last executing test programs: 5.935077293s ago: executing program 3 (id=2913): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000015860000000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000240)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000002c0)=0x7, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)='Ir;', 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_int(r8, 0x1, 0x10, 0x0, &(0x7f0000000000)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0xb, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r10, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "db53e0", 0x0, 0x33, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2}}}}, 0x0) 5.736970553s ago: executing program 3 (id=2918): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) splice(r3, 0x0, r0, 0x0, 0x7ffff040, 0x1200000000000000) 5.664398429s ago: executing program 3 (id=2920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0x0, 0xf, 0x0, 0x1}, 0x20) close(r1) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800200600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80fe0877010034ec220000"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x3e, 0x0, "38b8bfdfca0842d17e7cc0257c24662781c995f0de5cfb10343de5fdb7e5ce6ef229e196c104e166f0db411b4fd518cbfef221ead1afb1bea6b48a51e9ec873367777b6177e9edfc2e0fe16f3c44bf41"}, 0xd8) close(r5) r7 = socket$unix(0x1, 0x1, 0x0) r8 = epoll_create1(0x0) r9 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0x8800000d}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000002c0)={0x8002015}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x10080000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0x8, 0xb}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048065}, 0x4008000) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c815e600", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r7}) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="020003000000400000000100000011000c000e00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'gre0\x00', @multicast}) 4.961799463s ago: executing program 3 (id=2930): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket(0xa, 0x3, 0xffffffff) write(r3, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FITHAW(r5, 0xc0045878) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 3.221883785s ago: executing program 3 (id=2934): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x49}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x1ff) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 3.036053775s ago: executing program 3 (id=2939): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x2, 0x5, @l2={'eth', 0x3a, 'team_slave_0\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1d}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = socket(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0xb, 0x0, 0x7, 0x2}, 0x10}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) 2.992363327s ago: executing program 2 (id=2941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000001c0)={0x0, 0x4a, 0x1, [0x6, 0x2, 0x0, 0x0, 0x6], [0x2, 0x8, 0x800, 0x1, 0x8, 0x4, 0x6, 0x6, 0x3, 0x62, 0xffffffffffff7c30, 0x2, 0x3, 0x5, 0x5, 0x5, 0x8, 0x3, 0x6, 0x100000000, 0x401, 0x3, 0x0, 0x753c9ffa, 0x600000000000, 0x4, 0x8, 0x8, 0xfffffffffffffffb, 0x8, 0x8, 0x9, 0x5, 0x8000, 0x3, 0x8, 0x10000, 0xe838, 0xfffffffffffffffc, 0x910, 0x6, 0x3, 0x2, 0x8, 0x7, 0x8, 0x10000000000000, 0x8, 0x1, 0x8, 0x3, 0x0, 0x1, 0x4, 0x5, 0x1c, 0xffffffff, 0xc890, 0x240, 0x40, 0x0, 0x6, 0x6, 0x9, 0x1, 0x9, 0xffffffff, 0x5, 0x0, 0x5, 0x9, 0xc, 0x399, 0x7ff, 0x6, 0xf254, 0x9, 0x3, 0x9, 0x6, 0x100000001, 0x4, 0x7fffffff, 0x4, 0x7, 0x86d7, 0x2, 0x8, 0x9, 0x100000000, 0x4, 0x5a4, 0x101, 0xffffffff, 0xffff, 0x6, 0x7b22, 0x100000000, 0x8, 0xffffffffffff6960, 0xc548, 0xa4, 0x7ff, 0x7f, 0x4, 0x6, 0x2, 0x0, 0x5, 0x8cd7, 0xfffffffffffffffb, 0x6, 0x1, 0x9, 0x80, 0x0, 0xfffffffffffffffc, 0x8000, 0x8e7, 0x100000001, 0x3]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000600)={0x0, 0x4, 0x0, [0x5, 0xafac, 0x7f, 0x3, 0x3], [0xcc, 0x2c, 0x8096, 0x8, 0x7fff, 0xd8, 0xffffffff, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffb8, 0x10001, 0x6, 0x9e, 0xdd, 0x80000000, 0x0, 0x1, 0x7, 0x811f, 0x1, 0xfffffffffffffffa, 0xd, 0x3, 0x0, 0x80000000, 0x1, 0xfffffffffffffffd, 0xfb9b, 0xfffffffffffffff7, 0xd646, 0xf459, 0x2, 0xc2a, 0xfffffffffffffffd, 0x6, 0x7, 0x9, 0x8000000000000000, 0x0, 0x4, 0x7, 0x9, 0x9, 0x800, 0x1, 0x8001, 0x35, 0x40b461cb, 0xf2b6, 0xffffffff, 0xfffffffffffffff7, 0x4, 0x9, 0x2, 0xa, 0x7, 0x1, 0x6, 0x9, 0x27, 0xffffffffffffffff, 0x3, 0xa2, 0x3, 0x4, 0x82e5, 0xee8a, 0x9, 0xfffffffffffffffa, 0x8, 0x1ff, 0x6, 0xd, 0x5, 0x1000, 0x9, 0x9, 0x1ff, 0x0, 0x8, 0x9, 0x9, 0x2, 0xff, 0x200, 0x88a, 0xfffffffffffffff9, 0x9a8, 0xffffffffffffffff, 0x800, 0x891c, 0x5, 0x6, 0x8, 0x5, 0x0, 0x0, 0x1, 0xe, 0x4, 0xfffffffffffffffc, 0xff, 0x2, 0x8, 0x392f924, 0x3, 0x7ee, 0x7fffffff, 0xfffffffffffffff7, 0x2000000000000, 0x6, 0x1, 0x5, 0x5, 0xb, 0x0, 0x1, 0x8, 0x9, 0x80000000]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a40)={0x0, 0x0, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000010c0)={0x8, 0x4, {0x7fff, @usage=0xa, r1, 0x1, 0x76, 0x80000000, 0x8, 0x8000000000000001, 0x0, @usage=0xff, 0x0, 0x5ef, [0x8, 0x7, 0x2, 0x3, 0x1, 0x2]}, {0x4c768fae, @struct={0x4, 0x9}, r2, 0x5, 0x8, 0xc, 0xf59, 0x7, 0x40, @struct={0x200, 0xa}, 0x5, 0x2, [0x3, 0x1, 0x6, 0x954, 0x2, 0x4]}, {0x0, @struct={0x5, 0x8}, r3, 0x8000000000000001, 0x100000001, 0x7, 0x200, 0xe53, 0x440, @struct={0x3, 0xab0}, 0x4, 0x1, [0x5, 0xfffffffffffffffb, 0x1669, 0xfffffffffffffe00, 0x40000000000, 0xffff]}, {0xffffffff00000000, 0xfffffffffffff7ed, 0x80000000}}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x5}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x11, 0xa, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendto$llc(r0, &(0x7f0000001540)="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", 0x1000, 0x4000014, &(0x7f0000002540)={0x1a, 0x30a, 0x1, 0x5, 0x5, 0xde, @remote}, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000001500)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f00)={0x14c, r6, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x52}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x10a, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x6}}, @preq={0x82, 0x30, {{0x0, 0x0, 0x1}, 0x2, 0x2, 0x5, @broadcast, 0x8, @void, 0x7, 0x100, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{}, @device_b, 0x3}]}}, @rann={0x7e, 0x15, {{0x0, 0x7c}, 0xc, 0x2, @device_b, 0x3ff, 0xf1dde6c, 0x8}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x4, 0x0, {0x22, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x200, 0x4}}, @mesh_chsw={0x76, 0x6, {0xb, 0x0, 0x33, 0x100}}, @fast_bss_trans={0x37, 0x7b, {0x4, 0x2, "6b5c307209130eacf0b4ff4de5c8db0a", "5cf8781c89cd5878a54785176dd3f3c4ec2ac27b052d4d4fadb47c3de45225ef", "bcb5befa427a2480a0a9de9b7faed210058975ad7f5829fb95452407c6c6e5a1", [{0x1, 0x2, "50c5"}, {0x4, 0x23, "d755f5b9d95f172479bb247c910b325499e3c14636c6494925bd63e351cc8111886ebb"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0x9, "21066345462b128206"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c40), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r9, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r10, 0x1, 0x70bd29, 0x10000000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2.920019722s ago: executing program 1 (id=2944): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3}, 0x4) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) (async) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r2, 0x34de5000) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'geneve0\x00', @random="17b04007d469"}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r2, @ANYBLOB="0800000000000000dbea8ac770e996000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000280)="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", 0x1be}], 0x1) 2.726308273s ago: executing program 2 (id=2946): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x40004}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) 2.587147825s ago: executing program 1 (id=2949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r2, &(0x7f00000066c0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x20000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x2}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x144c, 0x30, 0x1, 0x0, 0x0, {}, [{0x1438, 0x1, [@m_police={0x1434, 0x1d, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x26, 0xe, 0x8000, 0x101, 0x550, 0x4, 0x1, 0x100, 0x56f986ee, 0x7, 0x10000, 0xabd, 0x52, 0x0, 0x5, 0xffffffff, 0x7, 0x3, 0x3f19, 0x20001, 0x9, 0x7, 0x101, 0x2, 0xc00, 0xff, 0x8, 0x4, 0x5, 0x8000, 0x4, 0x100, 0x5d5fee25, 0x40, 0x1ff, 0x6, 0x6, 0x0, 0x5, 0x300000, 0x9, 0xfffffffa, 0x3, 0xa, 0x3e, 0x9, 0x800, 0x6, 0x9, 0x0, 0x9, 0xe, 0x7fff, 0x72, 0x1ff, 0x62800, 0x5, 0x10001, 0xe, 0x8000, 0x1, 0x5, 0x7fffffff, 0x4, 0x6, 0x7fffffff, 0x20, 0x57ca39cf, 0x3, 0x80000001, 0xfffffff7, 0x10001, 0xf18, 0x7a1, 0x3, 0x4, 0x6, 0xfff, 0x1, 0x2, 0xde5, 0x7, 0x1, 0x2, 0x7, 0x5, 0x4f, 0x6, 0x729f4cbb, 0x7, 0x0, 0x25cf, 0x6, 0x8, 0x5, 0xb, 0x30, 0x9, 0x7fffffff, 0xfffffff1, 0x7, 0x80000000, 0x0, 0xf0, 0x8, 0x6, 0x8, 0x0, 0x2, 0xf27c, 0x1000, 0x4, 0xffff, 0xba, 0x400, 0x6, 0xe, 0x5cc8, 0x9, 0x7, 0xbd68, 0x19, 0x8, 0x6, 0x3, 0x9, 0xfff, 0x1, 0x200, 0x453, 0x4, 0x344b2a32, 0x5, 0x1, 0x10001, 0x2, 0x8, 0xb46, 0x100, 0x5, 0x1, 0xb, 0x31b2, 0x5, 0x2, 0x68, 0x9, 0x1000, 0x14, 0x1, 0xaa6, 0x3, 0x101, 0xe, 0xb76d, 0x3, 0x1b3, 0x0, 0x1, 0x64cc, 0x69b, 0x2ca3, 0x5, 0x54, 0x9, 0x5, 0x7f, 0xa6, 0x100, 0x9c, 0xd7, 0x2, 0x5, 0x1, 0x8, 0xdf0, 0xc, 0xffffffff, 0x6, 0x9, 0x1, 0x100, 0xf, 0xc, 0x2, 0x80, 0xfffffffb, 0xffff34df, 0x3, 0x9, 0x9, 0x6, 0x85, 0x10000, 0x0, 0x4, 0x0, 0x401, 0xf, 0x1a, 0x4e68, 0x800, 0x66, 0x4, 0x20000004, 0x9, 0x0, 0x5, 0x81fb, 0x3, 0x46, 0x2, 0xe, 0x0, 0x80000001, 0x800, 0xdf73, 0xcb3, 0x9, 0x0, 0x6, 0x9, 0x31, 0x10, 0xe, 0x9, 0x5, 0xff3, 0x1, 0x4, 0x7b1a, 0x3, 0xc, 0x4, 0x89, 0x58, 0x5, 0x0, 0x5, 0x2, 0x7fffffff, 0x6, 0x6, 0x0, 0x4c4, 0x7, 0x400, 0x5, 0x7f, 0x1, 0x16, 0x5, 0x9, 0x8000, 0x4]}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x144c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000010000104fcffffff800008000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000010000104fcffffff800008000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.255781348s ago: executing program 1 (id=2952): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x0, 0x400}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r10, 0x25, 0x0, @void}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010028bd71000000000008000040ef000000", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1}) r15 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r15, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) 2.088171499s ago: executing program 2 (id=2954): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r1, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x800000000ff, 0x0) 1.573690777s ago: executing program 1 (id=2959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp0\x00'}) 1.519783641s ago: executing program 0 (id=2960): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x61400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4805) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x26, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @generic={0x19, 0x7, 0x9, 0xe, 0xfffffffc}, @ldst={0x1, 0x0, 0x2, 0xa, 0x7, 0xffffffffffffffff, 0xfffffffffffffff0}, @generic={0xbb, 0xc, 0x6, 0xffff, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @ldst={0x2, 0x3, 0x4, 0x8, 0xfcbb048073425716, 0x8, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0xff, 0xf3, &(0x7f00000002c0)=""/243, 0x41100, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x7, 0x1}, 0x10, 0x1c040, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x1, 0x9, 0x1}], 0x10, 0x44c6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r2, 0x4) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000005c0)={'ipvlan0\x00', 0x1}) (async) tee(r1, 0xffffffffffffffff, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'dvmrp0\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4400}, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000780), &(0x7f00000007c0)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xfd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x71}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x2c}}, 