489826086b94ea0a7baa57ed19caa259280b762d57253406012e4d9"}, {0x10, 0x114, 0x2}], 0x1a8}, 0x80) 1.98453825s ago: executing program 0 (id=2820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) 1.924590742s ago: executing program 1 (id=2821): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.724773712s ago: executing program 2 (id=2822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x1}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}}, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r5, 0x80089000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)={0x104, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "54b7add47677"}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "8020ea7172cfa15aa6d5f8412454ca17"}, @NL80211_KEY_DEFAULT_TYPES={0x0, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_UNICAST, @NL80211_KEY_DEFAULT_TYPE_MULTICAST]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6f61d9fa375cb7c5fecf06732f"}, @NL80211_KEY_MODE={0x4e, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8149e60c66"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1523da26f43202b3608f191eae"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x131}, 0x1, 0x0, 0x0, 0x44041}, 0x20000850) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r5, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r4, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0xf7}}}, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000500)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e6ffffff", @ANYRES16=r12, @ANYBLOB="010027bd7000ffffffff2a000000"], 0x14}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.724006602s ago: executing program 4 (id=2823): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="441f089a3d1ef360a05a1301000000e0c94ef57300cc3b27c108000000", 0x1d) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xe20, @broadcast}, 0x10) 1.722759737s ago: executing program 0 (id=2824): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}, 0x10049014) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d000000000005000c"], 0x44}}, 0x0) 1.515253931s ago: executing program 1 (id=2825): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000380)={0x0, 0xa, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.406609207s ago: executing program 4 (id=2826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1}, 0x3}], 0x1, 0x40000060, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000580)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000011c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4, 0x4}, @timestamp={0x44, 0x4, 0x6a, 0x0, 0xf}]}}}], 0x18}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r6, @ANYBLOB="da"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x22a0b}}, 0x20}}, 0xc044) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = accept4$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000380)=0x10, 0x800) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r11 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r11, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000440)=r10, 0x4) getsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000034c81a56f1ca000000180a0101000b000000000000010008000000020073797a30000000000900010073797a30000000000800038004000380140000001000010000000000000000000000000a"], 0xbc}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 1.275570329s ago: executing program 0 (id=2827): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xdb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.14864299s ago: executing program 1 (id=2828): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)={0x3d8, r2, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x3bc, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x370, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}, @WGPEER_A_ALLOWEDIPS={0x320, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x3d8}}, 0x0) (async) r4 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r4, 0x0, 0x0, 0x40000002, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/210, 0xd2, 0x0, &(0x7f0000000880)=""/4096, 0x1000}, &(0x7f0000000180)=0x40) (rerun: 32) ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.102987005s ago: executing program 3 (id=2829): r0 = socket(0x1d, 0x2, 0x6) ioctl(r0, 0x1000, &(0x7f0000000100)="d8c1eb608e4e44fd8aa32708070c827dba259c7603b231568798e5acc3e13da8ea871681658dbd9bf033d19116064ebf7700e06bc80759bad2067436d94a2b292e489c1aade129bdf2dccf4df9f6d560e48c98b8bf19ea909ddbbbdbdf00181f004137031a0f282f9981c9a007af062b3949b06409832571ea5e504038c7342932dc8ba1b43d6445ce4cca9eb4027b02663ee95284c996aa487b37d8e1747adbc4c6c833ce0cdfc713d01bbe7b0a69fd0d6544f157266124a8783e2cd7a309b7b07bb3") (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 965.312719ms ago: executing program 2 (id=2830): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x60) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6(0xa, 0x9, 0x2000000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x60) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x143, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) 963.992016ms ago: executing program 4 (id=2831): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x1) connect$bt_l2cap(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="34007588850b2a6537280000", @ANYRES16=r4, @ANYBLOB="01000000000000000000100000001800018014000200776c616e3000000000000000000000000800080006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @remote}, &(0x7f00000005c0)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x7fffffff}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000007c0)={r7, 0x40}, &(0x7f0000000800)=0x8) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) r8 = socket(0x1d, 0x1, 0xa) setsockopt$llc_int(r8, 0x6a, 0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYRES8=r5, @ANYRES32=r12, @ANYBLOB="1804c7"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r14, r13, 0x4}, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x100000000000013}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200c810}, 0x8044) sendmsg$nl_route(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@ipv4_delroute={0xc8, 0x19, 0x400, 0x70bd25, 0x25dfdbfd, {0x2, 0x80, 0x10, 0x2, 0xfd, 0x1, 0xfd, 0x5, 0x2000}, [@RTA_METRICS={0x76, 0x8, 0x0, 0x1, "c9ffbe3b2c815afd0818f65f952c4423c9468fbc2adc4a81060d9e1a434b003250940c76b907bc13aa99002621a86dbd45d7267340ffc0e299f70aeef2427e34be973228943d36706f628a9d2607ebc66f8e0ae1b41caf4c0f1df3c5a3db236bfd5ed81366d474e23c8e45b616040384de80"}, @RTA_SRC={0x8, 0x2, @broadcast}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x3c, 0x8, r9}}, @RTA_DST={0x8, 0x1, @remote}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000010}, 0x18) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000004c0)={'bridge_slave_0\x00', 0x5}) 904.876249ms ago: executing program 0 (id=2832): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x216, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "a14dba", 0x1e0, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, {[@routing={0x1, 0x4, 0x0, 0xf, 0x0, [@local, @private0]}, @dstopts={0xff, 0x1, '\x00', [@ra={0x5, 0x2, 0x1f58}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x5}]}, @fragment={0xf3, 0x0, 0x6, 0x1, 0x0, 0x3, 0x67}, @routing={0x4, 0x10, 0x0, 0x7, 0x0, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast1, @private0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}]}, @fragment={0x62, 0x0, 0x1, 0x0, 0x0, 0x10, 0x68}], @name_distributor={{0x108, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8000, 0x0, 0x1, 0xfffd, 0xfffe, 0x3, 0x4e22, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1}, [{0xfffffff9, 0x4, 0xffffffff, 0x82, 0x10001, 0xff, 0x0, 0xfff7fff}, {0x3, 0x3, 0x7fff, 0x6, 0x8, 0x5, 0x4, 0x5}, {0x9, 0x3, 0xffffff20, 0x4, 0x1000, 0x8, 0x2, 0x7}, {0x800, 0x51, 0x6, 0x0, 0x5, 0xc, 0x9, 0xa16}, {0x80000000, 0x1, 0x4, 0x8, 0xffffffff, 0xc, 0x4, 0x2}, {0xffff, 0x8, 0x5, 0x8, 0x6, 0x3, 0x5, 0x6}, {0x7, 0x2, 0x0, 0x1000, 0x4, 0x8, 0x5, 0xbf}, {0x0, 0x7b, 0x80, 0x4, 0x2, 0xacfbd68, 0x1, 0x7}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$kcm(0x29, 0x7, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010429bd7000fddbdf2505000000200001800d0001007564701e735c6d8d99"], 0x34}, 0x1, 0x0, 0x0, 0x4c444}, 0x4000140) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 834.817663ms ago: executing program 3 (id=2833): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x40106183, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@deltfilter={0x6d0, 0x2d, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xffff, 0xfff1}, {0x4, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x400}, @filter_kind_options=@f_basic={{0xa}, {0x660, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xf}}, @TCA_BASIC_ACT={0x64c, 0x3, [@m_police={0xb0, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x84, 0x6, "a88da2f6211ef39fb6350ca063149b96a75be73864ea4bb5ff5aae4cd4ceef9309870b428d8eb15613b063dcf407fd24dc1a6afae4736bf9294d38afb1e737356ad0b78e37c15647a97493455895daf1df000732084faec9464b53bcc67a95a7ffbcc5bd616f1b81cf76c6488db1108bbe8727d663c2ec089e7fa217bfa4530c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x598, 0x0, 0x0, 0x0, {{0xb}, {0x4d4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000001, 0x8, 0x400, 0x30, 0x82d, 0x8, 0xe74, 0x3, 0x1, 0x80, 0x9, 0x6, 0x2, 0x8f5a, 0x80000001, 0xffff, 0x0, 0x87, 0xfa9, 0x6, 0x7, 0x3, 0x98, 0x3dc2, 0x20000, 0x89bf, 0x5, 0x5, 0xfa6, 0xa, 0xffffff09, 0x9, 0x7, 0x9, 0x4, 0xffff0000, 0x6, 0x4d, 0x9fdc679, 0x2, 0x408, 0x2, 0x218, 0x8, 0x7fffffff, 0x8, 0x74a, 0x0, 0x3ff, 0x100, 0x7, 0x7, 0x2, 0x5, 0xfffffe00, 0x782e, 0x2, 0xf, 0x5, 0x8000, 0x8, 0x8, 0x2, 0xffffb4db, 0x0, 0x6, 0x3, 0x9, 0x5, 0x7, 0x6614, 0xa, 0x5, 0x7f, 0xb, 0xfffeffff, 0x3, 0xc7b, 0x6, 0x6, 0x2, 0x8, 0x2, 0x3, 0x8, 0x2, 0x0, 0x0, 0xc5300000, 0x0, 0x7, 0x7, 0x0, 0x3, 0x8, 0x101, 0x1, 0x8, 0x5, 0x40, 0x1ff, 0x4c9, 0x7, 0x3, 0x0, 0x3, 0x96, 0x2, 0x6ae45f79, 0x66, 0x7fff, 0x9, 0x7, 0x0, 0x9, 0x4, 0x2, 0x0, 0x3, 0x5, 0x81, 0x56be, 0x8, 0x700, 0x7, 0x40, 0x3, 0xa, 0x2, 0x4, 0xb6, 0x2, 0x69, 0x0, 0x8, 0x6, 0x1, 0x34e48f54, 0x0, 0x3ff, 0x94c1, 0x5, 0x5, 0x3, 0x7ff, 0x6, 0x8, 0xfffffff9, 0x5, 0x6, 0xbc0, 0x4, 0x400, 0x10001, 0x5, 0x2, 0x7e7a, 0x0, 0x10, 0x10000, 0x8, 0x5, 0x1, 0x5, 0xffffffff, 0x1, 0xfffffff8, 0xfff, 0x7, 0xe00000, 0xd, 0x93, 0x6, 0x1, 0x8, 0xfc000000, 0x1, 0x5, 0x3, 0x8, 0x6, 0x0, 0xd, 0x3, 0x3, 0x24bf8def, 0xd3, 0x777, 0xa6, 0x8, 0x9413cb2, 0x4, 0x1, 0x6, 0x6, 0x9, 0x3, 0x3, 0x73d, 0x1ff, 0x400, 0xffffffff, 0xfffff58f, 0x4, 0x4, 0x80000001, 0x38, 0x1ff, 0xad, 0x4, 0x1, 0x4, 0x7, 0x5, 0x7, 0xfffffff8, 0x3, 0x3, 0x6, 0x6, 0xd, 0x100, 0xf, 0xa8d, 0x1, 0x10000, 0x8, 0x5, 0x8, 0x80, 0x3ff, 0x4, 0x7, 0x1, 0x40000000, 0x9f, 0x3, 0x9, 0x47, 0x180, 0x3, 0x7f, 0x80000000, 0x4dc, 0xfff, 0x9, 0xc303, 0xfff, 0x3, 0x7, 0x1, 0x3f5, 0x2, 0x6, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xda99, 0x20000000, 0x4, 0x5, 0xffff103e, {0xa, 0x2, 0x32c6, 0x3, 0xd5e, 0x80000000}, {0x4, 0x0, 0x5, 0x3, 0xc75}, 0x0, 0x2d, 0x10000}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0xfffffff9, 0x80000000, 0x9, {0x40, 0x1, 0x4, 0x4, 0xa29, 0x7f}, {0xf, 0x2, 0x120, 0x0, 0x9, 0x8000}, 0xffffb40b, 0xbb9c, 0x1}}]]}, {0x9a, 0x6, "b59ffc2533b588e13f1c4fc298513b13d84e14135e537231777769a658a1db46fe116059e5ed35cc786d5efc8ffd7508964584f43c9a84efe87c3a66dccd88d808b46ce842b3c8c37907a12fb82c34c750dfefc680ed26785b185ec80ae77ecded44666beb0f1895b0d43e1374aa6d93852c162443c9030e67d88ece53c3860179b0b1d9e0ecb2da49f5a00a95f32a37071dd4c99f0c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x28, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=@deltfilter={0x6d0, 0x2d, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xffff, 0xfff1}, {0x4, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x400}, @filter_kind_options=@f_basic={{0xa}, {0x660, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xf}}, @TCA_BASIC_ACT={0x64c, 0x3, [@m_police={0xb0, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x84, 0x6, "a88da2f6211ef39fb6350ca063149b96a75be73864ea4bb5ff5aae4cd4ceef9309870b428d8eb15613b063dcf407fd24dc1a6afae4736bf9294d38afb1e737356ad0b78e37c15647a97493455895daf1df000732084faec9464b53bcc67a95a7ffbcc5bd616f1b81cf76c6488db1108bbe8727d663c2ec089e7fa217bfa4530c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x598, 0x0, 0x0, 0x0, {{0xb}, {0x4d4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x80000001, 0x8, 0x400, 0x30, 0x82d, 0x8, 0xe74, 0x3, 0x1, 0x80, 0x9, 0x6, 0x2, 0x8f5a, 0x80000001, 0xffff, 0x0, 0x87, 0xfa9, 0x6, 0x7, 0x3, 0x98, 0x3dc2, 0x20000, 0x89bf, 0x5, 0x5, 0xfa6, 0xa, 0xffffff09, 0x9, 0x7, 0x9, 0x4, 0xffff0000, 0x6, 0x4d, 0x9fdc679, 0x2, 0x408, 0x2, 0x218, 0x8, 0x7fffffff, 0x8, 0x74a, 0x0, 0x3ff, 0x100, 0x7, 0x7, 0x2, 0x5, 0xfffffe00, 0x782e, 0x2, 0xf, 0x5, 0x8000, 0x8, 0x8, 0x2, 0xffffb4db, 0x0, 0x6, 0x3, 0x9, 0x5, 0x7, 0x6614, 0xa, 0x5, 0x7f, 0xb, 0xfffeffff, 0x3, 0xc7b, 0x6, 0x6, 0x2, 0x8, 0x2, 0x3, 0x8, 0x2, 0x0, 0x0, 0xc5300000, 0x0, 0x7, 0x7, 0x0, 0x3, 0x8, 0x101, 0x1, 0x8, 0x5, 0x40, 0x1ff, 0x4c9, 0x7, 0x3, 0x0, 0x3, 0x96, 0x2, 0x6ae45f79, 0x66, 0x7fff, 0x9, 0x7, 0x0, 0x9, 0x4, 0x2, 0x0, 0x3, 0x5, 0x81, 0x56be, 0x8, 0x700, 0x7, 0x40, 0x3, 0xa, 0x2, 0x4, 0xb6, 0x2, 0x69, 0x0, 0x8, 0x6, 0x1, 0x34e48f54, 0x0, 0x3ff, 0x94c1, 0x5, 0x5, 0x3, 0x7ff, 0x6, 0x8, 0xfffffff9, 0x5, 0x6, 0xbc0, 0x4, 0x400, 0x10001, 0x5, 0x2, 0x7e7a, 0x0, 0x10, 0x10000, 0x8, 0x5, 0x1, 0x5, 0xffffffff, 0x1, 0xfffffff8, 0xfff, 0x7, 0xe00000, 0xd, 0x93, 0x6, 0x1, 0x8, 0xfc000000, 0x1, 0x5, 0x3, 0x8, 0x6, 0x0, 0xd, 0x3, 0x3, 0x24bf8def, 0xd3, 0x777, 0xa6, 0x8, 0x9413cb2, 0x4, 0x1, 0x6, 0x6, 0x9, 0x3, 0x3, 0x73d, 0x1ff, 0x400, 0xffffffff, 0xfffff58f, 0x4, 0x4, 0x80000001, 0x38, 0x1ff, 0xad, 0x4, 0x1, 0x4, 0x7, 0x5, 0x7, 0xfffffff8, 0x3, 0x3, 0x6, 0x6, 0xd, 0x100, 0xf, 0xa8d, 0x1, 0x10000, 0x8, 0x5, 0x8, 0x80, 0x3ff, 0x4, 0x7, 0x1, 0x40000000, 0x9f, 0x3, 0x9, 0x47, 0x180, 0x3, 0x7f, 0x80000000, 0x4dc, 0xfff, 0x9, 0xc303, 0xfff, 0x3, 0x7, 0x1, 0x3f5, 0x2, 0x6, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xda99, 0x20000000, 0x4, 0x5, 0xffff103e, {0xa, 0x2, 0x32c6, 0x3, 0xd5e, 0x80000000}, {0x4, 0x0, 0x5, 0x3, 0xc75}, 0x0, 0x2d, 0x10000}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0xfffffff9, 0x80000000, 0x9, {0x40, 0x1, 0x4, 0x4, 0xa29, 0x7f}, {0xf, 0x2, 0x120, 0x0, 0x9, 0x8000}, 0xffffb40b, 0xbb9c, 0x1}}]]}, {0x9a, 0x6, "b59ffc2533b588e13f1c4fc298513b13d84e14135e537231777769a658a1db46fe116059e5ed35cc786d5efc8ffd7508964584f43c9a84efe87c3a66dccd88d808b46ce842b3c8c37907a12fb82c34c750dfefc680ed26785b185ec80ae77ecded44666beb0f1895b0d43e1374aa6d93852c162443c9030e67d88ece53c3860179b0b1d9e0ecb2da49f5a00a95f32a37071dd4c99f0c"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x28, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 524.26663ms ago: executing program 0 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x43, 0x9, 0x5f, 0xbd, "233b6c404afa92f63786f73f1a75cdf9975056c4a0beb1aeabbd7758175a053e968fa07a492f3451b3e829c8716b27748e36e620398714798b31ebb17f7316cb38813ec38827e039154acef629117f0eb865c72c99b34abe95fc9c1bb9c3a755a3598e456073681d7e67954f8fab5ddcb3e2d8523071328b9c6fc267b6656b0df616beb2b82505bdc0ae6c3d9ee27eb678d634f49fe0867370b0e4cfe62368eb8a612e0fe9fab01d562a0b91316c07b69f40dd9d0e27471ff03ec0fd4a"}}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_eeprom={0x43, 0x9, 0x5f, 0xbd, "233b6c404afa92f63786f73f1a75cdf9975056c4a0beb1aeabbd7758175a053e968fa07a492f3451b3e829c8716b27748e36e620398714798b31ebb17f7316cb38813ec38827e039154acef629117f0eb865c72c99b34abe95fc9c1bb9c3a755a3598e456073681d7e67954f8fab5ddcb3e2d8523071328b9c6fc267b6656b0df616beb2b82505bdc0ae6c3d9ee27eb678d634f49fe0867370b0e4cfe62368eb8a612e0fe9fab01d562a0b91316c07b69f40dd9d0e27471ff03ec0fd4a"}}) (async) 423.189851ms ago: executing program 3 (id=2835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1b0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x884) getpeername$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000580)=0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000005c0)={0x4, 0x4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000340)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, &(0x7f0000000100)=[{&(0x7f00000003c0)="7d8ff4b1626ff7c391b3093751419ab1ab290e2acc92e273552ea3d610dfd8438ae60c658456a639812104e0d944ce816e1cf9e1f3b21336254c9485bb77f8c51ffa37aff5a5824579", 