0x4004004) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x84, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa48d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x5c897476d04fbed5}, 0x1) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000d40)={'macvlan1\x00', 0xc, 0x6}) (async) r10 = openat$cgroup_pressure(r4, &(0x7f0000000e40)='cpu.pressure\x00', 0x2, 0x0) tee(r2, r10, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r9, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x1810) (async) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa8, 0x453, 0x800, 0x8, 0x25dfdbfe, "285b839ce2f723d7807d1cb832b46850558c8ff60a1280537ecb861efcaedc2c46e60a38e3feb27a4685b2f7afa4739e6d7cecc6b9bd2dca4445a6ad62a3fc5b1bd98116bd3ffe11f195f684040894dd1a33f47d02777936262d3ccda7ff31219c795d17cde1aefbd8fcc4dc5a0df93718cee9047b9e480bdcd289890a6f9548907ee200f5a3c54bc4ffa6a314ee400555f819056ddc", ["", "", "", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) r12 = epoll_create1(0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r12, 0x4008941a, &(0x7f0000001180)=0x2) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001500)={&(0x7f0000001240)={0x2c0, r9, 0x10, 0x7, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xd4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "79a16026e3133914ad0a0317dc78360c2eb738de520519a3b7de238fc4ca4c7f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ec40e14153c3b686d2ecf0f7fd703d80a7e2d93f486e2776bd29e982db3c4075"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ffc25eb81069cd14ef059ad4882983e84b12db9aa9012037e8e6cb9390149d3f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8d887879f0738095333aba1e2079f0436aae2b8e88ebb4e1f7c6b021f56b8bf7"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0x1b4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bd29b2d894af690da475e629646d319ddc7772378100ba574b652542c1d3edb6"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ce438aae5d2e1a7c74b39d31369daad2e17d02fdb3c05e2b6775cf1b7e785f40"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c0096e55818bd7ff05e31f20935759ef31e48005ba4fd4794cb16826b4821732"}, @NL802154_KEY_ATTR_ID={0xf0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8020000000}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x880}, 0x20044018) 1.340705233s ago: executing program 2 (id=2961): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x204, r0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd85f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3f66b714db10596ce376559f0b6cf3c496b509110288494684070b1f9aca3a9795b0"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x44014}, 0x80) (async) r1 = socket(0x1e, 0x4, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf4, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d50f9a2ab2bab3b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d4a44242bfe1b20e2f7266919ada2494ba76580b9584911f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4ddc5c57e5c5c30b6ba186f7687859e4"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c5a159d14e5633edcda1ef4094b725e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x23}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fc37873afabf7e71788a29b682718ac1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a9a5392c41ad80c1b4fac4478b284dc45210a29c9276e6ef6556c6162f93d543"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2753f1a02697ba79678dd74c2c2944bb"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6dc5eb3b90722c9c45917ec37af06e42bdb3c7e0d13f8deb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x547}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x15) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1402, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x2f, 0xfa, 0x0, 0xad6, 0x78, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x7, 0x8, 0x90e, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000700)={'gretap0\x00', r3, 0x40, 0x8000, 0x7, 0x7, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x66, 0x0, 0x4, 0x29, 0x0, @broadcast, @private=0xa010102, {[@ssrr={0x89, 0xb, 0x44, [@multicast1, @empty]}, @timestamp={0x44, 0xc, 0x5e, 0x0, 0xa, [0x0, 0xa87]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) sendto$inet(r1, &(0x7f00000007c0)="58db5d278f551e055ec4d91cf3cec68e3e14df938acf6c9aace5fe2ff957a34b6cbd61f8a137730fdfefdd4733", 0x2d, 0x4000040, &(0x7f0000000800)={0x2, 0x4e23, @empty}, 0x10) (async) r4 = epoll_create1(0x80000) r5 = accept4$inet(r1, &(0x7f0000000840)={0x2, 0x0, @multicast1}, &(0x7f0000000880)=0x10, 0x0) (async, rerun: 64) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000008c0)='batadv_slave_0\x00') (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) (async, rerun: 64) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000940)={0x0, 0x7, 0xe, 0xfffffff8, 0xfffffffc, 0x9}, &(0x7f0000000980)=0x14) (rerun: 64) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000009c0)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) (async) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000a80), &(0x7f0000000b00)=0x68) (async) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000b40)=0x1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x8c}}, 0x4004051) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r6, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x1c}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) getsockopt$MRT(r1, 0x0, 0x16f, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) (async) epoll_pwait(r1, &(0x7f0000000e80), 0x0, 0x1, &(0x7f0000000ec0)={[0x9]}, 0x8) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x40000) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000002080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/106, 0x6a, 0x1, &(0x7f0000001080)=""/4096, 0x1000}, &(0x7f00000020c0)=0x40) (rerun: 32) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x54, r6, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x21}, 0x4008051) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002280)={0x0}, &(0x7f00000022c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, 0x24, 0x2, 0x70bd2b, 0x25dfdbfe, {0xfe}, [@typed={0x8, 0x1f, 0x0, 0x0, @pid=r8}, @nested={0xc, 0xdf, 0x0, 0x1, [@nested={0x4, 0x46}, @nested={0x4, 0x117}]}]}, 0x28}}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)=@ipmr_getroute={0x1c, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfc, {0x80, 0x10, 0x0, 0x7, 0xfe, 0x0, 0xfe, 0x1, 0x300}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r10, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r2, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c051}, 0x15) 1.279704222s ago: executing program 0 (id=2962): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x15) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="14"], 0x18, 0x8800}}], 0x1, 0x40001) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000980)={@caif=@util={0x25, "22ecdc6829efab89b9bd2173f4e895db"}, {&(0x7f0000000880)=""/206, 0xce}, &(0x7f0000000640), 0x2}, 0xa0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10b, 0x10b, 0x4, [@const={0xfffffe21}, @union={0x4, 0x9, 0x0, 0x5, 0x0, 0x9, [{0xb, 0x2, 0xb59f}, {0x9, 0x3, 0x61a}, {0xb, 0x5, 0xb2}, {0xc, 0x1, 0x6}, {0x4, 0x5, 0x5}, {0x9, 0x0, 0x200}, {0xc, 0x3, 0x8001}, {0x1, 0x3, 0x24}, {0xa, 0x3, 0x1000}]}, @const={0x7, 0x0, 0x0, 0xa, 0x3}, @enum={0x7, 0x9, 0x0, 0x6, 0x4, [{0xb, 0x1ff}, {0x0, 0x9}, {0xa, 0xffffff84}, {0xe, 0x8}, {0x10, 0xff}, {0x6, 0x8}, {0xa, 0x80000000}, {0xa}, {0xf, 0x5}]}, @datasec={0x9, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x2, 0x4}], "87a121"}, @float={0x2, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30, 0x51]}}, &(0x7f00000002c0)=""/49, 0x128, 0x31, 0x1, 0x7, 0x10000}, 0x28) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(r8, &(0x7f00000001c0)={0x11, 0xf6, r9, 0x1, 0xb5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffe7b) sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r9}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r10}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, 0x19, r7, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1520d, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r10, r11], 0x0, 0x10, 0x5}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) sendto$inet(r12, &(0x7f00000000c0)="3b64e3738ad63a809186195d25167f46644316a9beed2ddfbbc3f2a208d1dafb6099afdfc04a51ec99f7a1d9082394d4ad675b0ef539733f501145df8c5b1170685d93042632ca31c6805797a85aac4b22beaaaa9409d032fbc392d8fe56c0efc5aa648e3ae42cc3e23236dfe824000b68b087f8975f3b41703124c3d2b0ce94c77538cef7", 0x85, 0x8104, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)={[{0x2d, 'io'}, {0x2d, 'pids'}, {0x2d, 'rdma'}, {0x2d, 'cpu'}]}, 0x15) 1.196570174s ago: executing program 4 (id=2963): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r1 = accept4(r0, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r3}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r4 = accept4$ax25(r0, &(0x7f0000000280)={{0x3, @null}, [@null, @default, @null, @netrom, @remote, @remote, @netrom, @null]}, &(0x7f0000000300)=0x48, 0x80800) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd0, r5, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000640)={@null, 0xb, 'ip6gre0\x00'}) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000740)={0x8}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000840)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000880)={r7, @in6={{0xa, 0x4e22, 0xeb, @mcast1, 0x2}}}, 0x84) recvmsg$can_bcm(r0, &(0x7f0000000b40)={&(0x7f0000000940)=@pppoe, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/117, 0x75}], 0x1, &(0x7f0000000a80)=""/189, 0xbd}, 0x140) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000b80)={0x1, 0x4b}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000bc0)={r7, @in6={{0xa, 0x4e24, 0xff, @local, 0x393}}, 0x6, 0x3}, &(0x7f0000000c80)=0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000cc0)={r8}, &(0x7f0000000d00)=0x8) getsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000000d40)=""/63, &(0x7f0000000d80)=0x3f) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000e00)={0x0, 0x1c, &(0x7f0000000dc0)=[@in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}]}, &(0x7f0000000e40)=0x10) r9 = socket(0x26, 0x3, 0x7c78) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001040)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e80)=""/185, 0xb9, 0x0, &(0x7f0000000f40)=""/195, 0xc3}, &(0x7f0000001080)=0x40) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000010c0)='veth0_macvtap\x00', 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000001100)={0x0, @remote, @multicast1}, &(0x7f0000001140)=0xc) syz_genetlink_get_family_id$mptcp(&(0x7f0000001180), 0xffffffffffffffff) 1.130296921s ago: executing program 1 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000080)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022004106000000000000000105000000000000fc"], 0x1c}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f0000000140)=0x304, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x98}}, 0x0) 1.101801783s ago: executing program 2 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="26e3df7e7851"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40c1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4193229792df76d5"], 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400d0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x53, 0x115, "782f727a16727d8bc1fcf3c17349fb6e7411a0d1173cdee68aa01f66aa277c92d642fd847d5e1046d5625f80bbd0d543bd572ef40cd17338540c6f01c2d5f8a1efe9e37672c2205cf8c0361ce449bc"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x5}, @NL80211_ATTR_PMK={0x19, 0xfe, "5f3632d0c25d5bca3e352b34fe97b27060eb8b0407"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0d, 0xfac0c]}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) 848.841401ms ago: executing program 2 (id=2966): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000340)=[{}, {&(0x7f0000000040)=""/162, 0xa2}, {&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000300)=""/7, 0x7}], 0x7, &(0x7f00000003c0)=""/127, 0x7f}, 0x7}, {{&(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/22, 0x16}], 0x1}, 0xfffffffc}], 0x2, 0xb524c8670425e27b, &(0x7f00000005c0)={0x77359400}) r1 = epoll_create(0x2) connect$rose(r0, &(0x7f0000000600)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa8, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000041) connect$rose(r0, &(0x7f00000007c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @null}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r3) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000840)={0x0, 