0x49}], 0x1, &(0x7f0000000440)=[{0xc0, 0x111, 0x8, "510d1ff471dfc856ce90248f46b52366bfab4fe362fd85bd541e298b2af51317b6c3b056f10a8eb5e30391b8e2037d147ce16a011e0251fca5aab4598cab91b21942454398936a071e47e3eb9844f0f4d12edfd93da9a61e6cd7bf4603149f256998b42f6b2234e2a08809da32c7d498df2f4940c051f8cabde38d6a09472e9302d0ecfe75db315fe905b83a59fdbdb57f48d4bc51de165a4ee5554b4de0e0cb3d256a3a96514b0bebe8"}], 0xc0}}], 0x1, 0xc090) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbfb, {0x80}}, 0x14}}, 0x0) 355.918957ms ago: executing program 1 (id=2836): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) syz_emit_ethernet(0x37, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x1, 0x84, 0x0, @empty, @local, {[], "bd"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x4, 0x7, 0xe48, 0x0, 0xffd, 0x10000, 0x9, 0x9}}) r4 = accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80800) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000001f00)) sendmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="3b498c3ee2", 0x5}], 0x1}}], 0x1, 0x24005805) r9 = socket$kcm(0x21, 0x2, 0x2) r10 = accept(r4, &(0x7f0000000340)=@l2, &(0x7f0000000280)=0x80) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f00000003c0)={@local, @loopback, 0x1, "c49db9806088f7164faf6d81bf7dc43ab57f7c71970aab142ec1736b68ca72ee", 0x9, 0x5, 0x9, 0x44b}, 0x3c) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x20}, 0x0) 0s ago: executing program 0 (id=2837): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x9, 0x9, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8000, 0x7, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073017f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): link: 'syz.4.673': attribute type 10 has an invalid length. [ 158.708248][ T8412] bridge_slave_1: left allmulticast mode [ 158.713959][ T8412] bridge_slave_1: left promiscuous mode [ 158.728516][ T8412] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.786294][ T8412] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 158.935414][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.674'. [ 159.007807][ T8428] netlink: 'syz.1.680': attribute type 4 has an invalid length. [ 159.015790][ T8428] netlink: 152 bytes leftover after parsing attributes in process `syz.1.680'. [ 159.063145][ T8432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.680'. [ 159.314101][ T8442] sctp: [Deprecated]: syz.1.682 (pid 8442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.314101][ T8442] Use struct sctp_sack_info instead [ 159.315229][ T8443] netlink: 'syz.3.681': attribute type 23 has an invalid length. [ 159.532232][ T8457] netlink: 96 bytes leftover after parsing attributes in process `syz.1.688'. [ 159.617301][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 160.046753][ T8493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.051271][ T8494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.064711][ T6160] tipc: Subscription rejected, illegal request [ 160.311752][ T8511] veth0: entered promiscuous mode [ 160.321302][ T8510] veth0: left promiscuous mode [ 160.451351][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'. [ 160.513022][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.706'. [ 160.716996][ T8532] netlink: 'syz.2.708': attribute type 11 has an invalid length. [ 160.886106][ T8537] syz.3.710: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.919522][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.3.710 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 160.919555][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.919576][ T8537] Call Trace: [ 160.919585][ T8537] [ 160.919595][ T8537] dump_stack_lvl+0x189/0x250 [ 160.919637][ T8537] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 160.919672][ T8537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.919706][ T8537] ? __pfx__printk+0x10/0x10 [ 160.919738][ T8537] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.919765][ T8537] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.919800][ T8537] warn_alloc+0x214/0x310 [ 160.919836][ T8537] ? stack_depot_save_flags+0x40/0x860 [ 160.919865][ T8537] ? __pfx_warn_alloc+0x10/0x10 [ 160.919900][ T8537] ? kasan_save_track+0x4f/0x80 [ 160.919928][ T8537] ? xskq_create+0x56/0x170 [ 160.919951][ T8537] ? xsk_init_queue+0xb0/0x110 [ 160.919972][ T8537] ? xsk_setsockopt+0x4dc/0x8d0 [ 160.919992][ T8537] ? do_sock_setsockopt+0x17c/0x1b0 [ 160.920022][ T8537] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 160.920051][ T8537] ? do_syscall_64+0xfa/0x3b0 [ 160.920077][ T8537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.920109][ T8537] __vmalloc_node_range_noprof+0x125/0x12f0 [ 160.920177][ T8537] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.920218][ T8537] ? __kasan_kmalloc+0x93/0xb0 [ 160.920251][ T8537] vmalloc_user_noprof+0xad/0xf0 [ 160.920283][ T8537] ? xskq_create+0xbf/0x170 [ 160.920308][ T8537] xskq_create+0xbf/0x170 [ 160.920337][ T8537] xsk_init_queue+0xb0/0x110 [ 160.920371][ T8537] xsk_setsockopt+0x4dc/0x8d0 [ 160.920397][ T8537] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.920419][ T8537] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.920446][ T8537] ? aa_sock_opt_perm+0xff/0x1b0 [ 160.920479][ T8537] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.920502][ T8537] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.920532][ T8537] do_sock_setsockopt+0x17c/0x1b0 [ 160.920567][ T8537] __x64_sys_setsockopt+0x13f/0x1b0 [ 160.920605][ T8537] do_syscall_64+0xfa/0x3b0 [ 160.920641][ T8537] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.920667][ T8537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.920689][ T8537] ? clear_bhb_loop+0x60/0xb0 [ 160.920723][ T8537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.920746][ T8537] RIP: 0033:0x7f7b86d8ebe9 [ 160.920773][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.920792][ T8537] RSP: 002b:00007f7b87b25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.920813][ T8537] RAX: ffffffffffffffda RBX: 00007f7b86fb5fa0 RCX: 00007f7b86d8ebe9 [ 160.920828][ T8537] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 160.920839][ T8537] RBP: 00007f7b86e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 160.920851][ T8537] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.920863][ T8537] R13: 00007f7b86fb6038 R14: 00007f7b86fb5fa0 R15: 00007ffc03cbf2a8 [ 160.920895][ T8537] [ 160.920909][ T8537] Mem-Info: [ 161.258823][ T8553] openvswitch: netlink: Key type 16144 is out of range max 32 [ 161.268127][ T8537] active_anon:4972 inactive_anon:0 isolated_anon:0 [ 161.268127][ T8537] active_file:1161 inactive_file:39851 isolated_file:0 [ 161.268127][ T8537] unevictable:768 dirty:46 writeback:0 [ 161.268127][ T8537] slab_reclaimable:10646 slab_unreclaimable:97930 [ 161.268127][ T8537] mapped:30070 shmem:1360 pagetables:1603 [ 161.268127][ T8537] sec_pagetables:0 bounce:0 [ 161.268127][ T8537] kernel_misc_reclaimable:0 [ 161.268127][ T8537] free:1324770 free_pcp:15154 free_cma:0 [ 161.271922][ T8539] nbd1: detected capacity change from 0 to 127 [ 161.368169][ T8537] Node 0 active_anon:19788kB inactive_anon:0kB active_file:4644kB inactive_file:159200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120380kB dirty:180kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13036kB pagetables:6156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.426006][ T8537] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.459790][ T8537] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.493970][ T8537] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 161.500614][ T8537] Node 0 DMA32 free:1399984kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19944kB inactive_anon:0kB active_file:4644kB inactive_file:157628kB unevictable:1536kB writepending:180kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:40692kB local_pcp:20900kB free_cma:0kB [ 161.536038][ T8566] netlink: 212268 bytes leftover after parsing attributes in process `syz.2.716'. [ 161.558821][ T8566] netlink: zone id is out of range [ 161.564640][ T8566] netlink: zone id is out of range [ 161.576034][ T8537] lowmem_reserve[]: 0 0 1 1 1 [ 161.582577][ T8537] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 161.624652][ T8566] netlink: zone id is out of range [ 161.632005][ T8537] lowmem_reserve[]: 0 0 0 0 0 [ 161.642805][ T8566] netlink: zone id is out of range [ 161.644319][ T8537] Node 1 Normal free:3883524kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20096kB local_pcp:9920kB free_cma:0kB [ 161.656820][ T8566] netlink: get zone limit has 8 unknown bytes [ 161.688015][ T8537] lowmem_reserve[]: [ 161.701010][ T5881] block nbd1: Receive control failed (result -32) [ 161.741562][ T8537] 0 0 0 0 0 [ 161.744946][ T8537] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.758451][ T8537] Node 0 DMA32: 1572*4kB (UM) 1792*8kB (UM) 1383*16kB (UME) 1545*32kB (UME) 1072*64kB (UME) 873*128kB (UME) 622*256kB (UM) 392*512kB (UME) 187*1024kB (UM) 1*2048kB (M) 140*4096kB (M) = 1399456kB [ 161.778630][ T8537] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 161.791071][ T8537] Node 1 Normal: 191*4kB (UME) 45*8kB (UME) 48*16kB (UME) 63*32kB (UME) 29*64kB (UME) 9*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3883524kB [ 161.809763][ T8537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.824251][ T8537] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.833953][ T8537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.862295][ T8537] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.873529][ T8537] 42368 total pagecache pages [ 161.880061][ T8537] 0 pages in swap cache [ 161.884435][ T8537] Free swap = 124996kB [ 161.983248][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.719'. [ 162.009313][ T8537] Total swap = 124996kB [ 162.013542][ T8537] 2097051 pages RAM [ 162.017380][ T8537] 0 pages HighMem/MovableOnly [ 162.030005][ T8537] 425645 pages reserved [ 162.034220][ T8537] 0 pages cma reserved [ 162.083317][ T8587] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.536291][ T8626] netlink: 'syz.1.734': attribute type 24 has an invalid length. [ 162.800452][ T8638] netlink: 'syz.0.739': attribute type 14 has an invalid length. [ 162.822765][ T8638] netlink: 'syz.0.739': attribute type 13 has an invalid length. [ 163.363061][ T8660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.372668][ T8662] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 3, id = 0 [ 163.399522][ T8663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.716772][ T8691] veth1_to_bond: entered allmulticast mode [ 163.777880][ T8689] veth1_to_bond: left allmulticast mode [ 163.906385][ T8697] syzkaller1: entered promiscuous mode [ 163.912156][ T8697] syzkaller1: entered allmulticast mode [ 164.235734][ T8705] netlink: 'syz.0.759': attribute type 10 has an invalid length. [ 164.252698][ T8705] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 164.291323][ T8706] __nla_validate_parse: 4 callbacks suppressed [ 164.291345][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 164.428168][ T8712] netlink: 'syz.3.760': attribute type 11 has an invalid length. [ 164.444312][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'. [ 164.660491][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 164.684415][ T8729] netlink: 'syz.3.764': attribute type 12 has an invalid length. [ 164.695754][ T8729] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 164.759093][ T8718] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 164.774494][ T8718] netlink: 148 bytes leftover after parsing attributes in process `syz.0.762'. [ 165.044540][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 165.230618][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 165.277957][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 165.378402][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 165.515167][ T8783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 165.754847][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 165.964160][ T8803] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 166.008192][ T8803] team0: Device ipvlan1 failed to register rx_handler [ 166.081783][ T8809] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 167.226083][ T8870] netlink: 'syz.2.807': attribute type 11 has an invalid length. [ 167.434555][ T8879] block nbd0: NBD_DISCONNECT [ 167.441179][ T8883] openvswitch: netlink: IP tunnel dst address not specified [ 167.445297][ T8879] block nbd0: Send disconnect failed -32 [ 167.491056][ T8879] block nbd0: shutting down sockets [ 167.509839][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.519282][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.558317][ T95] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.568904][ T95] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.577544][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.592594][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.615121][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.634528][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.650197][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.703735][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.736559][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.773404][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.802891][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.827468][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.847677][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.871224][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.894174][ T6224] ldm_validate_partition_table(): Disk read failed. [ 167.920344][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 167.944443][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 167.979865][ T6224] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 168.003242][ T6224] Buffer I/O error on dev nbd0, logical block 0, async page read [ 168.026330][ T6224] Dev nbd0: unable to read RDB block 0 [ 168.056881][ T6224] nbd0: unable to read partition table [ 168.104677][ T6224] ldm_validate_partition_table(): Disk read failed. [ 168.141860][ T6224] Dev nbd0: unable to read RDB block 0 [ 168.172702][ T6224] nbd0: unable to read partition table [ 168.275748][ T6224] udevd[6224]: failed to send result of seq 11721 to main daemon: Connection refused [ 168.927311][ T8961] bridge1: entered promiscuous mode [ 168.965949][ T8961] bridge1: entered allmulticast mode [ 169.351797][ T8986] __nla_validate_parse: 12 callbacks suppressed [ 169.351819][ T8986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.837'. [ 169.432550][ T8986] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 169.515754][ T8994] tipc: Started in network mode [ 169.537980][ T8994] tipc: Node identity d29bff67a77f, cluster identity 3 [ 169.551920][ T8994] tipc: Enabled bearer , priority 0 [ 169.580075][ T9000] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 169.588775][ T8994] syzkaller0: entered promiscuous mode [ 169.594577][ T8994] syzkaller0: entered allmulticast mode [ 169.735634][ T8994] tipc: Resetting bearer [ 169.786836][ T9014] netlink: 144 bytes leftover after parsing attributes in process `syz.2.845'. [ 169.802962][ T8994] tipc: Disabling bearer [ 169.858158][ T9015] veth1_to_team: mtu less than device minimum [ 169.908705][ T9022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.848'. [ 169.948438][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 170.048019][ T5865] IPVS: starting estimator thread 0... [ 170.167883][ T9028] IPVS: using max 25 ests per chain, 60000 per kthread [ 170.200843][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 170.216124][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.258017][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 170.311204][ T9036] bond0: (slave rose0): Enslaving as an active interface with an up link [ 170.334665][ T9039] netlink: 'syz.1.851': attribute type 14 has an invalid length. [ 170.344402][ T9039] netlink: 'syz.1.851': attribute type 13 has an invalid length. [ 171.109909][ T9076] pimreg13: entered allmulticast mode [ 171.119096][ T9076] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 171.206542][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 171.537503][ T9093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'. [ 171.570978][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 171.883619][ T9111] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.870'. [ 171.902263][ T9111] netlink: zone id is out of range [ 171.922938][ T9111] netlink: zone id is out of range [ 171.937680][ T9111] netlink: zone id is out of range [ 171.967144][ T9111] netlink: zone id is out of range [ 171.996004][ T9111] netlink: zone id is out of range [ 172.017907][ T9111] netlink: zone id is out of range [ 172.247539][ T9133] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 172.424258][ T9142] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 172.681540][ T9155] veth1_to_bond: entered allmulticast mode [ 172.869620][ T9155] veth1_to_bond (unregistering): left allmulticast mode [ 173.267157][ T9188] netlink: 'syz.2.892': attribute type 13 has an invalid length. [ 173.279035][ T9189] netlink: 'syz.4.894': attribute type 4 has an invalid length. [ 174.114481][ T9187] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.147945][ T9187] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.205189][ T9188] lo: entered promiscuous mode [ 174.210337][ T9188] lo: entered allmulticast mode [ 174.227638][ T9188] tunl0: entered promiscuous mode [ 174.257156][ T9188] tunl0: entered allmulticast mode [ 174.280444][ T9188] gre0: entered promiscuous mode [ 174.285585][ T9188] gre0: entered allmulticast mode [ 174.314612][ T9188] gretap0: entered promiscuous mode [ 174.330725][ T9188] gretap0: entered allmulticast mode [ 174.361076][ T9188] gretap0: refused to change device tx_queue_len [ 174.367618][ T9188] net_ratelimit: 306 callbacks suppressed [ 174.367638][ T9188] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.535382][ T9218] __nla_validate_parse: 4 callbacks suppressed [ 174.535403][ T9218] netlink: 256 bytes leftover after parsing attributes in process `syz.2.898'. [ 174.613900][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 174.869524][ T9224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.900'. [ 175.004802][ T9248] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 175.074329][ T9248] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 175.113003][ T9251] tipc: Enabled bearer , priority 10 [ 175.324969][ T9262] tipc: Enabling of bearer rejected, failed to enable media [ 175.417440][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.915'. [ 175.442010][ T9277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.914'. [ 175.473291][ T9280] netlink: 'syz.2.917': attribute type 4 has an invalid length. [ 175.485295][ T9276] netlink: 'syz.2.917': attribute type 4 has an invalid length. [ 175.487201][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 175.553450][ T9276] IPv6: Can't replace route, no match found [ 175.603096][ T9288] netlink: 'syz.0.920': attribute type 3 has an invalid length. [ 175.617962][ T9288] netlink: 766 bytes leftover after parsing attributes in process `syz.0.920'. [ 175.658092][ T9287] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 175.842618][ T9306] netlink: 'syz.1.924': attribute type 29 has an invalid length. [ 175.863798][ T9304] netlink: 'syz.1.924': attribute type 29 has an invalid length. [ 175.888607][ T9304] netlink: 500 bytes leftover after parsing attributes in process `syz.1.924'. [ 176.061949][ T9321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'. [ 176.228604][ T5931] tipc: Node number set to 806191937 [ 176.235405][ T9330] netlink: 104 bytes leftover after parsing attributes in process `syz.4.933'. [ 176.955981][ T9374] netlink: 'syz.4.947': attribute type 3 has an invalid length. [ 177.096126][ T9379] netlink: 'syz.0.951': attribute type 8 has an invalid length. [ 177.148483][ T9381] team_slave_0: entered promiscuous mode [ 177.167653][ T9381] team_slave_0: entered allmulticast mode [ 177.282079][ T9385] bond0: entered promiscuous mode [ 177.309351][ T9385] bond0: entered allmulticast mode [ 177.315159][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.433170][ T9394] netlink: 'syz.4.954': attribute type 7 has an invalid length. [ 177.444193][ T9385] bond0 (unregistering): Released all slaves [ 177.479652][ T9390] gretap1: entered promiscuous mode [ 177.775649][ T9413] geneve2: entered promiscuous mode [ 177.920621][ T9422] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 177.941419][ T9422] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 178.063199][ T9426] delete_channel: no stack [ 178.065878][ T9431] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 178.075907][ T9431] netlink: 'syz.2.967': attribute type 2 has an invalid length. [ 178.324912][ T9437] tipc: Disabling bearer [ 179.816209][ T6154] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.855579][ T6154] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.878192][ T6154] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.911368][ T9481] __nla_validate_parse: 12 callbacks suppressed [ 179.911388][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 180.294638][ T9498] bridge_slave_0: left allmulticast mode [ 180.322178][ T9498] bridge_slave_0: left promiscuous mode [ 180.345065][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.382598][ T9498] bridge_slave_1: left allmulticast mode [ 180.393477][ T9498] bridge_slave_1: left promiscuous mode [ 180.401409][ T9508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.411464][ T9509] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.420259][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.524300][ T9498] team0: Port device team_slave_0 removed [ 180.533930][ T9498] team0: Port device team_slave_1 removed [ 180.541208][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.553944][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.572738][ T9503] team0: Mode changed to "activebackup" [ 180.604299][ T9514] netlink: 'syz.0.990': attribute type 6 has an invalid length. [ 180.605997][ T9509] vlan0: entered promiscuous mode [ 180.801815][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 180.877041][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 180.908233][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 181.040819][ T9541] netlink: 'syz.2.1000': attribute type 23 has an invalid length. [ 181.085969][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 181.132707][ T9543] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 181.245107][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 181.327847][ T9560] lo speed is unknown, defaulting to 1000 [ 181.329348][ T9553] lo speed is unknown, defaulting to 1000 [ 181.371144][ T9560] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 181.473850][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1005'. [ 181.496323][ T9569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.531159][ T9564] bond1: (slave gretap1): making interface the new active one [ 181.548587][ T9564] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 181.627102][ T9579] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 181.708885][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 181.761316][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 182.041243][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 182.092314][ T9594] syz.4.1011 (9594) used greatest stack depth: 17896 bytes left [ 182.546523][ T9627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.786690][ T9636] syz_tun: entered allmulticast mode [ 182.827370][ T9636] dvmrp1: entered allmulticast mode [ 182.879394][ T9634] syz_tun: left allmulticast mode [ 183.648889][ T9691] tipc: Enabled bearer , priority 0 [ 183.657438][ T9691] syzkaller0: entered promiscuous mode [ 183.669673][ T9691] syzkaller0: entered allmulticast mode [ 183.728538][ T9691] tipc: Resetting bearer [ 183.769742][ T9690] tipc: Resetting bearer [ 183.811067][ T9690] tipc: Disabling bearer [ 184.102752][ T9712] netlink: 'syz.1.1043': attribute type 9 has an invalid length. [ 184.155479][ T9712] netlink: 'syz.1.1043': attribute type 9 has an invalid length. [ 184.267576][ T9715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.274403][ T9715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.518385][ T9728] delete_channel: no stack [ 184.576936][ T9735] netlink: 'syz.2.1050': attribute type 9 has an invalid length. [ 184.623845][ T9735] netlink: 'syz.2.1050': attribute type 9 has an invalid length. [ 184.781846][ T9737] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 184.859356][ T9744] lo speed is unknown, defaulting to 1000 [ 184.872037][ T9753] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 184.967609][ T9753] bond0 (unregistering): Released all slaves [ 185.050628][ T9763] ip6tnl3: entered promiscuous mode [ 185.059419][ T9763] ip6tnl3: entered allmulticast mode [ 185.832503][ T9812] __nla_validate_parse: 14 callbacks suppressed [ 185.832524][ T9812] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1067'. [ 186.025913][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 186.027413][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 186.170984][ T9819] nbd: must specify a size in bytes for the device [ 186.181857][ T9818] nbd: must specify a size in bytes for the device [ 186.366115][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 186.379714][ T9830] macvlan0: entered allmulticast mode [ 186.423827][ T9830] macvlan0 (unregistering): left allmulticast mode [ 186.501769][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1082'. [ 186.774895][ T9856] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 186.808181][ T9856] netlink: 'syz.0.1085': attribute type 3 has an invalid length. [ 186.841071][ T9856] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1085'. [ 186.894734][ T9856] NCSI netlink: No device for ifindex 813332851 [ 186.915379][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.118836][ T6154] wlan1: Trigger new scan to find an IBSS to join [ 187.192449][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'. [ 187.306465][ T9883] tipc: Enabling of bearer rejected, failed to enable media [ 187.338154][ T9884] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 187.367360][ T9884] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1092'. [ 187.388000][ T9881] tipc: Enabling of bearer rejected, failed to enable media [ 187.452895][ T9892] erspan0: entered allmulticast mode [ 187.474728][ T9892] openvswitch: netlink: Missing key (keys=40, expected=100) [ 187.694310][ T9904] lo speed is unknown, defaulting to 1000 [ 187.745045][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 187.757118][ T9904] lo speed is unknown, defaulting to 1000 [ 187.775901][ T9904] lo speed is unknown, defaulting to 1000 [ 187.847034][ T9914] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1101'. [ 187.891340][ T9917] pimreg: entered allmulticast mode [ 187.916547][ T9922] dvmrp1: left allmulticast mode [ 187.969246][ T9922] pimreg: left allmulticast mode [ 188.002889][ T9917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.531607][ T9904] infiniband syz0: set down [ 188.538550][ T5966] lo speed is unknown, defaulting to 1000 [ 188.557505][ T9904] infiniband syz0: added lo [ 188.579678][ T9904] syz0: rxe_create_cq: returned err = -12 [ 188.595469][ T9904] infiniband syz0: Couldn't create ib_mad CQ [ 188.612108][ T9904] infiniband syz0: Couldn't open port 1 [ 188.711166][ T9904] RDS/IB: syz0: added [ 188.730543][ T9904] smc: adding ib device syz0 with port count 1 [ 188.747364][ T9904] smc: ib device syz0 port 1 has pnetid [ 188.764665][ T24] lo speed is unknown, defaulting to 1000 [ 188.780665][ T9904] lo speed is unknown, defaulting to 1000 [ 189.270662][ T9981] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 189.434631][ T9904] lo speed is unknown, defaulting to 1000 [ 190.036702][ T9904] lo speed is unknown, defaulting to 1000 [ 190.068089][T10020] syz.3.1132: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.109903][T10020] CPU: 0 UID: 0 PID: 10020 Comm: syz.3.1132 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 190.109936][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.109950][T10020] Call Trace: [ 190.109958][T10020] [ 190.109969][T10020] dump_stack_lvl+0x189/0x250 [ 190.110008][T10020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.110036][T10020] ? __pfx__printk+0x10/0x10 [ 190.110069][T10020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.110097][T10020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.110126][T10020] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 190.110156][T10020] warn_alloc+0x214/0x310 [ 190.110191][T10020] ? stack_depot_save_flags+0x40/0x860 [ 190.110219][T10020] ? __pfx_warn_alloc+0x10/0x10 [ 190.110255][T10020] ? kasan_save_track+0x4f/0x80 [ 190.110283][T10020] ? xskq_create+0x56/0x170 [ 190.110306][T10020] ? xsk_init_queue+0xb0/0x110 [ 190.110340][T10020] ? xsk_setsockopt+0x4dc/0x8d0 [ 190.110361][T10020] ? do_sock_setsockopt+0x17c/0x1b0 [ 190.110398][T10020] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 190.110434][T10020] ? do_syscall_64+0xfa/0x3b0 [ 190.110461][T10020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.110535][T10020] __vmalloc_node_range_noprof+0x125/0x12f0 [ 190.110610][T10020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.110645][T10020] ? xskq_create+0x56/0x170 [ 190.110674][T10020] ? __kasan_kmalloc+0x93/0xb0 [ 190.110708][T10020] vmalloc_user_noprof+0xad/0xf0 [ 190.110741][T10020] ? xskq_create+0xbf/0x170 [ 190.110768][T10020] xskq_create+0xbf/0x170 [ 190.110798][T10020] xsk_init_queue+0xb0/0x110 [ 190.110827][T10020] xsk_setsockopt+0x4dc/0x8d0 [ 190.110855][T10020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.110879][T10020] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.110913][T10020] ? aa_sock_opt_perm+0xff/0x1b0 [ 190.110948][T10020] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 190.110973][T10020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.110999][T10020] do_sock_setsockopt+0x17c/0x1b0 [ 190.111037][T10020] __x64_sys_setsockopt+0x13f/0x1b0 [ 190.111075][T10020] do_syscall_64+0xfa/0x3b0 [ 190.111103][T10020] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.111128][T10020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.111150][T10020] ? clear_bhb_loop+0x60/0xb0 [ 190.111176][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.111197][T10020] RIP: 0033:0x7f7b86d8ebe9 [ 190.111219][T10020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.111238][T10020] RSP: 002b:00007f7b87b25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.111260][T10020] RAX: ffffffffffffffda RBX: 00007f7b86fb5fa0 RCX: 00007f7b86d8ebe9 [ 190.111276][T10020] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 190.111288][T10020] RBP: 00007f7b86e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 190.111301][T10020] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.111314][T10020] R13: 00007f7b86fb6038 R14: 00007f7b86fb5fa0 R15: 00007ffc03cbf2a8 [ 190.111348][T10020] [ 190.419663][T10020] Mem-Info: [ 190.422237][ T6160] wlan1: Trigger new scan to find an IBSS to join [ 190.423137][T10020] active_anon:4461 inactive_anon:0 isolated_anon:0 [ 190.423137][T10020] active_file:1193 inactive_file:39864 isolated_file:0 [ 190.423137][T10020] unevictable:768 dirty:85 writeback:0 [ 190.423137][T10020] slab_reclaimable:11347 slab_unreclaimable:98634 [ 190.423137][T10020] mapped:28928 shmem:1385 pagetables:1613 [ 190.423137][T10020] sec_pagetables:0 bounce:0 [ 190.423137][T10020] kernel_misc_reclaimable:0 [ 190.423137][T10020] free:1321344 free_pcp:14776 free_cma:0 [ 190.475410][T10020] Node 0 active_anon:17912kB inactive_anon:0kB active_file:4772kB inactive_file:159252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115752kB dirty:332kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12992kB pagetables:6328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.508075][T10020] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.538523][T10020] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.568063][T10020] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 190.573984][T10020] Node 0 DMA32 free:1385324kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18168kB inactive_anon:0kB active_file:4772kB