0xc, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x4, 0x10, 0x4, @remote, @private2, 0x20, 0x80, 0x3, 0x9}}) connect(r2, &(0x7f0000000940)=@xdp={0x2c, 0x2, r4, 0x39}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f00000009c0)={@local, 0x67, r4}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000a00)=0x6, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xdc, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0xc8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x890}, 0x8000000) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20004804}, 0x8844) pread64(r2, &(0x7f0000000d00)=""/146, 0x92, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x74, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x804) syz_genetlink_get_family_id$nbd(&(0x7f0000000f00), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r7) sendmsg$NL802154_CMD_GET_SEC_KEY(r7, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) connect$rose(r0, &(0x7f0000001080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r10, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 843.873222ms ago: executing program 1 (id=2967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c0000002400000004f0ff00", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000080)='1', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r5, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, ' '}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 842.099114ms ago: executing program 4 (id=2968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}], 0x1}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 760.687947ms ago: executing program 0 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 664.476515ms ago: executing program 4 (id=2970): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000640), 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x24040051) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) 555.873482ms ago: executing program 0 (id=2971): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x4, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 316.889206ms ago: executing program 0 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="3f000000000000001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="3f000000000000001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008040) (async) 315.846118ms ago: executing program 4 (id=2973): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070003900028008000100", @ANYRES32, @ANYBLOB="0800918e50c700002fc372bd8044e54e79db0c05f8c02d26695b176ee804c16e6745def772b28b075b7af115588e129e50be01e8cfa5bd03ac290d5aca05ed"], 0x40}}, 0x0) 233.165094ms ago: executing program 0 (id=2974): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x20) (async) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102375, &(0x7f0000000040)=0x18fe7) 159.672817ms ago: executing program 4 (id=2975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x68, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x68}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r6}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x1d145aa8ea516c49}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x5, 0x0, @void}, 0x10) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0x1, 0x6, 0x8, 0x1, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000280)=""/124, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r4, r7, r9, r10, 0xffffffffffffffff, r0, r11], &(0x7f00000004c0)=[{0x5, 0x2, 0x8, 0x8}, {0x0, 0x5, 0x8, 0x1}, {0x5, 0x4, 0xe, 0x5}, {0x0, 0x3, 0x4, 0xb}, {0x7ff, 0x3, 0x7, 0xa}], 0x10, 0xfffffe00}, 0x94) 0s ago: executing program 4 (id=2976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x45}, 0x94) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'pimreg\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "a491f94a5cc91ccca02c540b79ab11966c76be337d4dd79072659ace3162eda8", "7dec984968a7745420fe75a78b9ea623f12a9a84eced4e52a57c10f5ea2852cf", "a9b2305022b90bbbddba45fa4ac3cbbee927b6291792cfaf79848ee4a51dc498", "e98c1454586017029418115b834e7eccf87304c1f21c55e790a730de055c7605", "c2e2d318e45d67d943ed7edb2a80e6a8a3310535454d7281cde4ef9aebabe837", "5d9993717e12d93a847e941d", 0xb, 0x3ff, 0x0, 0x1, 0x2}}) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="43d71e"], 0x18c0}}, 0x6) kernel console output (not intermixed with test programs): etlink: Flow actions may not be safe on all matching packets. [ 106.110150][ T6767] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 106.166447][ T6703] RDS/IB: syû: added [ 106.168021][ T6767] netlink: 'syz.3.245': attribute type 2 has an invalid length. [ 106.171032][ T6703] smc: adding ib device syû with port count 1 [ 106.189455][ T6703] smc: ib device syû port 1 has no pnetid [ 106.636246][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'. [ 106.659437][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 106.695982][ T6800] syzkaller0: entered promiscuous mode [ 106.701498][ T6800] syzkaller0: entered allmulticast mode [ 107.088766][ T5919] IPVS: starting estimator thread 0... [ 107.193170][ T6825] IPVS: using max 37 ests per chain, 88800 per kthread [ 107.205156][ T6827] erspan0: entered promiscuous mode [ 107.942860][ T6862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 108.024504][ T6867] xt_ecn: cannot match TCP bits for non-tcp packets [ 108.066587][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 108.332160][ T6879] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 108.355234][ T6884] Bluetooth: MGMT ver 1.23 [ 108.483220][ T6885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.493662][ T6885] bond2: (slave bond3): making interface the new active one [ 108.506260][ T6885] bond2: (slave bond3): Enslaving as an active interface with an up link [ 108.537481][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.271'. [ 108.582084][ T6885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.623959][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 108.811782][ T6905] tipc: Can't bind to reserved service type 0 [ 108.853721][ T6908] gre0: entered promiscuous mode [ 108.890182][ T6908] block nbd1: Unsupported socket: should be TCP or UNIX. [ 109.198019][ T6921] bond3: option resend_igmp: invalid value (32767) [ 109.205617][ T6921] bond3: option resend_igmp: allowed values 0 - 255 [ 109.223103][ T6921] bond3 (unregistering): Released all slaves [ 109.425038][ T6929] bridge0: entered allmulticast mode [ 109.626685][ T6933] tipc: Invalid UDP bearer configuration [ 109.626743][ T6933] tipc: Enabling of bearer rejected, failed to enable media [ 109.806400][ T30] audit: type=1107 audit(1768445679.482:2): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 110.061104][ T6950] netem: change failed [ 110.065962][ T6953] Cannot find add_set index 2 as target [ 110.156258][ T6964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.185309][ T6964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.383228][ T5837] Bluetooth: hci0: command tx timeout [ 110.410443][ T6976] __nla_validate_parse: 85 callbacks suppressed [ 110.410462][ T6976] netlink: 11 bytes leftover after parsing attributes in process `syz.4.301'. [ 110.493721][ T6987] netlink: 5 bytes leftover after parsing attributes in process `syz.4.301'. [ 110.543335][ T6987] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 110.604685][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 110.777246][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.305'. [ 110.798864][ T6994] bridge_slave_0: default FDB implementation only supports local addresses [ 110.893232][ T6999] bond1 (unregistering): Released all slaves [ 111.507061][ T7043] IPv6: addrconf: prefix option has invalid lifetime [ 111.525713][ T7045] openvswitch: netlink: Message has 2712 unknown bytes. [ 111.535012][ T7042] netlink: 'syz.0.317': attribute type 62 has an invalid length. [ 111.781888][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 111.798211][ T7060] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:21 [ 112.019186][ T7071] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 112.118950][ T7075] netlink: 'syz.3.328': attribute type 39 has an invalid length. [ 112.126996][ T7074] netlink: 'syz.3.328': attribute type 39 has an invalid length. [ 112.303369][ T5837] Bluetooth: hci1: command tx timeout [ 112.415121][ T7089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.333'. [ 112.424428][ T7089] netlink: 35 bytes leftover after parsing attributes in process `syz.0.333'. [ 112.438433][ T7089] netlink: 'syz.0.333': attribute type 5 has an invalid length. [ 112.446526][ T7089] netlink: 'syz.0.333': attribute type 6 has an invalid length. [ 112.454541][ T7089] netlink: 35 bytes leftover after parsing attributes in process `syz.0.333'. [ 112.692009][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.699765][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.817812][ T7094] bridge_slave_0: left allmulticast mode [ 112.824947][ T7094] bridge_slave_0: left promiscuous mode [ 112.831020][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.862706][ T7094] bridge_slave_1: left allmulticast mode [ 112.878821][ T7094] bridge_slave_1: left promiscuous mode [ 112.881094][ T7112] netlink: 108 bytes leftover after parsing attributes in process `syz.4.340'. [ 112.894896][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.936531][ T7094] bond0: (slave bond_slave_0): Releasing backup interface [ 112.967570][ T7094] bond0: (slave bond_slave_1): Releasing backup interface [ 113.049965][ T7094] team0: Port device team_slave_0 removed [ 113.086578][ T7094] team0: Port device team_slave_1 removed [ 113.111573][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.126330][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.145960][ T7094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.161764][ T7094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.189961][ T7094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.410212][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 113.453537][ T7133] netlink: 'syz.1.342': attribute type 12 has an invalid length. [ 113.489097][ T7133] netlink: 'syz.1.342': attribute type 11 has an invalid length. [ 113.536419][ T7138] gre0: entered promiscuous mode [ 113.608904][ T7138] gre0: entered allmulticast mode [ 113.774994][ T7147] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 114.341918][ T7175] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 114.371012][ T7175] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 114.495537][ T7183] trusted_key: syz.2.357 sent an empty control message without MSG_MORE. [ 114.537960][ T7191] openvswitch: netlink: Unknown key attributes 2 [ 115.044161][ T7205] unsupported nla_type 33542 [ 115.209979][ T7210] netlink: 'syz.1.367': attribute type 8 has an invalid length. [ 115.392563][ T7228] delete_channel: no stack [ 115.576749][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.604802][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.652729][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.667729][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.684857][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.719810][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.742447][ T7221] team0 (unregistering): Port device team_slave_0 removed [ 115.785660][ T7221] team0 (unregistering): Port device team_slave_1 removed [ 115.849505][ T7222] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 115.995771][ T7256] __nla_validate_parse: 5 callbacks suppressed [ 115.995788][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 116.218687][ T7269] tipc: Started in network mode [ 116.223845][ T7269] tipc: Node identity e0000002, cluster identity 4711 [ 116.230675][ T7269] tipc: Enabling of bearer rejected, failed to enable media [ 116.274552][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 116.293382][ T7274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'. [ 116.536327][ T7290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.390'. [ 116.957085][ T7318] syzkaller0: entered promiscuous mode [ 116.962751][ T7318] syzkaller0: entered allmulticast mode [ 117.039144][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 117.063007][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 117.324054][ T7335] sch_fq: defrate 0 ignored. [ 117.398794][ T7342] netlink: 36 bytes leftover after parsing attributes in process `syz.4.404'. [ 117.662693][ T7351] IPv6: sit1: Disabled Multicast RS [ 117.710513][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 117.798360][ T7363] block nbd1: Unsupported socket: should be TCP or UNIX. [ 117.952054][ T7370] netlink: 64 bytes leftover after parsing attributes in process `syz.0.411'. [ 118.018981][ T7380] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 118.155186][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 118.382493][ T7387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.137886][ T7425] netlink: 'syz.0.430': attribute type 2 has an invalid length. [ 119.958631][ T7446] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 120.724182][ T7490] netlink: 'syz.0.450': attribute type 1 has an invalid length. [ 120.797726][ T7490] netlink: 'syz.0.450': attribute type 3 has an invalid length. [ 121.103466][ T7515] __nla_validate_parse: 12 callbacks suppressed [ 121.103483][ T7515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 121.133871][ T7517] IPv6: NLM_F_REPLACE set, but no existing node found! [ 121.869458][ T7551] netlink: 'syz.1.464': attribute type 26 has an invalid length. [ 122.819037][ T5940] IPVS: starting estimator thread 0... [ 122.929266][ T7605] IPVS: using max 31 ests per chain, 74400 per kthread [ 123.078993][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 123.162089][ T7630] pim6reg: entered allmulticast mode [ 123.588467][ T7658] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 123.640164][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'. [ 123.651069][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.494'. [ 123.688994][ T7658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.742185][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.749943][ T7666] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 123.762758][ T7666] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 123.794855][ T7658] veth7: entered promiscuous mode [ 123.802525][ T7658] bond1: (slave veth7): Enslaving as an active interface with a down link [ 123.928703][ T7672] vlan2: entered allmulticast mode [ 123.954129][ T7672] bond1: entered allmulticast mode [ 124.311333][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 124.502722][ T7702] rdma_op ffff888079c1d1f0 conn xmit_rdma 0000000000000000 [ 124.620604][ T7709] netlink: 88 bytes leftover after parsing attributes in process `syz.4.507'. [ 125.403648][ T7753] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 125.969717][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 126.205237][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 126.277233][ T7799] bridge1: entered promiscuous mode [ 126.319878][ T7799] bridge1: entered allmulticast mode [ 126.497370][ T7817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.528'. [ 126.536392][ T7817] net_ratelimit: 59 callbacks suppressed [ 126.536407][ T7817] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 126.661586][ T7829] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.871695][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.532'. [ 127.115403][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.143674][ T7857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.298311][ T7857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.308073][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'. [ 127.347314][ T7861] ip6_vti0: entered promiscuous mode [ 127.359659][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 127.380217][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'. [ 127.391873][ T7860] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.553944][ T7878] netlink: 'syz.2.542': attribute type 29 has an invalid length. [ 127.561930][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 127.704413][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 127.759223][ T7880] netlink: 2 bytes leftover after parsing attributes in process `syz.2.542'. [ 127.972616][ T7910] netlink: 208 bytes leftover after parsing attributes in process `syz.3.553'. [ 128.304755][ T7935] bridge_slave_0: invalid flags given to default FDB implementation [ 128.529730][ T7943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.886004][ T7964] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 129.361516][ T7987] bond2: entered promiscuous mode [ 129.381696][ T7987] bond2: entered allmulticast mode [ 129.395379][ T7987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.588189][ T8005] netlink: 'syz.3.579': attribute type 5 has an invalid length. [ 129.705069][ T8003] ip6gre1: left promiscuous mode [ 129.710085][ T8003] ip6gre1: left allmulticast mode [ 129.719204][ T8003] gretap1: left promiscuous mode [ 129.725747][ T8003] gretap1: left allmulticast mode [ 129.746859][ T8005] geneve2: entered promiscuous mode [ 129.752317][ T8005] geneve2: entered allmulticast mode [ 129.760597][ T2951] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.775097][ T2951] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.793150][ T2951] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 129.813738][ T2951] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.822635][ T2951] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.849846][ T2951] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 129.860802][ T2951] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.904685][ T2951] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.924620][ T8016] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 129.936816][ T2951] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 129.983376][ T2951] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.031580][ T2951] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.063051][ T2951] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 130.327863][ T8038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.639946][ T8055] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 130.683012][ T8055] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 130.699884][ T8077] nft_compat: unsupported protocol 0 [ 130.713286][ T8079] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 131.196945][ T8110] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 131.219132][ T8114] __nla_validate_parse: 17 callbacks suppressed [ 131.219150][ T8114] netlink: 68 bytes leftover after parsing attributes in process `syz.1.612'. [ 131.302608][ T8119] sctp: [Deprecated]: syz.2.614 (pid 8119) Use of int in maxseg socket option. [ 131.302608][ T8119] Use struct sctp_assoc_value instead [ 131.422564][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'. [ 131.505093][ T8126] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 131.546789][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 131.737852][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 131.779650][ T8145] openvswitch: netlink: Flow key attr not present in new flow. [ 131.792182][ T8149] pimreg: entered allmulticast mode [ 131.813995][ T8148] netlink: 'syz.2.623': attribute type 4 has an invalid length. [ 131.878451][ T8152] netlink: 232 bytes leftover after parsing attributes in process `syz.1.626'. [ 132.101513][ T8161] syzkaller1: entered promiscuous mode [ 132.107370][ T8161] syzkaller1: entered allmulticast mode [ 132.115137][ T8169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.633'. [ 132.134113][ T8172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.633'. [ 132.207627][ T8166] bond2: entered promiscuous mode [ 132.219256][ T8166] bond2: entered allmulticast mode [ 132.236094][ T8166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.257039][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 132.291155][ T8176] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 132.301395][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 132.311956][ T8180] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 132.463988][ T8191] netlink: 236 bytes leftover after parsing attributes in process `syz.1.638'. [ 132.591142][ T8193] only policy match revision 0 supported [ 132.591162][ T8193] unable to load match [ 132.851367][ T8206] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 132.878695][ T8206] bond1: (slave lo): Enslaving as a backup interface with an up link [ 132.895520][ T8206] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 132.898492][ T8222] netlink: 'syz.0.650': attribute type 11 has an invalid length. [ 132.920276][ T8206] Cannot find add_set index 0 as target [ 133.167740][ T8235] openvswitch: netlink: Key type 3930 is out of range max 32 [ 133.232563][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.286174][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.297221][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.305405][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.316271][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.352729][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.377551][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.403867][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.424027][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 133.443646][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.450273][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.465612][ T8239] netlink: 'syz.0.656': attribute type 4 has an invalid length. [ 134.106904][ T8300] block nbd1: Unsupported socket: should be TCP or UNIX. [ 134.557397][ T8329] bridge0: port 3(ipvlan2) entered blocking state [ 134.617753][ T8329] bridge0: port 3(ipvlan2) entered disabled state [ 134.631375][ T8329] ipvlan2: entered allmulticast mode [ 134.637039][ T8329] bridge0: entered allmulticast mode [ 134.678882][ T8329] ipvlan2: left allmulticast mode [ 134.687916][ T8329] bridge0: left allmulticast mode [ 134.693389][ T8339] siw: device registration error -23 [ 135.352683][ T8371] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 135.372247][ T8382] syzkaller0: entered promiscuous mode [ 135.389828][ T8382] syzkaller0: entered allmulticast mode [ 135.609733][ T8385] veth3: entered allmulticast mode [ 136.461352][ T8454] __nla_validate_parse: 21 callbacks suppressed [ 136.461367][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 136.668241][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.720'. [ 136.810250][ T8477] syzkaller0: entered promiscuous mode [ 136.816775][ T8477] syzkaller0: entered allmulticast mode [ 136.827343][ T8480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.725'. [ 136.837027][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 136.847314][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 136.951791][ T8483] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 137.171900][ T8489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.729'. [ 137.226263][ T8489] : entered promiscuous mode [ 137.525845][ T8517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.737'. [ 137.656559][ T8530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.742'. [ 137.731760][ T8527] syzkaller0: entered promiscuous mode [ 137.739884][ T8527] syzkaller0: entered allmulticast mode [ 137.881333][ T8543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.745'. [ 137.895645][ T8543] sctp: [Deprecated]: syz.3.745 (pid 8543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.895645][ T8543] Use struct sctp_sack_info instead [ 138.048454][ T8551] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.748'. [ 139.161599][ T8544] dvmrp0: entered allmulticast mode [ 139.285440][ T8578] validate_nla: 25 callbacks suppressed [ 139.285459][ T8578] netlink: 'syz.3.752': attribute type 9 has an invalid length. [ 139.299440][ T8578] netlink: 'syz.3.752': attribute type 11 has an invalid length. [ 139.307393][ T8578] netlink: 'syz.3.752': attribute type 12 has an invalid length. [ 139.358961][ T8564] syzkaller0: entered promiscuous mode [ 139.365456][ T8564] syzkaller0: entered allmulticast mode [ 139.372753][ T8568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.393442][ T8581] pimreg: left allmulticast mode [ 140.836770][ T8619] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 140.979241][ T8628] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 141.145315][ T8642] xt_cgroup: path and classid specified [ 141.151683][ T8642] netlink: 'syz.2.766': attribute type 7 has an invalid length. [ 141.274424][ T8649] netlink: 'syz.0.769': attribute type 11 has an invalid length. [ 141.729939][ T8687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.785006][ T8690] x_tables: duplicate underflow at hook 2 [ 141.991384][ T8701] __nla_validate_parse: 11 callbacks suppressed [ 141.991403][ T8701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.784'. [ 142.248503][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 142.557364][ T8734] netlink: 36 bytes