inactive_file:157680kB unevictable:1536kB writepending:332kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:39388kB local_pcp:25360kB free_cma:0kB [ 190.606775][T10020] lowmem_reserve[]: 0 0 1 1 1 [ 190.611627][T10020] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 190.641468][T10020] lowmem_reserve[]: 0 0 0 0 0 [ 190.646352][T10020] Node 1 Normal free:3884552kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19104kB local_pcp:9408kB free_cma:0kB [ 190.678671][T10020] lowmem_reserve[]: 0 0 0 0 0 [ 190.683657][T10020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 190.696982][T10020] Node 0 DMA32: 115*4kB (M) 1232*8kB (UME) 1373*16kB (UM) 1664*32kB (UME) 1143*64kB (UM) 876*128kB (UME) 620*256kB (UME) 394*512kB (UME) 190*1024kB (UME) 1*2048kB (M) 136*4096kB (M) = 1384924kB [ 190.716746][T10020] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 190.730221][T10020] Node 1 Normal: 190*4kB (UME) 46*8kB (UME) 48*16kB (UME) 89*32kB (UME) 30*64kB (UME) 10*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3884552kB [ 190.757910][T10020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.767616][T10020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.797858][T10020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.807481][T10020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.857775][T10020] 43454 total pagecache pages [ 190.862698][T10020] 0 pages in swap cache [ 190.866890][T10020] Free swap = 124996kB [ 190.893454][T10020] Total swap = 124996kB [ 190.898885][T10020] 2097051 pages RAM [ 190.902729][T10020] 0 pages HighMem/MovableOnly [ 190.905069][T10030] __nla_validate_parse: 9 callbacks suppressed [ 190.905091][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 190.928260][T10020] 425645 pages reserved [ 190.932493][T10020] 0 pages cma reserved [ 190.968175][T10030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.040071][T10034] netlink: 'syz.2.1139': attribute type 12 has an invalid length. [ 191.372303][ T9904] lo speed is unknown, defaulting to 1000 [ 191.386902][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.626916][T10055] syzkaller1: entered promiscuous mode [ 191.635900][T10055] syzkaller1: entered allmulticast mode [ 191.905707][ T9904] lo speed is unknown, defaulting to 1000 [ 191.910773][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 191.932621][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 192.011058][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 192.024618][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 192.077133][T10074] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1151'. [ 192.115807][T10074] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1151'. [ 192.205560][T10079] delete_channel: no stack [ 192.415393][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 192.545589][T10095] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1158'. [ 192.611731][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1159'. [ 193.028672][T10117] macsec1: entered promiscuous mode [ 193.033983][T10117] team0: entered promiscuous mode [ 193.053784][T10117] macsec1: entered allmulticast mode [ 193.059260][T10117] team0: entered allmulticast mode [ 193.065300][T10117] team0: Device macsec1 is already an upper device of the team interface [ 193.083344][T10117] team0: left allmulticast mode [ 193.089795][T10117] team0: left promiscuous mode [ 193.507530][T10136] tc_dump_action: action bad kind [ 193.524791][T10144] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 193.671519][T10156] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 193.697640][T10155] tipc: Enabled bearer , priority 0 [ 193.700030][T10156] netlink: zone id is out of range [ 193.710030][T10156] netlink: zone id is out of range [ 193.715408][T10156] netlink: get zone limit has 8 unknown bytes [ 193.724697][T10155] tipc: Disabling bearer [ 193.910912][T10163] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 193.935818][T10167] openvswitch: netlink: IPv4 tunnel dst address is zero [ 194.360885][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.404642][T10192] netlink: 'syz.3.1188': attribute type 8 has an invalid length. [ 194.461851][T10195] netlink: 'syz.1.1189': attribute type 2 has an invalid length. [ 194.906550][T10230] netlink: 'syz.4.1201': attribute type 21 has an invalid length. [ 194.915109][T10231] erspan0: entered allmulticast mode [ 194.930904][T10230] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 194.955023][T10227] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 194.974720][T10227] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 195.225089][T10248] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 195.342098][T10257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.372612][T10259] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 195.383488][T10259] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 195.396926][T10248] veth5: entered promiscuous mode [ 195.413681][T10248] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 195.425882][T10257] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 195.434157][T10257] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 195.442430][T10257] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 195.450652][T10257] netlink: 'syz.4.1207': attribute type 2 has an invalid length. [ 195.722682][T10281] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 195.964183][T10290] lo speed is unknown, defaulting to 1000 [ 195.986816][T10290] lo speed is unknown, defaulting to 1000 [ 195.990612][T10297] __nla_validate_parse: 23 callbacks suppressed [ 195.990635][T10297] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1220'. [ 196.201531][T10311] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1223'. [ 196.213887][T10311] nbd: illegal input index 1048576 [ 196.240384][T10311] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1223'. [ 196.269517][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 196.587126][T10331] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1229'. [ 196.743524][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 196.887009][T10343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1234'. [ 197.499358][T10357] bridge0: entered allmulticast mode [ 197.525774][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1239'. [ 197.536296][T10366] pim6reg: entered allmulticast mode [ 198.044129][T10385] veth0_virt_wifi: renamed from veth0_vlan [ 198.081302][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1247'. [ 198.106046][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 198.271299][T10412] ip6gretap0: entered promiscuous mode [ 198.590198][T10426] IPVS: length: 24 != 6291960 [ 199.687645][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.809031][T10462] validate_nla: 5 callbacks suppressed [ 199.809053][T10462] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 200.032727][T10478] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 200.324676][T10462] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 200.717135][T10479] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 200.824002][T10479] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 200.946916][T10481] gretap1: entered promiscuous mode [ 200.974703][T10481] bond0: (slave gretap1): making interface the new active one [ 200.988303][T10481] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 201.007613][T10482] macvlan0: entered promiscuous mode [ 201.014794][T10482] macvlan0: entered allmulticast mode [ 201.021389][T10482] bond0: entered promiscuous mode [ 201.046295][T10482] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 201.072021][T10482] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 201.114624][T10482] bond0: left promiscuous mode [ 201.480255][T10486] lo speed is unknown, defaulting to 1000 [ 201.491782][T10506] __nla_validate_parse: 3 callbacks suppressed [ 201.491804][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1279'. [ 201.536138][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 201.599067][T10486] lo speed is unknown, defaulting to 1000 [ 202.160177][T10527] netlink: 'syz.0.1285': attribute type 30 has an invalid length. [ 202.190474][T10532] netlink: 'syz.3.1286': attribute type 9 has an invalid length. [ 203.460167][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'. [ 203.543281][T10568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 203.835040][T10581] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 203.868108][T10581] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1297'. [ 205.169987][T10613] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 205.721160][ T6162] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 205.974623][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1312'. [ 206.066605][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 207.288356][T10672] netlink: 'syz.4.1320': attribute type 1 has an invalid length. [ 207.330081][T10677] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 207.344120][T10673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1320'. [ 207.762636][T10682] netlink: 'syz.4.1325': attribute type 2 has an invalid length. [ 208.381921][T10709] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 208.572312][T10709] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 210.926355][T10782] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 211.208942][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 211.303241][T10789] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 211.354663][T10789] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1353'. [ 211.404919][T10791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1354'. [ 211.866481][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1357'. [ 211.954616][T10804] team0: No ports can be present during mode change [ 212.024228][T10810] tipc: Enabling of bearer rejected, failed to enable media [ 212.078567][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 212.084926][ T5183] Bluetooth: hci0: command 0x0406 tx timeout [ 212.091329][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 212.097625][ T5878] Bluetooth: hci1: command 0x0401 tx timeout [ 212.693426][T10822] team0: No ports can be present during mode change [ 213.222883][T10832] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.719864][T10850] hsr0 speed is unknown, defaulting to 1000 [ 213.734817][T10850] hsr0 speed is unknown, defaulting to 1000 [ 213.773701][T10850] hsr0 speed is unknown, defaulting to 1000 [ 213.775467][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 213.966422][T10850] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 214.181222][T10850] hsr0 speed is unknown, defaulting to 1000 [ 214.224955][T10850] hsr0 speed is unknown, defaulting to 1000 [ 214.272747][T10850] hsr0 speed is unknown, defaulting to 1000 [ 214.340157][T10850] hsr0 speed is unknown, defaulting to 1000 [ 214.413441][T10850] hsr0 speed is unknown, defaulting to 1000 [ 214.785222][T10881] pim6reg1: entered promiscuous mode [ 214.821019][T10881] pim6reg1: entered allmulticast mode [ 215.681173][T10900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1383'. [ 216.055599][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1385'. [ 216.653264][T10934] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 216.690118][T10934] bridge0: port 3(team0) entered blocking state [ 216.733133][T10934] bridge0: port 3(team0) entered disabled state [ 216.789520][T10934] team0: entered allmulticast mode [ 216.823192][T10934] team_slave_0: entered allmulticast mode [ 216.862456][T10934] team_slave_1: entered allmulticast mode [ 216.892827][T10934] team0: left allmulticast mode [ 216.912767][T10934] team_slave_0: left allmulticast mode [ 216.939824][T10934] team_slave_1: left allmulticast mode [ 217.077222][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 217.096877][T10947] erspan0: entered promiscuous mode [ 217.141772][T10947] erspan0: entered allmulticast mode [ 217.162980][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 217.903517][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1403'. [ 217.965684][T10970] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 218.043274][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 218.093786][T10977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.104176][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 218.155747][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 218.278413][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 218.299406][T10986] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 218.388505][T10985] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 219.099220][T11009] __nla_validate_parse: 1 callbacks suppressed [ 219.099242][T11009] netlink: 696 bytes leftover after parsing attributes in process `syz.0.1415'. [ 219.148942][T11012] openvswitch: netlink: Multiple metadata blocks provided [ 219.630522][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1419'. [ 220.183655][T11039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1425'. [ 220.240847][T11039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1425'. [ 220.794190][ C0] sched: DL replenish lagged too much [ 221.308449][T11071] netlink: 'syz.1.1433': attribute type 10 has an invalid length. [ 221.386661][ T6161] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 221.413508][T11075] veth0: entered promiscuous mode [ 221.485058][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 222.608292][T11101] syz_tun: entered allmulticast mode [ 222.625925][T11103] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1442'. [ 222.670498][T11101] dvmrp1: entered allmulticast mode [ 222.900269][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'. [ 223.029153][T11101] syz_tun: left allmulticast mode [ 223.220820][T11117] netlink: 'syz.2.1447': attribute type 1 has an invalid length. [ 223.254720][T11117] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 223.300246][T11117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1447'. [ 223.322154][T11117] dummy0: entered promiscuous mode [ 223.337559][T11117] bridge0: port 3(dummy0) entered blocking state [ 223.371447][T11117] bridge0: port 3(dummy0) entered disabled state [ 223.404793][T11117] dummy0: entered allmulticast mode [ 223.452294][T11117] bridge0: port 3(dummy0) entered blocking state [ 223.458878][T11117] bridge0: port 3(dummy0) entered forwarding state [ 223.592254][T11129] tipc: Enabled bearer , priority 0 [ 223.639510][T11129] syzkaller0: entered promiscuous mode [ 223.665719][T11129] syzkaller0: entered allmulticast mode [ 223.716445][T11129] tipc: Resetting bearer [ 223.761929][T11126] tipc: Resetting bearer [ 223.770881][T11135] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.888758][T11126] tipc: Disabling bearer [ 224.618002][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 225.696810][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 225.961085][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1475'. [ 226.011430][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1475'. [ 226.904889][T11235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1482'. [ 227.086356][T11239] gtp0: entered promiscuous mode [ 227.141421][T11239] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 227.225670][T11243] ip6tnl1: entered promiscuous mode [ 227.245480][T11243] ip6tnl1: entered allmulticast mode [ 227.275223][T11248] netlink: 'syz.2.1486': attribute type 4 has an invalid length. [ 227.344638][T11245] !: renamed from dummy0 [ 228.245207][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 228.343256][T11279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1494'. [ 228.929222][T11296] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 229.219073][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 230.041814][T11329] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 230.090064][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1508'. [ 230.122685][T11334] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 230.442359][T11344] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 230.450854][T11341] sit0: entered promiscuous mode [ 230.503879][T11347] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 230.521339][T11341] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 230.568973][T11341] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1513'. [ 230.878437][T11362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.141960][T11342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1514'. [ 231.553309][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 232.539940][T11407] tipc: Enabling of bearer rejected, failed to enable media [ 252.417978][ T6160] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.053597][T11431] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1531'. [ 256.096499][T11431] unsupported nlmsg_type 40 [ 256.455672][T11449] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.1535'. [ 256.545043][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 256.602228][T11449] openvswitch: netlink: Message has 5 unknown bytes. [ 256.996173][T11464] openvswitch: netlink: Multiple metadata blocks provided [ 257.164190][T11464] bond1: entered promiscuous mode [ 257.169549][T11464] bond1: entered allmulticast mode [ 257.175820][T11464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.228233][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 257.410065][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1539'. [ 257.420054][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ed8c00: rx timeout, send abort [ 257.430059][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059ed8c00: 0x20100: (3) A timeout occurred and this is the connection abort to close the session. [ 257.607161][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 257.721564][T11474] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 257.858812][T11474] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1539'. [ 257.940251][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1539'. [ 258.648394][T11504] netlink: 'syz.3.1554': attribute type 2 has an invalid length. [ 258.716318][T11504] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1554'. [ 259.312637][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 259.380316][T11527] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 260.010548][T11542] netlink: 'syz.4.1561': attribute type 11 has an invalid length. [ 260.051800][T11542] netlink: 'syz.4.1561': attribute type 11 has an invalid length. [ 261.124250][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.379425][T11573] tipc: Enabled bearer , priority 0 [ 261.405362][T11573] syzkaller0: entered promiscuous mode [ 261.433829][T11573] syzkaller0: entered allmulticast mode [ 261.551253][T11573] tipc: Resetting bearer [ 261.583380][T11580] syzkaller0: left promiscuous mode [ 261.604057][T11580] syzkaller0: left allmulticast mode [ 261.645582][T11572] tipc: Resetting bearer [ 261.700554][ T5866] block nbd0: Receive control failed (result -32) [ 261.773119][T11572] tipc: Disabling bearer [ 262.214159][T11601] __nla_validate_parse: 6 callbacks suppressed [ 262.214181][T11601] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1577'. [ 262.350856][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1576'. [ 264.441464][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1592'. [ 264.665843][T11637] tipc: Enabled bearer , priority 0 [ 264.706736][T11642] syzkaller0: entered promiscuous mode [ 264.723155][T11642] syzkaller0: entered allmulticast mode [ 265.204707][T11682] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 265.204959][T11683] netlink: 'syz.2.1598': attribute type 21 has an invalid length. [ 265.229805][T11682] netlink: 'syz.2.1598': attribute type 4 has an invalid length. [ 265.311699][T11682] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1598'. [ 265.330324][T11642] tipc: Resetting bearer [ 265.356746][T11683] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1598'. [ 265.422068][T11642] tipc: Disabling bearer [ 265.485579][T11683] netlink: 'syz.2.1598': attribute type 5 has an invalid length. [ 265.506441][T11683] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1598'. [ 266.301827][T11715] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 266.313972][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 266.400253][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'. [ 266.409895][T11718] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 266.433974][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1604'. [ 266.464561][T11719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1607'. [ 266.788121][T11733] tipc: Invalid UDP bearer configuration [ 266.788181][T11733] tipc: Enabling of bearer rejected, failed to enable media [ 267.865467][T11768] netlink: 'syz.0.1621': attribute type 3 has an invalid length. [ 268.542245][T11780] net veth1_virt_wifi .: renamed from virt_wifi0 [ 268.692791][T11780] tipc: Enabling of bearer rejected, failed to enable media [ 268.726933][T11786] netlink: 'syz.1.1626': attribute type 39 has an invalid length. [ 269.093994][T11822] __nla_validate_parse: 2 callbacks suppressed [ 269.094015][T11822] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1625'. [ 269.209353][T11832] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1625'. [ 269.276700][T11836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.643965][T11822] gretap0: left allmulticast mode [ 269.661859][T11832] 0ªî{X¹¦: renamed from gretap0 [ 269.681483][T11832] 0ªî{X¹¦: left promiscuous mode [ 269.693872][T11832] 0ªî{X¹¦: entered allmulticast mode [ 269.714710][T11832] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 270.286235][T11860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1639'. [ 270.349188][T11863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1640'. [ 270.398826][T11865] IPVS: length: 24 != 14328 [ 270.425648][T11868] lo: left promiscuous mode [ 270.468579][T11868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.519380][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 270.606183][T11863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.716422][T11878] netlink: 'syz.0.1643': attribute type 2 has an invalid length. [ 270.740095][T11869] : entered promiscuous mode [ 271.058532][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 271.581936][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 271.966091][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'. [ 271.983875][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'. [ 272.016101][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 273.079861][T11936] ip6gre2: entered allmulticast mode [ 273.542237][T11952] netlink: 'syz.1.1666': attribute type 1 has an invalid length. [ 273.679826][T11959] netlink: 'syz.0.1667': attribute type 10 has an invalid length. [ 273.860476][T11961] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 275.816939][T12008] __nla_validate_parse: 1 callbacks suppressed [ 275.816959][T12008] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1674'. [ 275.869568][T12007] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1673'. [ 275.893345][T12012] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 276.221458][T12023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1680'. [ 276.878956][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 277.164587][T12060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.204572][T12063] sctp: [Deprecated]: syz.2.1687 (pid 12063) Use of int in max_burst socket option. [ 277.204572][T12063] Use struct sctp_assoc_value instead [ 277.228143][T12058] tipc: Enabled bearer , priority 0 [ 277.297056][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 277.415948][T12070] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1691'. [ 277.429645][T12071] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1693'. [ 277.455921][T12071] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1693'. [ 277.971744][T12083] netlink: 'syz.4.1695': attribute type 24 has an invalid length. [ 278.063915][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 278.081753][T12086] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 278.930798][T12061] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 278.963702][T12061] syzkaller0: entered promiscuous mode [ 278.969457][T12061] syzkaller0: entered allmulticast mode [ 278.977068][T12061] tipc: Resetting bearer [ 278.986407][T12058] tipc: Enabling of bearer rejected, already enabled [ 279.147381][T11819] tipc: Resetting bearer [ 279.345913][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 279.416438][T12058] tipc: Resetting bearer [ 282.377135][T12058] tipc: Disabling bearer [ 282.417601][T12106] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1698'. [ 282.453413][T12107] vlan2: entered allmulticast mode [ 282.462816][T12107] bridge0: entered allmulticast mode [ 282.479185][T12108] gretap2: entered promiscuous mode [ 282.745453][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1702'. [ 283.322508][T11821] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.389878][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 283.429763][T12148] netlink: 'syz.4.1709': attribute type 11 has an invalid length. [ 283.437635][T12148] netlink: 'syz.4.1709': attribute type 11 has an invalid length. [ 283.515870][T12148] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1709'. [ 283.815719][T12164] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 283.869979][T12164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.174588][T12168] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 284.764816][T12168] bond1: entered promiscuous mode [ 285.019428][T12168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.123013][T12192] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 285.735010][T12220] netlink: 'syz.4.1721': attribute type 2 has an invalid length. [ 285.843080][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 286.704543][T12248] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 287.484814][T12270] tipc: Enabling of bearer rejected, failed to enable media [ 287.881626][T12282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.614793][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 290.381531][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1757'. [ 290.439040][T12352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1757'. [ 290.910585][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 290.965216][T12377] netlink: 'syz.1.1763': attribute type 2 has an invalid length. [ 291.014869][T12377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1763'. [ 291.455711][T12394] netlink: 'syz.3.1768': attribute type 11 has an invalid length. [ 291.477512][T12391] bridge_slave_0: entered allmulticast mode [ 291.569022][T12397] netlink: 'syz.4.1771': attribute type 18 has an invalid length. [ 292.017476][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1775'. [ 292.086087][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 292.424444][T12424] netlink: 'syz.2.1779': attribute type 15 has an invalid length. [ 292.461456][T12424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1779'. [ 292.843073][T12431] syzkaller0: entered promiscuous mode [ 292.880800][T12431] syzkaller0: entered allmulticast mode [ 293.303114][T12432] syzkaller1: entered promiscuous mode [ 293.330759][T12432] syzkaller1: entered allmulticast mode [ 293.427311][T12453] netlink: 'syz.3.1785': attribute type 12 has an invalid length. [ 294.731370][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1793'. [ 295.143788][T12485] netlink: 'syz.4.1796': attribute type 2 has an invalid length. [ 295.199918][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'. [ 295.247915][T12490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1797'. [ 295.319496][T12493] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1797'. [ 295.456665][T12498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 295.484052][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1798'. [ 295.515103][T12498] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 295.535596][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 295.801149][T12506] netlink: 'syz.4.1801': attribute type 1 has an invalid length. [ 295.833702][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 296.452434][T12528] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 297.139542][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 297.190477][T12558] netlink: 'syz.1.1814': attribute type 33 has an invalid length. [ 297.238916][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1813'. [ 297.343483][T12558] netlink: 'syz.1.1814': attribute type 33 has an invalid length. [ 298.815775][T12596] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 298.942731][T12582] veth0_to_team: entered promiscuous mode [ 299.061286][T12582] veth0_to_team: entered allmulticast mode [ 299.447279][T12599] IPVS: Unknown mcast interface: dvmrp0 [ 299.586567][T12600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.859845][T12632] __nla_validate_parse: 6 callbacks suppressed [ 299.859868][T12632] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1828'. [ 300.037111][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 300.940176][T12652] nbd2: detected capacity change from 0 to 127 [ 301.550425][ T5866] block nbd2: Receive control failed (result -32) [ 304.295963][T12656] lo: MTU too low for tipc bearer [ 304.308544][T12656] tipc: Enabling of bearer rejected, failed to enable media [ 304.493353][T12662] macsec0: entered promiscuous mode [ 304.535258][T12662] macsec0: entered allmulticast mode [ 304.683737][T12671] netlink: 'syz.2.1842': attribute type 2 has an invalid length. [ 304.710917][T12671] netlink: 'syz.2.1842': attribute type 2 has an invalid length. [ 305.022424][T12676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1843'. [ 305.066595][T12665] erspan0: entered promiscuous mode [ 305.082341][T12665] erspan0: entered allmulticast mode [ 305.108206][T12665] macsec0: left promiscuous mode [ 305.126302][T12665] macsec0: left allmulticast mode [ 305.147036][T12665] erspan0: left allmulticast mode [ 305.518164][T12684] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1844'. [ 305.821555][T12693] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1847'. [ 306.041787][T12704] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1850'. [ 306.139657][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'. [ 306.195979][T12708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 306.381907][T12703] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1850'. [ 307.090935][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 307.245223][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 308.023384][T12756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.703290][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1860'. [ 309.284718][T12767] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 310.278965][T12795] __nla_validate_parse: 1 callbacks suppressed [ 310.278987][T12795] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1867'. [ 310.427621][T12803] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1867'. [ 310.459082][T12799] xt_limit: Overflow, try lower: 271964/0 [ 310.571274][T12795] gretap0: entered promiscuous mode [ 310.987118][T12822] siw: device registration error -23 [ 311.347620][T12803] 0ªî{X¹¦: renamed from gretap0 [ 311.371623][T12803] 0ªî{X¹¦: left promiscuous mode [ 311.417299][T12803] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 311.564955][T12830] vlan3: entered promiscuous mode [ 311.583881][T12830] bridge0: entered promiscuous mode [ 312.866753][T12845] netlink: 'syz.4.1880': attribute type 29 has an invalid length. [ 312.905133][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 312.978900][T12851] netlink: 'syz.4.1880': attribute type 29 has an invalid length. [ 313.020609][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 313.680264][T12865] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1883'. [ 313.731207][T12865] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 314.204815][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 314.264819][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 314.285079][T12882] netlink: 'syz.1.1888': attribute type 8 has an invalid length. [ 314.655916][T11820] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.305462][T12893] ip6tnl3: entered promiscuous mode [ 315.311892][T12898] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 