leftover after parsing attributes in process `syz.2.794'. [ 142.604998][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 142.838900][ T8751] netlink: 56 bytes leftover after parsing attributes in process `syz.3.800'. [ 142.869204][ T8751] gre0: entered promiscuous mode [ 143.040128][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.802'. [ 143.152182][ T4313] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe3 [ 143.219142][ T8766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.236350][ T8772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.495227][ T8790] syzkaller0: entered promiscuous mode [ 143.500745][ T8790] syzkaller0: entered allmulticast mode [ 144.171392][ T8832] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.186182][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.193455][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.244396][ T8838] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 144.300852][ T8838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.311166][ T8843] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 144.328642][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 144.356643][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 144.406014][ T8838] hsr_slave_0 (unregistering): left promiscuous mode [ 144.427037][ T4313] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.448850][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.819'. [ 144.461098][ T4313] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.491834][ T4313] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.511905][ T4313] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.806497][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 145.144151][ T8894] netlink: 'syz.1.833': attribute type 10 has an invalid length. [ 145.199508][ T8889] netlink: 'syz.1.833': attribute type 11 has an invalid length. [ 145.246198][ T8897] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 145.443787][ T8912] Cannot find add_set index 2 as target [ 145.806093][ T8928] syzkaller0: entered promiscuous mode [ 145.820923][ T8928] syzkaller0: entered allmulticast mode [ 145.841908][ T8943] Bluetooth: MGMT ver 1.23 [ 145.858932][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.866757][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.117713][ T8959] netlink: 'syz.4.856': attribute type 10 has an invalid length. [ 146.134474][ T8959] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 146.216010][ T8961] syzkaller0: entered promiscuous mode [ 146.221778][ T8961] syzkaller0: entered allmulticast mode [ 146.751608][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.765715][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.773481][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.780634][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.809445][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.823489][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.852648][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.881132][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.913448][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.981490][ T8973] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.990607][ T8983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.134720][ T8992] __nla_validate_parse: 16 callbacks suppressed [ 147.134738][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 147.285593][ T8995] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.867'. [ 147.296062][ T8995] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.867'. [ 147.306538][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 147.318651][ T9007] netlink: 50 bytes leftover after parsing attributes in process `syz.2.870'. [ 147.364859][ T9007] netlink: 50 bytes leftover after parsing attributes in process `syz.2.870'. [ 147.429483][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 147.476428][ T9009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.873'. [ 147.526806][ T9009] syzkaller0: entered promiscuous mode [ 147.532421][ T9009] syzkaller0: entered allmulticast mode [ 147.666040][ T9024] netlink: 240 bytes leftover after parsing attributes in process `syz.1.876'. [ 147.926206][ T9045] x_tables: duplicate underflow at hook 1 [ 147.936148][ T9048] x_tables: duplicate underflow at hook 1 [ 147.952582][ T9046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.880'. [ 148.209592][ T9063] netlink: 'syz.0.887': attribute type 32 has an invalid length. [ 148.331499][ T9074] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 148.470194][ T9087] netlink: 'syz.3.890': attribute type 24 has an invalid length. [ 148.704542][ T9091] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 149.767733][ T9147] netlink: 'syz.1.906': attribute type 21 has an invalid length. [ 149.797464][ T9149] sctp: [Deprecated]: syz.0.908 (pid 9149) Use of int in max_burst socket option. [ 149.797464][ T9149] Use struct sctp_assoc_value instead [ 149.815168][ T9147] netlink: 'syz.1.906': attribute type 5 has an invalid length. [ 150.118380][ T9168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.338566][ T9185] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.463515][ T6794] wlan1: Trigger new scan to find an IBSS to join [ 150.527710][ T9199] sctp: [Deprecated]: syz.3.927 (pid 9199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.527710][ T9199] Use struct sctp_sack_info instead [ 150.550765][ T9203] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 150.907831][ T9230] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 150.996254][ T9231] bond3 (unregistering): Released all slaves [ 151.035970][ T9230] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 151.179220][ T9228] veth0_virt_wifi: renamed from veth0_vlan [ 151.439918][ T9269] syzkaller0: entered promiscuous mode [ 151.445855][ T9269] syzkaller0: entered allmulticast mode [ 152.570770][ T5495] veth0_virt_wifi: left promiscuous mode [ 152.625210][ T5495] veth0_virt_wifi: entered promiscuous mode [ 153.255722][ T9395] netlink: 'syz.3.975': attribute type 5 has an invalid length. [ 153.303007][ T9395] __nla_validate_parse: 13 callbacks suppressed [ 153.303026][ T9395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.975'. [ 153.425137][ T2951] wlan1: Trigger new scan to find an IBSS to join [ 153.607184][ T9419] xt_TPROXY: Can be used only with -p tcp or -p udp [ 153.721581][ T9427] netlink: 'syz.3.983': attribute type 2 has an invalid length. [ 153.781342][ T9427] 9: entered promiscuous mode [ 154.546054][ T9466] netlink: 128 bytes leftover after parsing attributes in process `syz.2.992'. [ 154.577556][ T9466] netlink: 128 bytes leftover after parsing attributes in process `syz.2.992'. [ 154.764982][ T9481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.997'. [ 154.805907][ T9486] netlink: 'syz.0.999': attribute type 9 has an invalid length. [ 154.814159][ T9486] netlink: 'syz.0.999': attribute type 6 has an invalid length. [ 154.850882][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 154.866540][ T9491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.997'. [ 155.128863][ T9500] tipc: Enabling of bearer rejected, failed to enable media [ 155.346855][ T9518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1005'. [ 155.403988][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1005'. [ 155.803418][ T9536] netlink: 'syz.0.1012': attribute type 4 has an invalid length. [ 155.828685][ T9536] netlink: 'syz.0.1012': attribute type 4 has an invalid length. [ 155.892763][ T9539] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1013'. [ 155.945842][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 156.204555][ T9561] netlink: 'syz.2.1019': attribute type 5 has an invalid length. [ 156.241433][ T9561] geneve2: entered promiscuous mode [ 156.277083][ T9561] geneve2: entered allmulticast mode [ 156.308685][ T6794] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 156.324237][ T6794] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 156.351766][ T6794] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 156.368077][ T9568] IPVS: persistence engine module ip_vs_pe_À not found [ 156.385535][ T9571] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 156.396506][ T6794] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 156.467052][ T6794] wlan1: Trigger new scan to find an IBSS to join [ 156.537607][ T9582] net_ratelimit: 56 callbacks suppressed [ 156.537627][ T9582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.721164][ T9591] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 156.759699][ T9595] IPv6: sit3: Disabled Multicast RS [ 156.955154][ T9614] gretap1: entered promiscuous mode [ 156.985365][ T9614] gretap1: entered allmulticast mode [ 156.999305][ T9609] syzkaller0: entered promiscuous mode [ 157.005363][ T9609] syzkaller0: entered allmulticast mode [ 157.375185][ T9641] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 157.386194][ T4313] wlan1: Creating new IBSS network, BSSID d2:dd:e8:1a:6c:99 [ 157.433786][ T9641] s5ÿÿø: renamed from vlan1 [ 157.436479][ T9639] sctp: [Deprecated]: syz.0.1044 (pid 9639) Use of int in maxseg socket option. [ 157.436479][ T9639] Use struct sctp_assoc_value instead [ 157.464603][ T9636] IPVS: sh: FWM 3 0x00000003 - no destination available [ 157.485841][ T9639] netlink: 'syz.0.1044': attribute type 12 has an invalid length. [ 157.539858][ T9646] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.560244][ T9646] bond0: entered promiscuous mode [ 157.566744][ T9646] bond_slave_0: entered promiscuous mode [ 157.573850][ T9646] bond_slave_1: entered promiscuous mode [ 157.579807][ T9646] batadv0: entered promiscuous mode [ 157.593568][ T9646] bond0: left promiscuous mode [ 157.598696][ T9646] bond_slave_0: left promiscuous mode [ 157.606324][ T9646] bond_slave_1: left promiscuous mode [ 157.615281][ T9646] batadv0: left promiscuous mode [ 157.809893][ T9662] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 157.820489][ T9662] xt_bpf: check failed: parse error [ 158.036652][ T9684] Cannot find add_set index 0 as target [ 158.052464][ T9686] tipc: Started in network mode [ 158.059415][ T9686] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 158.068852][ T9686] tipc: Enabled bearer , priority 2 [ 158.210188][ T9694] syzkaller1: entered promiscuous mode [ 158.219409][ T9694] syzkaller1: entered allmulticast mode [ 158.227044][ T9694] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 158.310641][ T9700] Cannot find add_set index 2 as target [ 158.319183][ T9699] __nla_validate_parse: 13 callbacks suppressed [ 158.319202][ T9699] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1062'. [ 159.233828][ T5919] tipc: Node number set to 10136234 [ 159.271989][ T9766] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1077'. [ 159.292315][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1077'. [ 159.313085][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1077'. [ 159.322424][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1077'. [ 159.409079][ T9771] veth0: entered promiscuous mode [ 159.450261][ T9771] veth0: left promiscuous mode [ 159.591481][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1082'. [ 159.641181][ T9789] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 159.857922][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 160.349258][ T9837] netlink: 'syz.3.1093': attribute type 10 has an invalid length. [ 160.368701][ T9837] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1093'. [ 160.690162][ T9849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.586536][ T9854] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 161.630863][ T9854] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 161.699629][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1104'. [ 161.748956][ T9905] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 161.769699][ T9907] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.073121][ T9927] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 162.199243][ T9939] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 162.840621][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 163.652001][T10044] xt_TCPMSS: Only works on TCP SYN packets [ 163.857449][T10027] tipc: Disabling bearer [ 163.984898][ T5919] syz2: Port: 1 Link DOWN [ 163.991021][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.022245][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.077269][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.113786][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.146188][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.161445][T10063] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1139'. [ 