315.567164][T12903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1894'. [ 316.285417][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 316.319013][T12936] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 316.331260][T12936] netlink: 'syz.3.1902': attribute type 11 has an invalid length. [ 316.352574][T12936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1902'. [ 316.624497][T12936] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1902'. [ 316.680080][T12936] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1902'. [ 317.307883][T12973] sctp: [Deprecated]: syz.0.1913 (pid 12973) Use of int in max_burst socket option. [ 317.307883][T12973] Use struct sctp_assoc_value instead [ 318.491065][T13004] netlink: 'syz.3.1924': attribute type 9 has an invalid length. [ 318.516187][T13004] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.1924'. [ 318.543918][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1925'. [ 318.565183][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 318.580951][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 318.863585][T13014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1929'. [ 320.351648][T13064] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 320.372671][T13063] openvswitch: netlink: Key type 29 is not supported [ 321.046641][T13079] __nla_validate_parse: 4 callbacks suppressed [ 321.046662][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 321.131589][T13082] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1951'. [ 321.184981][T13082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1951'. [ 321.257059][T13085] syzkaller0: entered promiscuous mode [ 321.292881][T13085] syzkaller0: entered allmulticast mode [ 321.339161][T13084] bond0: entered promiscuous mode [ 321.366579][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 321.395059][T13084] bond_slave_0: entered promiscuous mode [ 321.423800][T13084] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 321.456794][T13084] bridge_slave_1: entered promiscuous mode [ 321.555129][T13096] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1954'. [ 322.366455][T13120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.413608][T13121] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1961'. [ 322.453233][T13121] netlink: 'syz.4.1961': attribute type 8 has an invalid length. [ 322.515615][T13121] netlink: 825 bytes leftover after parsing attributes in process `syz.4.1961'. [ 322.939856][T13130] netlink: 'syz.4.1963': attribute type 10 has an invalid length. [ 323.008511][T13130] team0: Device hsr_slave_0 failed to register rx_handler [ 323.078759][T13132] pimreg: entered allmulticast mode [ 323.269143][T13145] dvmrp1: entered allmulticast mode [ 323.711135][T13131] pimreg: left allmulticast mode [ 324.833453][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 325.547330][T13197] lo speed is unknown, defaulting to 1000 [ 325.716502][T13197] lo speed is unknown, defaulting to 1000 [ 325.724119][T13196] lo speed is unknown, defaulting to 1000 [ 325.791366][T13212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 326.119482][T13217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.268155][T13221] tun0: tun_chr_ioctl cmd 1074025675 [ 326.300100][T13221] tun0: persist disabled [ 326.494414][T13225] team0: Port device vlan0 removed [ 326.821584][T13196] lo speed is unknown, defaulting to 1000 [ 326.835256][T13197] hsr0 speed is unknown, defaulting to 1000 [ 328.698821][T13283] netlink: 'syz.3.2002': attribute type 10 has an invalid length. [ 328.731463][T13287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.797106][T13196] hsr0 speed is unknown, defaulting to 1000 [ 329.337401][T13297] netlink: 'syz.2.2005': attribute type 29 has an invalid length. [ 329.403822][T13299] netlink: 'syz.2.2005': attribute type 29 has an invalid length. [ 329.442837][T13297] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2005'. [ 329.491869][T13297] unsupported nla_type 58 [ 329.832722][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 329.865923][T13310] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2008'. [ 331.042409][T13333] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 331.070285][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 332.222524][T13359] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 333.513773][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 333.572118][T13389] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 333.612736][T13389] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2027'. [ 333.744259][T13392] tipc: Enabled bearer , priority 0 [ 333.800775][T13392] syzkaller0: entered promiscuous mode [ 333.852365][T13392] syzkaller0: entered allmulticast mode [ 333.911140][T13392] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 334.164374][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 334.307852][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 334.368318][T13403] tipc: Resetting bearer [ 334.435418][T13402] vlan4: entered allmulticast mode [ 334.695362][T13391] tipc: Resetting bearer [ 334.785292][T13391] tipc: Disabling bearer [ 335.098038][T13421] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2037'. [ 335.217641][T13426] sctp: [Deprecated]: syz.1.2036 (pid 13426) Use of int in max_burst socket option deprecated. [ 335.217641][T13426] Use struct sctp_assoc_value instead [ 335.470543][T13433] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2039'. [ 335.652133][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2041'. [ 336.043357][T13454] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 336.103445][T13454] bond2: entered promiscuous mode [ 336.111671][T13454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.362554][T13456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.413096][T13456] bond2: (slave bond3): making interface the new active one [ 336.462483][T13456] bond3: entered promiscuous mode [ 336.496129][T13456] bond2: (slave bond3): Enslaving as an active interface with an up link [ 336.559449][T13472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2051'. [ 336.934416][T13487] tipc: Enabling of bearer rejected, failed to enable media [ 336.993431][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 337.063882][T13485] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2055'. [ 337.982693][T13512] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 338.024852][T13512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2061'. [ 338.632896][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2067'. [ 338.649217][T13528] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 338.682920][T13528] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2068'. [ 339.169552][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 339.753096][T13555] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 339.973050][T13564] nftables ruleset with unbound set [ 340.436037][T13576] __nla_validate_parse: 5 callbacks suppressed [ 340.436057][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 340.457009][T13578] openvswitch: netlink: IPv4 tun info is not correct [ 340.536600][T13582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'. [ 341.131055][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2084'. [ 341.725721][T13614] netlink: 'syz.3.2089': attribute type 32 has an invalid length. [ 341.756291][T13614] netlink: 776 bytes leftover after parsing attributes in process `syz.3.2089'. [ 341.921471][T13612] lo speed is unknown, defaulting to 1000 [ 341.951396][T13612] lo speed is unknown, defaulting to 1000 [ 342.089752][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 342.277383][T13625] netlink: 'syz.4.2091': attribute type 7 has an invalid length. [ 342.297093][T13625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2091'. [ 342.340618][T13625] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2091'. [ 342.441948][T13625] netlink: 'syz.4.2091': attribute type 5 has an invalid length. [ 342.466332][T13625] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2091'. [ 342.901509][T13644] veth0: entered promiscuous mode [ 343.313441][T13612] hsr0 speed is unknown, defaulting to 1000 [ 343.483159][T13657] netlink: 'syz.4.2100': attribute type 12 has an invalid length. [ 343.495404][T13657] netlink: 'syz.4.2100': attribute type 29 has an invalid length. [ 343.506385][T13657] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2100'. [ 343.521256][T13657] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2100'. [ 343.542005][T13659] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 343.602053][T13636] veth0: left promiscuous mode [ 343.994465][T13666] vlan3: entered allmulticast mode [ 344.025362][T13666] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 344.644492][T13685] netlink: 'syz.1.2107': attribute type 4 has an invalid length. [ 345.509367][T13670] lec:lec_atm_close: lec0: Shut down! [ 345.668208][T13707] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 345.688102][T11846] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.736021][T13707] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 346.112092][T13710] __nla_validate_parse: 3 callbacks suppressed [ 346.112115][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 346.181061][ T5865] IPVS: starting estimator thread 0... [ 346.269432][T13725] IPVS: using max 24 ests per chain, 57600 per kthread [ 346.605402][T13735] netlink: 'syz.3.2123': attribute type 10 has an invalid length. [ 347.234889][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'. [ 347.261957][T13755] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2128'. [ 347.936871][T13777] netlink: 'syz.2.2135': attribute type 13 has an invalid length. [ 348.006549][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 348.086480][T13777] netlink: 'syz.2.2135': attribute type 13 has an invalid length. [ 348.128204][T13780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2134'. [ 348.152136][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 348.327830][ T6163] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 348.338771][T13784] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 348.626563][T13800] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 349.743173][T13800] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 349.794179][T13801] bond7 (unregistering): Released all slaves [ 349.863371][T13806] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 350.636768][T13865] netlink: 'syz.0.2155': attribute type 10 has an invalid length. [ 350.868618][T13865] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 351.004970][T13874] tipc: Enabled bearer , priority 0 [ 351.053009][T13876] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2157'. [ 351.096956][T13876] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2157'. [ 351.158256][T13869] syzkaller0: entered promiscuous mode [ 351.163970][T13869] syzkaller0: entered allmulticast mode [ 351.325699][T13884] netlink: 'syz.0.2160': attribute type 13 has an invalid length. [ 351.382612][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 351.458091][T13891] netlink: 'syz.0.2160': attribute type 13 has an invalid length. [ 351.735032][T13897] netlink: 'syz.2.2163': attribute type 1 has an invalid length. [ 352.028515][T11354] tipc: Node number set to 3609415864 [ 352.062942][T13874] tipc: Resetting bearer [ 352.280008][T13874] tipc: Disabling bearer [ 352.505142][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 352.549242][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 352.568772][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 352.684550][T13920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2166'. [ 352.798035][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 353.254353][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2174'. [ 353.275127][T13942] netlink: 'syz.4.2172': attribute type 10 has an invalid length. [ 353.306526][T13939] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2174'. [ 353.397043][T13942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.446276][T13942] batadv0: entered promiscuous mode [ 353.453209][T13942] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 353.624462][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 353.730480][T13950] sctp: [Deprecated]: syz.0.2176 (pid 13950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.730480][T13950] Use struct sctp_sack_info instead [ 354.124732][T13951] syzkaller0: entered promiscuous mode [ 354.137013][T13951] syzkaller0: entered allmulticast mode [ 354.258854][T13962] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 354.342953][T13970] nbd: nbd1 already in use [ 354.373181][T13975] nbd: nbd1 already in use [ 354.424910][T13968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2181'. [ 354.438810][T13976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.481938][T13974] veth9: entered allmulticast mode [ 358.672580][T13999] netlink: 'syz.1.2188': attribute type 2 has an invalid length. [ 358.770263][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 358.879614][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'. [ 358.968766][T11820] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 361.163092][T14069] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 361.501585][T14076] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2208'. [ 361.706411][T14084] netlink: 'syz.2.2211': attribute type 21 has an invalid length. [ 361.775803][T14084] netlink: 'syz.2.2211': attribute type 22 has an invalid length. [ 361.843034][T14084] netlink: 'syz.2.2211': attribute type 23 has an invalid length. [ 361.953054][T14084] netlink: 'syz.2.2211': attribute type 25 has an invalid length. [ 361.992773][T14084] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2211'. [ 362.142273][T14097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 362.247998][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 362.606649][T14116] tap0: tun_chr_ioctl cmd 1074025677 [ 362.622554][T14116] tap0: linktype set to 65534 [ 363.025614][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 363.066780][T14121] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 363.085273][T14121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.368019][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 363.924887][T14155] netlink: 'syz.2.2233': attribute type 6 has an invalid length. [ 363.971492][T14155] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.025448][T14155] netlink: 'syz.2.2233': attribute type 6 has an invalid length. [ 364.400873][T14169] sctp: [Deprecated]: syz.2.2236 (pid 14169) Use of int in max_burst socket option. [ 364.400873][T14169] Use struct sctp_assoc_value instead [ 364.623170][T14172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2237'. [ 364.691861][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 364.720330][T14178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2237'. [ 365.659392][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2246'. [ 366.418628][T14224] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 366.783666][T14243] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 366.867873][T14243] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 367.143718][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 367.313715][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 367.729350][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2261'. [ 367.759697][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 367.791269][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2262'. [ 368.101277][T14283] netlink: 'syz.0.2265': attribute type 10 has an invalid length. [ 368.388307][T14283] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 368.725719][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2269'. [ 368.904856][T14299] netlink: 'syz.1.2271': attribute type 5 has an invalid length. [ 368.921436][T14294] netlink: 'syz.4.2269': attribute type 2 has an invalid length. [ 368.957906][T14294] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 371.838159][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 376.812215][T11823] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 380.797996][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.489004][T14324] 