164.175678][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.225102][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.263079][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.313887][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.332478][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.373157][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.405606][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.456852][T10042] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 164.486579][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1138'. [ 164.616762][T10091] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 164.678154][T10091] 9: entered promiscuous mode [ 164.740894][T10105] netlink: 'syz.2.1148': attribute type 11 has an invalid length. [ 164.830045][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 164.870910][T10113] syzkaller1: entered promiscuous mode [ 164.877320][T10113] syzkaller1: entered allmulticast mode [ 165.135352][T10132] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1158'. [ 165.423348][ T60] wlan0: Trigger new scan to find an IBSS to join [ 165.682335][T10162] validate_nla: 1 callbacks suppressed [ 165.682353][T10162] netlink: 'syz.1.1164': attribute type 9 has an invalid length. [ 165.735153][T10165] syzkaller1: entered promiscuous mode [ 165.744740][T10162] netlink: 'syz.1.1164': attribute type 6 has an invalid length. [ 165.750990][T10165] syzkaller1: entered allmulticast mode [ 165.774575][T10165] sctp: [Deprecated]: syz.4.1165 (pid 10165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.774575][T10165] Use struct sctp_sack_info instead [ 166.494328][T10212] openvswitch: netlink: Multiple metadata blocks provided [ 166.558449][T10217] netem: invalid attributes len -24 [ 166.563944][T10217] netem: change failed [ 167.262469][T10251] netlink: 'syz.3.1184': attribute type 39 has an invalid length. [ 167.429649][T10263] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 167.850227][T10290] netlink: 'syz.2.1190': attribute type 1 has an invalid length. [ 168.467003][ T1112] wlan0: Trigger new scan to find an IBSS to join [ 168.524888][T10336] netlink: 'syz.3.1203': attribute type 21 has an invalid length. [ 169.101194][T10369] __nla_validate_parse: 114 callbacks suppressed [ 169.101212][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'. [ 169.145000][T10350] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 169.607826][T10389] netlink: 'syz.2.1212': attribute type 13 has an invalid length. [ 169.616259][T10389] netlink: 'syz.2.1212': attribute type 58 has an invalid length. [ 169.625420][T10389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1212'. [ 170.571553][T10350] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 170.711088][T10392] delete_channel: no stack [ 170.737729][T10392] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 170.758265][T10397] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1214'. [ 170.806413][T10392] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.836926][T10404] bond5: (slave geneve2): making interface the new active one [ 170.849863][T10404] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 170.869414][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 170.909071][T10403] syzkaller0: entered promiscuous mode [ 170.932222][T10403] syzkaller0: entered allmulticast mode [ 171.014873][T10411] syzkaller0: entered promiscuous mode [ 171.111152][T10420] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 171.236715][T10420] veth9: entered promiscuous mode [ 171.287849][T10429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1221'. [ 171.313506][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 171.314859][T10424] gre0: left promiscuous mode [ 171.327289][T10429] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1221'. [ 171.336659][T10429] netlink: 'syz.4.1221': attribute type 2 has an invalid length. [ 171.341935][T10424] geneve2: left promiscuous mode [ 171.345901][T10429] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1221'. [ 171.361490][T10434] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1225'. [ 171.422988][ T36] wlan0: Trigger new scan to find an IBSS to join [ 171.481105][T10441] vlan1: entered allmulticast mode [ 171.612270][T10453] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1231'. [ 171.982033][T10483] netlink: 'syz.2.1238': attribute type 26 has an invalid length. [ 172.012582][T10489] netlink: 'syz.2.1238': attribute type 26 has an invalid length. [ 172.213191][T10502] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 172.347621][T10520] netlink: 'syz.0.1244': attribute type 4 has an invalid length. [ 172.356480][ T36] wlan0: Creating new IBSS network, BSSID ee:d9:a2:6c:c3:4f [ 172.452670][T10514] syzkaller0: entered promiscuous mode [ 172.459196][T10514] syzkaller0: entered allmulticast mode [ 172.805318][T10543] gre1: entered promiscuous mode [ 172.815477][T10543] gre1: entered allmulticast mode [ 172.940660][ T30] audit: type=1800 audit(1768445742.612:3): pid=10553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1257" name="memory.events" dev="tmpfs" ino=1236 res=0 errno=0 [ 172.984192][T10558] pim6reg: left allmulticast mode [ 173.022834][ T30] audit: type=1804 audit(1768445742.692:4): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1257" name="/newroot/239/memory.events" dev="tmpfs" ino=1236 res=1 errno=0 [ 173.495436][T10533] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 173.790966][T10608] syzkaller1: entered promiscuous mode [ 173.801132][T10608] syzkaller1: entered allmulticast mode [ 173.839627][T10608] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 174.032308][T10631] openvswitch: netlink: Key type 100 is out of range max 32 [ 174.205478][T10639] __nla_validate_parse: 15 callbacks suppressed [ 174.205495][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1285'. [ 174.370313][T10647] syzkaller0: entered promiscuous mode [ 174.385781][T10647] syzkaller0: entered allmulticast mode [ 174.409865][T10655] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 174.418541][T10655] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1289'. [ 174.429692][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 174.597767][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 174.619978][T10663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1291'. [ 174.861998][T10680] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1296'. [ 175.073152][T10694] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1301'. [ 175.076943][T10697] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 175.119405][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1299'. [ 175.151373][T10690] tipc: Invalid UDP bearer configuration [ 175.151437][T10690] tipc: Enabling of bearer rejected, failed to enable media [ 175.526123][T10730] netlink: 'syz.4.1312': attribute type 32 has an invalid length. [ 176.360660][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 177.011453][T10799] sctp: [Deprecated]: syz.3.1328 (pid 10799) Use of int in max_burst socket option. [ 177.011453][T10799] Use struct sctp_assoc_value instead [ 177.176193][T10813] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1333'. [ 177.301175][T10824] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 177.344115][T10824] openvswitch: netlink: IP tunnel dst address not specified [ 177.562346][T10848] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 177.585046][T10848] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 177.635941][T10850] openvswitch: netlink: IP tunnel dst address not specified [ 177.799974][T10862] tipc: MTU too low for tipc bearer [ 178.558419][T10899] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 179.469257][T10943] __nla_validate_parse: 7 callbacks suppressed [ 179.469275][T10943] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1367'. [ 179.514108][T10936] can: request_module (can-proto-0) failed. [ 179.569616][T10930] IPVS: set_ctl: invalid protocol: 137 10.1.1.1:20001 [ 179.887106][T10964] veth0: entered promiscuous mode [ 179.935293][T10962] veth0: left promiscuous mode [ 180.509290][T10998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1383'. [ 180.578172][T11001] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1385'. [ 180.729691][T11009] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 180.847088][ T1112] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.883269][ T1112] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 180.918728][ T1112] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.939534][ T1112] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 180.960516][ T1112] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.971323][ T1112] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 180.980978][ T1112] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.991193][ T1112] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 181.237225][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 181.274213][T11033] bond3: entered promiscuous mode [ 181.279635][T11033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.445893][T11038] bond4: entered promiscuous mode [ 181.466624][T11038] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.753521][T11056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1394'. [ 181.801368][T11056] openvswitch: netlink: Flow key attr not present in new flow. [ 182.105791][T11065] tipc: New replicast peer: 255.255.255.255 [ 182.139894][T11065] tipc: Enabled bearer , priority 10 [ 182.215728][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 182.224979][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1396'. [ 182.237658][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 182.253676][T11065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1396'. [ 182.290110][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1396'. [ 182.330107][T11079] netlink: 'syz.3.1399': attribute type 25 has an invalid length. [ 182.349334][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 182.369493][T11079] netlink: 'syz.3.1399': attribute type 25 has an invalid length. [ 182.416503][T11083] netlink: 'syz.2.1400': attribute type 5 has an invalid length. [ 182.425343][T11082] netlink: 'syz.2.1400': attribute type 5 has an invalid length. [ 182.676665][T11095] netlink: 'syz.4.1404': attribute type 8 has an invalid length. [ 182.728085][T11103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.746315][T11101] netlink: 'syz.3.1405': attribute type 39 has an invalid length. [ 183.575615][T11127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.981538][T11140] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 184.078732][T11133] "syz.4.1416" (11133) uses obsolete ecb(arc4) skcipher [ 184.204273][T11151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.294730][T11166] tipc: Enabling of bearer rejected, failed to enable media [ 184.335368][T11166] ieee802154 phy1 wpan1: encryption failed: -22 [ 184.533899][T11177] __nla_validate_parse: 7 callbacks suppressed [ 184.533915][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 184.807047][T11192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1430'. [ 185.094810][T11206] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1436'. [ 185.123441][T11206] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 185.318138][T11214] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1438'. [ 185.334130][T11217] gre0: entered promiscuous mode [ 185.417056][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1441'. [ 185.458583][T11222] netlink: 'syz.1.1442': attribute type 1 has an invalid length. [ 185.544455][T11222] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 185.824001][T11241] sctp: [Deprecated]: syz.4.1447 (pid 11241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.824001][T11241] Use struct sctp_sack_info instead [ 185.878541][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 185.888429][T11240] sctp: [Deprecated]: syz.4.1447 (pid 11240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.888429][T11240] Use struct sctp_sack_info instead [ 186.039398][T11258] xt_hashlimit: size too large, truncated to 1048576 [ 186.128587][T11262] –: renamed from vxcan1 [ 186.503105][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.576480][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1458'. [ 186.704230][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 