8021q: VLANs not supported on tunl0 [ 384.560598][T14332] __nla_validate_parse: 3 callbacks suppressed [ 384.560620][T14332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2278'. [ 384.597490][T14331] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2281'. [ 384.631513][T14325] veth0_to_bridge: entered promiscuous mode [ 384.677978][T14325] macvtap1: entered allmulticast mode [ 384.724458][T14325] veth0_to_bridge: entered allmulticast mode [ 385.035864][T14339] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 385.106945][T14339] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 385.233554][T11355] lo speed is unknown, defaulting to 1000 [ 385.286185][T11355] syz2: Port: 1 Link ACTIVE [ 385.423773][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 386.170830][T14373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 386.544179][T14379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.028431][T14398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.258711][T14404] netlink: 'syz.2.2297': attribute type 16 has an invalid length. [ 387.275835][T14404] netlink: 'syz.2.2297': attribute type 17 has an invalid length. [ 387.391864][T14408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2298'. [ 387.514942][T14402] bridge0: port 3(dummy0) entered disabled state [ 387.571158][T14412] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2299'. [ 387.611930][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.629939][T14412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.651683][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.717476][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 387.743064][T14412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2299'. [ 387.789288][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 387.888628][T14404] lo: left allmulticast mode [ 387.947107][T14404] tunl0: left promiscuous mode [ 387.964480][T14404] tunl0: left allmulticast mode [ 387.976750][T14404] gre0: left promiscuous mode [ 387.982525][T14404] gre0: left allmulticast mode [ 388.086833][T14404] 0ªî{X¹¦: left allmulticast mode [ 388.094640][T14404] erspan0: left allmulticast mode [ 388.132758][T14404] bridge0: port 3(dummy0) entered blocking state [ 388.139414][T14404] bridge0: port 3(dummy0) entered forwarding state [ 388.167327][T14404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.118930][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 389.809191][T14470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.005708][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 390.193982][T14486] netlink: 'syz.3.2315': attribute type 2 has an invalid length. [ 393.346747][T11355] lo speed is unknown, defaulting to 1000 [ 393.409393][T14480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.640397][T14502] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.2319'. [ 393.658884][T11355] lo speed is unknown, defaulting to 1000 [ 393.698135][T14502] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 393.992262][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 394.072044][T14520] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 396.171536][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2337'. [ 396.185669][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2337'. [ 396.285333][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 396.306851][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 396.723233][T14590] netlink: 'syz.4.2342': attribute type 4 has an invalid length. [ 396.950868][ T5866] Bluetooth: hci4: link tx timeout [ 396.957299][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 397.045569][ T5866] Bluetooth: hci4: link tx timeout [ 397.055583][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 397.452189][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2347'. [ 397.741358][T14618] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 397.786924][T14618] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2350'. [ 397.925603][T14619] netlink: 'syz.0.2351': attribute type 10 has an invalid length. [ 398.013230][T14619] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 398.103773][T14628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2352'. [ 398.381551][T14632] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2354'. [ 398.479044][T14644] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2354'. [ 398.590432][T14645] team0: Device gtp1 is of different type [ 398.782812][T14651] netlink: 'syz.0.2359': attribute type 83 has an invalid length. [ 398.949066][T14656] openvswitch: netlink: Key type 16144 is out of range max 32 [ 399.003294][T14657] openvswitch: netlink: Key type 16144 is out of range max 32 [ 399.046299][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 399.181484][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 400.883311][T14708] veth0_to_team: entered promiscuous mode [ 400.932607][T14708] veth0_to_team: entered allmulticast mode [ 401.307763][T14717] __nla_validate_parse: 8 callbacks suppressed [ 401.307784][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2381'. [ 401.810939][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'. [ 401.851790][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 401.923683][T14721] bridge0: port 3(dummy0) entered disabled state [ 402.149794][T14721] dummy0 (unregistering): left allmulticast mode [ 402.185429][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 402.198046][T14721] dummy0 (unregistering): left promiscuous mode [ 402.204423][T14721] bridge0: port 3(dummy0) entered disabled state [ 402.265596][T14734] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 402.456249][T14734] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.656481][T14738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.693553][T14738] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 402.749983][T14738] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 402.780947][T14751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2390'. [ 402.816112][T14751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 402.876840][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 403.039466][T14741] gretap4: entered promiscuous mode [ 403.083808][T14741] bond7: (slave gretap4): making interface the new active one [ 403.110519][T14741] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 403.131900][T14734] macvlan0: entered promiscuous mode [ 403.137480][T14734] macvlan0: entered allmulticast mode [ 403.147869][T14734] bond7: entered promiscuous mode [ 403.154050][T14734] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 403.170031][T14734] bond7: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 403.206657][T14734] bond7: left promiscuous mode [ 403.610141][T14768] netlink: 'syz.4.2392': attribute type 1 has an invalid length. [ 403.985187][T14774] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 404.039268][T14780] IPVS: set_ctl: invalid protocol: 41 172.20.20.34:20004 [ 404.471734][T14790] netlink: 'syz.4.2395': attribute type 58 has an invalid length. [ 404.484534][T14790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2395'. [ 404.935055][T14799] netlink: 'syz.3.2398': attribute type 1 has an invalid length. [ 404.985163][T14796] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2399'. [ 405.113801][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2399'. [ 405.175882][T14796] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 405.234921][T14799] 8021q: adding VLAN 0 to HW filter on device bond8 [ 405.383883][T14792] vlan0: entered allmulticast mode [ 405.429204][T14792] veth1: entered allmulticast mode [ 405.506230][T14792] bond8: (slave vlan0): making interface the new active one [ 405.556054][T14792] bond8: (slave vlan0): Enslaving as an active interface with an up link [ 405.655651][T14817] tipc: Enabled bearer , priority 0 [ 405.871400][T14817] tipc: Resetting bearer [ 406.674726][T14843] __nla_validate_parse: 2 callbacks suppressed [ 406.674748][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2412'. [ 406.718726][T11349] tipc: Node number set to 1977941863 [ 407.234216][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2415'. [ 407.644770][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2418'. [ 407.736898][T11816] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.527330][T14890] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2426'. [ 408.759145][T14899] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 409.573504][T14919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2431'. [ 409.925085][T14929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2436'. [ 409.976099][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2438'. [ 410.160415][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'. [ 410.233397][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2439'. [ 410.985760][T14967] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2444'. [ 411.691789][T14982] __nla_validate_parse: 3 callbacks suppressed [ 411.691811][T14982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2448'. [ 411.741064][T14993] team_slave_0: left promiscuous mode [ 411.754939][T14993] team_slave_1: left promiscuous mode [ 411.791482][T14982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2448'. [ 412.623750][T14993] team0 (unregistering): Port device team_slave_0 removed [ 412.698946][T14993] team0 (unregistering): Port device team_slave_1 removed [ 413.156846][T15013] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 413.206125][T15013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2455'. [ 413.257742][T15013] dummy0: entered promiscuous mode [ 413.282071][T15013] bridge0: port 1(dummy0) entered blocking state [ 413.320897][T15013] bridge0: port 1(dummy0) entered disabled state [ 413.364449][T15013] dummy0: entered allmulticast mode [ 413.423258][T15013] dummy0: left allmulticast mode [ 413.438192][T15013] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 413.461838][T15024] netlink: 'syz.2.2458': attribute type 8 has an invalid length. [ 414.011816][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 414.320476][T15043] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2462'. [ 414.385891][T15043] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2462'. [ 415.143399][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 415.846448][T15087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2472'. [ 416.085102][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 416.121165][T15094] openvswitch: netlink: nsh attr 8083 is out of range max 3 [ 416.159599][T15096] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 416.167391][T15096] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2474'. [ 416.181368][T15094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.216632][T15101] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 416.267541][T15102] openvswitch: netlink: IPv4 tunnel dst address is zero [ 416.278900][T15096] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 416.311795][T15102] delete_channel: no stack [ 416.470760][T15096] bond10 (unregistering): Released all slaves [ 417.032764][T15122] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 417.326494][T15130] __nla_validate_parse: 1 callbacks suppressed [ 417.326519][T15130] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2485'. [ 417.508995][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 417.711110][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2485'. [ 418.006183][T15122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2483'. [ 418.023893][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 418.136434][T15127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2484'. [ 418.203003][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 418.241527][T15127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2484'. [ 418.399801][T15143] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2489'. [ 418.562633][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 419.634787][T15163] netlink: 'syz.1.2493': attribute type 10 has an invalid length. [ 419.871342][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2493'. [ 419.982250][T11846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.013592][T11846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.500065][T15189] netlink: 'syz.4.2498': attribute type 10 has an invalid length. [ 420.801479][T15181] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 420.916114][T15190] netlink: 'syz.0.2499': attribute type 12 has an invalid length. [ 420.953044][T15189] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 421.175042][T15200] netlink: 'syz.3.2502': attribute type 8 has an invalid length. [ 421.209392][T15191] bond0: (slave batadv0): Releasing backup interface [ 421.258228][T15191] batadv0: left promiscuous mode [ 421.413118][T15191] bridge_slave_0: left allmulticast mode [ 421.451648][T15191] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.509456][T15191] bond0: (slave bridge_slave_1): Releasing backup interface [ 421.523469][T15191] bridge_slave_1: left promiscuous mode [ 421.564536][T15191] bond0: (slave bond_slave_0): Releasing backup interface [ 421.652664][T15191] bond_slave_0: left promiscuous mode [ 421.778767][T15191] team0: Port device team_slave_0 removed [ 421.837054][T15191] team0: Port device team_slave_1 removed [ 421.876545][T15191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.886162][T15191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.901590][T15191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.912497][T15191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.951520][T15191] bond0: (slave wlan1): Releasing backup interface [ 421.965669][T15191] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 421.992629][T15191] bond1: (slave gretap1): Releasing active interface [ 422.092078][T15191] bond2: (slave veth5): Releasing backup interface [ 422.175965][T15191] tipc: Resetting bearer [ 422.252204][T15191] bond6: (slave ip6gretap1): Releasing backup interface [ 422.545051][T15219] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 422.653912][T15227] netlink: 'syz.2.2506': attribute type 21 has an invalid length. [ 422.671662][T15225] __nla_validate_parse: 3 callbacks suppressed [ 422.671682][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2508'. [ 422.721821][T15227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 423.037887][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 423.056193][T15235] netlink: 'syz.0.2512': attribute type 21 has an invalid length. [ 423.086253][T15235] netlink: 'syz.0.2512': attribute type 13 has an invalid length. [ 423.382474][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 423.412615][T15244] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2515'. [ 423.476508][T15248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 424.181605][T15272] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2523'. [ 424.702542][T15288] tipc: Enabled bearer , priority 0 [ 424.725599][T15288] syzkaller0: entered promiscuous mode [ 424.764703][T15288] syzkaller0: entered allmulticast mode [ 424.792201][T15288] tipc: Resetting bearer [ 424.823267][T15294] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1440) ! [ 424.832203][T15296] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 425.266537][ T6163] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 425.324595][T15294] tipc: Resetting bearer [ 425.358008][T15311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.384190][T15288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.480309][T15313] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 425.512802][T15313] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2533'. [ 425.537846][T15313] nbd: must specify a device to reconfigure [ 425.773786][T15330] netlink: 'syz.4.2537': attribute type 13 has an invalid length. [ 425.782995][T15330] netlink: 'syz.4.2537': attribute type 58 has an invalid length. [ 425.803004][T15331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.866228][T15330] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2537'. [ 426.154596][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 426.344071][T15342] sctp: [Deprecated]: syz.0.2538 (pid 15342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.344071][T15342] Use struct sctp_sack_info instead [ 426.436084][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 427.970921][T15394] __nla_validate_parse: 3 callbacks suppressed [ 427.970941][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2556'. [ 428.058762][T15388] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2553'. [ 428.538897][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2558'. [ 428.583893][T15405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2558'. [ 429.016136][T15427] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2559'. [ 429.461205][T15438] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2566'. [ 429.526296][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2567'. [ 429.858328][T15455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2573'. [ 429.883242][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2572'. [ 429.933104][T15458] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 429.952501][T15456] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 429.978315][T15458] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2574'. [ 429.990134][T15456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.005896][T15458] netlink: 'syz.2.2574': attribute type 1 has an invalid length. [ 430.028729][T15458] netlink: 'syz.2.2574': attribute type 2 has an invalid length. [ 432.369304][T15523] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 432.509304][T15523] batadv0: entered promiscuous mode [ 432.515039][T15523] batadv0: entered allmulticast mode [ 432.539876][T15523] bridge0: port 2(batadv0) entered blocking state [ 432.705187][T15523] bridge0: port 2(batadv0) entered disabled state [ 432.831172][T15523] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 432.894772][T15527] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 433.000799][T15527] bond4: (slave vcan0): Error -95 calling set_mac_address [ 434.750371][T15577] __nla_validate_parse: 7 callbacks suppressed [ 434.750393][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 434.868213][T15582] tipc: Enabled bearer , priority 0 [ 434.926361][T15579] syzkaller0: entered promiscuous mode [ 435.004710][T15579] syzkaller0: entered allmulticast mode [ 435.206523][T15579] tipc: Resetting bearer [ 435.334919][T15579] tipc: Disabling bearer [ 435.458351][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 435.507869][T15596] netlink: 'syz.4.2614': attribute type 2 has an invalid length. [ 436.649783][T15624] tipc: Enabling of bearer rejected, already enabled [ 436.700921][T15626] tipc: Enabling of bearer rejected, already enabled [ 436.737364][T15625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2620'. [ 436.917124][T15630] nbd: must specify a size in bytes for the device [ 438.346399][T15678] smc: net device bond0 applied user defined pnetid SYZ2 [ 438.534065][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 438.619109][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2638'. [ 439.034545][T15708] netlink: 'syz.3.2642': attribute type 5 has an invalid length. [ 439.154967][T15711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.521672][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.560644][T15728] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 439.583288][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.633080][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.684472][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.728812][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.766196][T15723] __nla_validate_parse: 14 callbacks suppressed [ 439.766217][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.813930][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.879139][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.924267][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.982444][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 440.026138][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 440.065767][T15735] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2651'. [ 440.072139][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 440.096228][T15735] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 440.129206][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 440.223611][T15723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2647'. [ 440.381825][T15743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.529876][T15750] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 441.334453][T15771] lo speed is unknown, defaulting to 1000 [ 441.390079][T15771] lo speed is unknown, defaulting to 1000 [ 441.487270][T15776] syzkaller1: entered promiscuous mode [ 441.529585][T15776] syzkaller1: entered allmulticast mode [ 441.863130][T15784] netlink: 'syz.4.2665': attribute type 4 has an invalid length. [ 441.888807][T15784] tipc: Enabled bearer , priority 31 [ 442.304761][T15790] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 442.348909][T15790] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 442.369788][T15790] gretap0: entered promiscuous mode [ 442.377489][T15790] gretap0: entered allmulticast mode [ 442.811431][T15804] openvswitch: netlink: Key 6 has unexpected len 18 expected 2 [ 443.001703][T15813] xt_socket: unknown flags 0xd0 [ 443.244812][T15819] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 443.647066][T15819] bond5: entered promiscuous mode [ 443.665665][T15819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.710345][T15771] hsr0 speed is unknown, defaulting to 1000 [ 443.945596][T15823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.993737][T15823] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 444.014147][T15823] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 444.037530][T15823] bond5: (slave wireguard0): making interface the new active one [ 444.047015][T15823] wireguard0: entered promiscuous mode [ 444.054791][T15823] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 444.075221][T15773] lo speed is unknown, defaulting to 1000 [ 444.176888][T15773] lo speed is unknown, defaulting to 1000 [ 445.228564][T15868] smc: net device erspan0 applied user defined pnetid SYZ0 [ 445.636915][T15884] netlink: 'syz.4.2687': attribute type 10 has an invalid length. [ 445.659052][T15884] __nla_validate_parse: 10 callbacks suppressed [ 445.659074][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2687'. [ 446.129776][T15884] team0: Port device geneve0 added [ 446.149384][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2690'. [ 446.189172][T15773] hsr0 speed is unknown, defaulting to 1000 [ 446.813592][T15901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.383133][T15917] veth1_macvtap: left promiscuous mode [ 447.401842][T15917] macsec0: entered promiscuous mode [ 447.457596][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 447.774086][ T43] IPVS: starting estimator thread 0... [ 447.897972][T15931] IPVS: using max 23 ests per chain, 55200 per kthread [ 448.239014][T15939] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2705'. [ 448.303563][T15939] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2705'. [ 448.360703][T15939] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2705'. [ 449.044006][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 449.068516][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2710'. [ 449.092490][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 449.116775][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2710'. [ 450.520849][T15990] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 450.598604][T15992] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 450.859339][T15998] __nla_validate_parse: 2 callbacks suppressed [ 450.859360][T15998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2720'. [ 451.327425][T16015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2728'. [ 451.362218][T16013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2729'. [ 451.546432][T16024] netlink: 'syz.2.2731': attribute type 10 has an invalid length. [ 452.807084][ T30] audit: type=1107 audit(1754872405.487:2): pid=16069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 452.820344][T16072] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2743'. [ 453.912499][T16093] tipc: Resetting bearer [ 453.953693][T16097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.440914][T16113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2753'. [ 454.476434][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 454.523132][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 454.762649][T16127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.940053][T16136] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 455.262180][T16136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.395021][T16178] team0: No ports can be present during mode change [ 456.806638][T16189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2772'. [ 456.951694][T16190] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2774'. [ 457.047094][T16190] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 457.129066][T16197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2774'. [ 458.124971][T16218] dvmrp0: entered allmulticast mode [ 458.302051][T16221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2783'. [ 458.436020][T16226] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2786'. [ 458.452535][T16227] netlink: 'syz.0.2783': attribute type 4 has an invalid length. [ 458.634253][T16235] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2788'. [ 458.790698][T16239] netlink: 'syz.2.2790': attribute type 10 has an invalid length. [ 459.063979][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 459.521101][ T6166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.876518][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2803'. [ 459.924137][T16268] 8021q: adding VLAN 0 to HW filter on device bond10 [ 459.952766][T16269] IPVS: set_ctl: invalid protocol: 115 172.30.1.4:20003 [ 459.973128][T16268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2803'. [ 460.491423][T16288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.124380][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'. [ 462.042256][T16328] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2818'. [ 462.110152][T16329] netlink: 'syz.4.2819': attribute type 11 has an invalid length. [ 462.236031][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 462.765806][T16350] team_slave_0: left promiscuous mode [ 462.807406][T16350] team_slave_0: left allmulticast mode [ 462.852841][T16350] team_slave_0: entered allmulticast mode [ 462.930854][T16352] ip6gre1: entered allmulticast mode [ 463.211217][T16361] netlink: 'syz.1.2828': attribute type 10 has an invalid length. [ 463.321494][T16369] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2831'. [ 463.726257][T16379] ip6gre2: entered allmulticast mode [ 463.906017][T16389] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 463.991464][T16388] dvmrp1: left allmulticast mode [ 464.028836][T16388] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 464.040883][T16388] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 464.050488][T16388] CPU: 1 UID: 0 PID: 16388 Comm: syz.1.2836 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 464.062271][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.072664][T16388] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 464.078438][T16388] Code: e9 16 bc f7 c6 05 08 8e 89 05 01 48 c7 c7 00 90 9e 8c be 97 05 00 00 48 c7 c2 80 90 9e 8c e8 1a f1 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 54 81 1f f8 4d 8b 2c 24 4d 39 f5 [ 464.098089][T16388] RSP: 0018:ffffc9001cc275f8 EFLAGS: 00010206 [ 464.104204][T16388] RAX: ffffffff8a03948e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 464.112379][T16388] RDX: ffffc9000b799000 RSI: 0000000000002192 RDI: 0000000000002193 [ 464.120376][T16388] RBP: ffff88804dfb6820 R08: ffffffff8f5348a7 R09: 1ffffffff1ea6914 [ 464.128390][T16388] R10: dffffc0000000000 R11: fffffbfff1ea6915 R12: 00000000ffff0d60 [ 464.136398][T16388] R13: dffffc0000000000 R14: ffff888021f01800 R15: 1ffff11009bf6d04 [ 464.144396][T16388] FS: 00007faedf74a6c0(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 464.153347][T16388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.160056][T16388] CR2: 00007f3ffdcaf000 CR3: 0000000031d50000 CR4: 00000000003526f0 [ 464.168283][T16388] Call Trace: [ 464.171682][T16388] [ 464.174751][T16388] inetdev_event+0x2a7/0x15b0 [ 464.179558][T16388] ? __pfx_inetdev_event+0x10/0x10 [ 464.184722][T16388] notifier_call_chain+0x1b6/0x3e0 [ 464.189868][T16388] netif_close_many+0x29c/0x410 [ 464.194751][T16388] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 464.200167][T16388] ? __pfx_netif_close_many+0x10/0x10 [ 464.205569][T16388] ? do_ip_setsockopt+0xf11/0x2d00 [ 464.210800][T16388] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 464.216325][T16388] ? do_syscall_64+0xfa/0x3b0 [ 464.221051][T16388] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 464.227427][T16388] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 464.234230][T16388] ? __pfx_vif_delete+0x10/0x10 [ 464.239129][T16388] mroute_clean_tables+0x3a4/0xaa0 [ 464.244316][T16388] ? __pfx_mroute_clean_tables+0x10/0x10 [ 464.250261][T16388] ? _copy_from_user+0x94/0xb0 [ 464.255060][T16388] ip_mroute_setsockopt+0xaa3/0xf60 [ 464.260407][T16388] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 464.266183][T16388] do_ip_setsockopt+0xf11/0x2d00 [ 464.271154][T16388] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 464.276557][T16388] ? aa_sk_perm+0x81e/0x950 [ 464.281628][T16388] ? __pfx_aa_sk_perm+0x10/0x10 [ 464.286521][T16388] ? __fget_files+0x2a/0x420 [ 464.291160][T16388] ? aa_sock_opt_perm+0xff/0x1b0 [ 464.296177][T16388] ip_setsockopt+0x66/0x110 [ 464.300802][T16388] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 464.306744][T16388] do_sock_setsockopt+0x17c/0x1b0 [ 464.311826][T16388] __x64_sys_setsockopt+0x13f/0x1b0 [ 464.317075][T16388] do_syscall_64+0xfa/0x3b0 [ 464.321633][T16388] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.327062][T16388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.333170][T16388] ? clear_bhb_loop+0x60/0xb0 [ 464.337981][T16388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.344032][T16388] RIP: 0033:0x7faede98ebe9 [ 464.348483][T16388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.368134][T16388] RSP: 002b:00007faedf74a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 464.376588][T16388] RAX: ffffffffffffffda RBX: 00007faedebb5fa0 RCX: 00007faede98ebe9 [ 464.384599][T16388] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000009 [ 464.392606][T16388] RBP: 00007faedea11e19 R08: 0000000000000004 R09: 0000000000000000 [ 464.400722][T16388] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 464.408815][T16388] R13: 00007faedebb6038 R14: 00007faedebb5fa0 R15: 00007fffe7159e08 [ 464.417013][T16388] [ 464.420069][T16388] Modules linked in: [ 464.426577][T16388] ---[ end trace 0000000000000000 ]--- [ 464.642646][T16388] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 464.672607][T16388] Code: e9 16 bc f7 c6 05 08 8e 89 05 01 48 c7 c7 00 90 9e 8c be 97 05 00 00 48 c7 c2 80 90 9e 8c e8 1a f1 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 54 81 1f f8 4d 8b 2c 24 4d 39 f5 [ 464.701308][T16388] RSP: 0018:ffffc9001cc275f8 EFLAGS: 00010206 [ 464.707542][T16388] RAX: ffffffff8a03948e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 464.830943][T16388] RDX: ffffc9000b799000 RSI: 0000000000002192 RDI: 0000000000002193 [ 464.840668][T16388] RBP: ffff88804dfb6820 R08: ffffffff8f5348a7 R09: 1ffffffff1ea6914 [ 464.850058][T16388] R10: dffffc0000000000 R11: fffffbfff1ea6915 R12: 00000000ffff0d60 [ 464.858471][T16388] R13: dffffc0000000000 R14: ffff888021f01800 R15: 1ffff11009bf6d04 [ 464.866863][T16388] FS: 00007faedf74a6c0(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 464.879041][T16388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.885940][T16388] CR2: 000000110c34a5b7 CR3: 0000000031d50000 CR4: 00000000003526f0 [ 464.904019][T16388] Kernel panic - not syncing: Fatal exception [ 464.910523][T16388] Kernel Offset: disabled [ 464.914874][T16388] Rebooting in 86400 seconds..