186.741694][T11289] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1462'. [ 186.761171][T11289] openvswitch: netlink: Flow key attr not present in new flow. [ 186.911195][T11301] netlink: 'syz.0.1466': attribute type 21 has an invalid length. [ 187.025101][T11304] netlink: 'syz.3.1467': attribute type 4 has an invalid length. [ 187.274527][T11319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.389154][T11322] xt_cgroup: invalid path, errno=-2 [ 187.452297][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.714157][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 189.079579][T11404] validate_nla: 1 callbacks suppressed [ 189.079596][T11404] netlink: 'syz.0.1501': attribute type 4 has an invalid length. [ 189.255105][T11407] syzkaller0: entered promiscuous mode [ 189.276217][T11407] syzkaller0: entered allmulticast mode [ 189.564882][T11422] __nla_validate_parse: 14 callbacks suppressed [ 189.564898][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'. [ 191.954334][T11431] bridge0: port 3(batadv1) entered blocking state [ 191.974690][T11431] bridge0: port 3(batadv1) entered disabled state [ 191.991984][T11431] batadv1: entered allmulticast mode [ 192.001343][T11431] batadv1: entered promiscuous mode [ 192.175195][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'. [ 192.396020][T11462] netlink: 'syz.0.1518': attribute type 3 has an invalid length. [ 192.435073][T11462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1518'. [ 192.453264][ T3675] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 192.463361][ T3675] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 192.503768][T11474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1518'. [ 192.564495][T11474] openvswitch: netlink: Flow key attr not present in new flow. [ 192.628237][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 192.772446][T11486] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 192.782378][T11486] bond6: option packets_per_slave: allowed values 0 - 65535 [ 192.797234][T11486] bond6 (unregistering): Released all slaves [ 192.810535][T11482] xt_l2tp: wrong L2TP version: 0 [ 192.957125][T11500] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 192.976447][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 192.993415][T11500] netlink: 'syz.2.1525': attribute type 4 has an invalid length. [ 193.021997][T11500] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1525'. [ 193.211134][T11517] netlink: 'syz.1.1530': attribute type 10 has an invalid length. [ 193.219891][T11517] bridge_slave_1: left allmulticast mode [ 193.228625][T11517] bridge_slave_1: left promiscuous mode [ 193.235057][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.295346][T11517] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 193.429686][T11524] ipt_ECN: cannot use operation on non-tcp rule [ 193.777157][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'. [ 193.971067][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1544'. [ 193.985339][T11560] netlink: 'syz.3.1544': attribute type 12 has an invalid length. [ 194.167752][T11566] x_tables: duplicate underflow at hook 1 [ 194.237836][T11571] netlink: 'syz.3.1549': attribute type 13 has an invalid length. [ 194.313665][T11574] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 194.605340][T11583] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1551'. [ 194.689969][T11587] netlink: 'syz.0.1551': attribute type 3 has an invalid length. [ 194.712256][T11587] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1551'. [ 194.769734][T11571] geneve2: left allmulticast mode [ 194.812593][T11592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1551'. [ 194.867810][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.906461][T11579] vlan2: entered allmulticast mode [ 194.919252][T11579] veth1: entered allmulticast mode [ 194.994806][T11583] vlan0: entered promiscuous mode [ 195.006896][T11583] vlan0: entered allmulticast mode [ 195.013886][T11583] hsr_slave_1: entered allmulticast mode [ 195.021820][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 195.098994][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 195.194457][T11606] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20001 [ 195.230474][T11606] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 195.734461][T11594] delete_channel: no stack [ 195.824837][T11636] netlink: 'syz.1.1564': attribute type 7 has an invalid length. [ 195.853490][T11636] netlink: 'syz.1.1564': attribute type 8 has an invalid length. [ 195.946253][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1566'. [ 195.970205][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 196.000367][T11646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.018609][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 196.105630][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 196.136424][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 196.383837][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 196.670616][T11676] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.697405][T11682] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 196.938738][T11688] netlink: 'syz.2.1583': attribute type 12 has an invalid length. [ 197.129349][T11700] atomic_op ffff8880342fc198 conn xmit_atomic 0000000000000000 [ 197.741517][T11743] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 197.771809][T11743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.868930][T11750] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 198.117218][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.124831][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.702435][T11795] netlink: 'syz.4.1614': attribute type 10 has an invalid length. [ 198.749162][T11795] batman_adv: batadv0: Adding interface: netdevsim0 [ 198.792971][T11795] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 198.875578][T11798] macvtap1: entered promiscuous mode [ 198.901891][T11798] macvtap1: entered allmulticast mode [ 198.937865][T11798] veth1_vlan: entered allmulticast mode [ 199.159792][T11809] bridge5: entered promiscuous mode [ 199.175017][T11809] bridge5: entered allmulticast mode [ 199.257795][T11815] Unsupported ieee802154 address type: 0 [ 199.835735][T11838] syzkaller0: entered promiscuous mode [ 199.872004][T11838] syzkaller0: entered allmulticast mode [ 200.075456][T11851] __nla_validate_parse: 7 callbacks suppressed [ 200.075473][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 200.136995][T11848] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 200.228962][T11859] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.1631'. [ 200.503061][T11870] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1633'. [ 200.534734][T11870] xt_policy: neither incoming nor outgoing policy selected [ 200.585142][T11881] sctp: [Deprecated]: syz.2.1636 (pid 11881) Use of int in maxseg socket option. [ 200.585142][T11881] Use struct sctp_assoc_value instead [ 200.701863][T11888] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 200.767004][T11891] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 201.164103][T11913] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1646'. [ 201.215490][T11913] 8021q: VLANs not supported on sit0 [ 201.936641][T11950] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1659'. [ 202.076410][T11950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.141812][T11950] xt_l2tp: v2 sid > 0xffff: 1114112 [ 202.403467][ T50] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.426140][T11965] gre2: entered promiscuous mode [ 202.443423][T11965] gre2: entered allmulticast mode [ 203.325061][T11992] netlink: 'syz.3.1669': attribute type 24 has an invalid length. [ 203.671770][T11998] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1672'. [ 204.021509][T12010] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 204.125830][T12012] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.191491][T12012] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 204.205588][T12012] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 204.284346][T12020] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.297504][T12020] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 204.398559][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 204.432395][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 204.453728][T12034] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1681'. [ 204.543969][T12041] pim6reg1: entered promiscuous mode [ 204.549324][T12041] pim6reg1: entered allmulticast mode [ 204.792468][T12067] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1687'. [ 204.954108][T12079] dvmrp6: entered allmulticast mode [ 205.021597][T12083] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 205.215968][T12099] netlink: 'syz.3.1699': attribute type 3 has an invalid length. [ 205.382710][T12105] openvswitch: netlink: Message has -2 unknown bytes. [ 205.557480][T12118] tipc: Enabling of bearer rejected, failed to enable media [ 205.587359][T12121] x_tables: duplicate entry at hook 3 [ 205.740154][T12126] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 205.845817][T12144] __nla_validate_parse: 1 callbacks suppressed [ 205.845837][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 206.145696][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 206.158939][T12159] syzkaller0: entered promiscuous mode [ 206.174467][T12159] syzkaller0: entered allmulticast mode [ 206.185859][T12173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1720'. [ 206.231609][T12163] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 206.290490][T12181] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1724'. [ 206.391133][T12190] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.529030][T12200] syzkaller0: entered promiscuous mode [ 206.535217][T12200] syzkaller0: entered allmulticast mode [ 207.188175][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 207.188184][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 207.206936][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 207.425340][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1745'. [ 208.583631][T12258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1745'. [ 208.793796][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 208.957574][T12282] veth5: entered promiscuous mode [ 208.965249][T12282] veth5: entered allmulticast mode [ 209.119488][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 209.152264][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 209.200212][T12305] netlink: 'syz.3.1757': attribute type 10 has an invalid length. [ 209.208838][T12305] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 209.426675][T12327] tipc: Enabling of bearer rejected, failed to enable media [ 209.479928][T12326] tipc: Enabling of bearer rejected, failed to enable media [ 209.645517][T12342] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 209.665812][T12342] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1767'. [ 209.815117][T12360] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 209.958937][T12371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.054593][T12377] ip6gre1: entered promiscuous mode [ 210.059940][T12377] ip6gre1: entered allmulticast mode [ 210.278250][ T30] audit: type=1804 audit(1768445779.952:5): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1781" name="/newroot/373/cgroup.controllers" dev="tmpfs" ino=1914 res=1 errno=0 [ 210.304663][T12393] netlink: 'syz.0.1784': attribute type 14 has an invalid length. [ 210.394224][ T30] audit: type=1800 audit(1768445779.952:6): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1781" name="cgroup.controllers" dev="tmpfs" ino=1914 res=0 errno=0 [ 211.186578][T12446] __nla_validate_parse: 7 callbacks suppressed [ 211.186595][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1802'. [ 211.613452][T12473] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 211.644335][T12477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1810'. [ 211.917984][T12496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.039545][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 212.294114][T12521] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1822'. [ 212.306256][T12521] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1822'. [ 212.319376][T12520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1822'. [ 212.330917][T12520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1822'. [ 212.589642][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1829'. [ 212.717777][T12553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1832'. [ 212.729635][T12540] bond7 (unregistering): Released all slaves [ 212.741033][T12557] netlink: 'syz.4.1834': attribute type 11 has an invalid length. [ 212.750279][T12552] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1829'. [ 213.282393][T12588] netlink: 'syz.0.1843': attribute type 5 has an invalid length. [ 213.335182][T12588] netlink: 'syz.0.1843': attribute type 5 has an invalid length. [ 213.480951][T12598] bond5: option xmit_hash_policy: invalid value (64) [ 213.493259][T12598] bond5 (unregistering): Released all slaves [ 213.619854][T12603] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 214.302696][T12651] syzkaller1: entered allmulticast mode [ 214.312577][T12658] tipc: Started in network mode [ 214.318023][T12658] tipc: Node identity 5ec9e319a41f, cluster identity 4711 [ 214.327556][T12658] tipc: Enabled bearer , priority 0 [ 214.367755][T12656] tipc: Disabling bearer [ 214.746947][T12696] bond1: (slave lo): Releasing backup interface [ 214.774523][T12696] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 214.835613][T12696] bond0: (slave batadv0): Releasing backup interface [ 214.854542][T12696] bridge_slave_0: left promiscuous mode [ 214.864928][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.881920][T12696] bond0: (slave bridge_slave_1): Releasing backup interface [ 214.905070][T12696] bond0: (slave bond_slave_0): Releasing backup interface [ 214.927202][T12696] bond0: (slave bond_slave_1): Releasing backup interface [ 214.947078][T12696] team0: Port device team_slave_0 removed [ 214.958956][T12696] team0: Port device team_slave_1 removed [ 214.967238][T12696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.978573][T12696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.989243][T12696] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 215.058439][ T50] nci: nci_rx_work: unknown MT 0x1 [ 215.159600][T12720] vlan1: entered promiscuous mode [ 215.165611][T12720] geneve1: entered promiscuous mode [ 215.171066][T12720] vlan1: entered allmulticast mode [ 215.176853][T12720] geneve1: entered allmulticast mode [ 215.338157][T12728] netlink: 'syz.4.1884': attribute type 10 has an invalid length. [ 215.379809][T12728] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 215.744443][T12743] netlink: 'syz.3.1889': attribute type 10 has an invalid length. [ 216.470749][T12777] __nla_validate_parse: 14 callbacks suppressed [ 216.470768][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1899'. [ 216.589264][T12782] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1901'. [ 216.638567][T12782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1901'. [ 216.997024][T12799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'. [ 217.197726][T12808] openvswitch: netlink: Missing key (keys=40, expected=100) [ 217.206516][T12811] xt_NFQUEUE: number of total queues is 0 [ 217.212544][T12808] xt_NFQUEUE: number of total queues is 0 [ 217.278075][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 217.278259][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 217.288337][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 217.311197][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 217.321259][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 217.330898][T12804] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1909'. [ 217.425258][T12826] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 217.546457][T12835] unsupported nlmsg_type 40 [ 217.698228][T12843] tipc: Enabled bearer , priority 0 [ 217.791713][T12843] syzkaller0: entered promiscuous mode [ 217.812156][T12843] syzkaller0: entered allmulticast mode [ 217.828613][T12843] tipc: Resetting bearer [ 217.849065][T12851] tunl0: entered promiscuous mode [ 217.859871][T12851] netlink: 'syz.0.1924': attribute type 3 has an invalid length. [ 217.896060][T12840] tipc: Resetting bearer [ 218.377345][ T1112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.464115][T12840] tipc: Disabling bearer [ 219.477788][T12889] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 219.483499][T12891] netlink: 'syz.4.1938': attribute type 2 has an invalid length. [ 219.524382][ T48] tipc: Node number set to 485353416 [ 219.656714][T12900] netlink: 'syz.2.1941': attribute type 1 has an invalid length. [ 219.739321][T12895] syz.0.1939 (12895) used greatest stack depth: 16096 bytes left [ 219.833690][T12914] netlink: 'syz.4.1945': attribute type 21 has an invalid length. [ 219.847062][T12914] netlink: 'syz.4.1945': attribute type 22 has an invalid length. [ 219.899006][T12914] netlink: 'syz.4.1945': attribute type 23 has an invalid length. [ 219.909728][T12914] netlink: 'syz.4.1945': attribute type 25 has an invalid length. [ 220.028254][T12930] syzkaller0: entered promiscuous mode [ 220.044231][T12930] syzkaller0: entered allmulticast mode [ 220.071710][T12934] Bluetooth: MGMT ver 1.23 [ 220.246769][T12938] atomic_op ffff888029081998 conn xmit_atomic 0000000000000000 [ 220.426844][T12946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.600652][T12966] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 220.705268][T12971] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 220.729754][T12971] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 220.786599][T12966] macvlan3: entered promiscuous mode [ 220.792029][T12966] macvlan3: entered allmulticast mode [ 220.815760][T12966] bond7: entered promiscuous mode [ 220.824794][T12966] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 220.847085][T12966] bond7: left promiscuous mode [ 221.036368][T12992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 221.321132][T13009] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 221.657571][T13039] __nla_validate_parse: 12 callbacks suppressed [ 221.657589][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 221.695044][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1976'. [ 221.704144][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1976'. [ 221.767377][T13048] netlink: 'syz.1.1979': attribute type 83 has an invalid length. [ 221.826285][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1976'. [ 221.840812][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 221.908818][T13053] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 221.955367][T13055] syzkaller0: entered promiscuous mode [ 221.967685][T13057] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 221.967747][T13055] syzkaller0: entered allmulticast mode [ 222.203301][T13073] : renamed from hsr0 [ 222.264785][T13075] syzkaller0: entered promiscuous mode [ 222.273091][T13075] syzkaller0: entered allmulticast mode [ 222.655819][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 223.136982][T13139] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 223.137388][T13138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2009'. [ 223.242060][T13140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2009'. [ 223.327333][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2012'. [ 223.669044][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 225.229229][T13197] netlink: 'syz.3.2024': attribute type 6 has an invalid length. [ 225.419350][T13205] bond6: Removing last arp target with arp_interval on [ 225.520289][T13213] batadv1: left allmulticast mode [ 225.535394][T13213] batadv1: left promiscuous mode [ 225.558199][T13213] bridge0: port 3(batadv1) entered disabled state [ 225.625944][T13213] bridge_slave_1: left allmulticast mode [ 225.649207][T13213] bridge_slave_1: left promiscuous mode [ 225.682671][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.697567][T13213] bridge_slave_0: left allmulticast mode [ 225.708627][T13213] bridge_slave_0: left promiscuous mode [ 225.718456][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.780457][T13228] x_tables: unsorted entry at hook 3 [ 226.018191][T13232] sctp: [Deprecated]: syz.2.2036 (pid 13232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.018191][T13232] Use struct sctp_sack_info instead [ 226.072522][T13234] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 226.501545][T13259] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20002 [ 226.694302][T13276] dvmrp6: entered allmulticast mode [ 226.721410][T13281] netlink: 'syz.1.2053': attribute type 11 has an invalid length. [ 226.756228][T13281] netlink: 'syz.1.2053': attribute type 11 has an invalid length. [ 226.845474][T13281] __nla_validate_parse: 5 callbacks suppressed [ 226.845493][T13281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2053'. [ 226.898362][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2056'. [ 226.960272][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 226.979130][T13295] netlink: 'syz.0.2056': attribute type 7 has an invalid length. [ 227.019604][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 227.060865][T13299] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2058'. [ 227.089402][T13301] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2059'. [ 227.121481][ T3419] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.131386][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 227.158549][ T3419] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.197971][ T3419] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.215841][T13295] netlink: 'syz.0.2056': attribute type 7 has an invalid length. [ 227.237418][ T3419] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.268578][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 227.491378][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 227.553996][T13323] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.564027][T13307] infiniband !yz!: set active [ 227.569331][T13307] infiniband !yz!: added team_slave_0 [ 227.609256][T13307] RDS/IB: !yz!: added [ 227.628669][T13307] smc: adding ib device !yz! with port count 1 [ 227.643164][T13307] smc: ib device !yz! port 1 has no pnetid [ 227.755061][T13336] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2065'. [ 227.904015][T13345] netlink: 'syz.2.2071': attribute type 13 has an invalid length. [ 227.918306][T13345] netlink: 'syz.2.2071': attribute type 58 has an invalid length. [ 228.117939][T13356] netlink: 'syz.0.2074': attribute type 2 has an invalid length. [ 228.439584][T13275] udevd[13275]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 228.650586][T13382] veth1_macvtap: left promiscuous mode [ 228.701455][T13385] openvswitch: netlink: Flow key attr not present in new flow. [ 228.710319][T13382] macsec0: entered promiscuous mode [ 228.742986][T13382] macsec0: entered allmulticast mode [ 228.805016][T13388] veth1_macvtap: entered promiscuous mode [ 228.810794][T13388] veth1_macvtap: entered allmulticast mode [ 228.855198][T13388] macsec0: left promiscuous mode [ 228.866962][T13388] macsec0: left allmulticast mode [ 228.884714][T13388] veth1_macvtap: left allmulticast mode [ 230.100214][T13463] veth1_vlan: left allmulticast mode [ 230.127861][T13463] macvtap1: left promiscuous mode [ 230.133627][T13463] macvtap1: left allmulticast mode [ 230.146374][T13463] bridge5: left promiscuous mode [ 230.157244][T13463] bridge5: left allmulticast mode [ 230.174840][T13463] gre2: left promiscuous mode [ 230.190126][T13463] gre2: left allmulticast mode [ 230.331619][T13476] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 230.428109][T13480] batadv_slave_1: entered promiscuous mode [ 230.441702][T13480] netlink: 'syz.0.2105': attribute type 23 has an invalid length. [ 230.464937][T13483] netlink: 'syz.0.2105': attribute type 23 has an invalid length. [ 230.486169][T13479] batadv_slave_1: left promiscuous mode [ 230.782195][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880566b0000: rx timeout, send abort [ 230.791350][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880566b0000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 231.135610][T13527] netlink: 'syz.2.2116': attribute type 3 has an invalid length. [ 231.173101][T13527] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 231.181332][T13527] NCSI netlink: No device for ifindex 813332851 [ 231.211372][T13516] syzkaller0: entered promiscuous mode [ 231.256825][T13516] syzkaller0: entered allmulticast mode [ 231.959555][T13554] Cannot find add_set index 0 as target [ 231.966186][T13554] Cannot find add_set index 0 as target [ 231.972068][T13554] Cannot find add_set index 0 as target [ 231.977925][T13554] Cannot find add_set index 0 as target [ 231.984318][T13554] Cannot find add_set index 0 as target [ 231.990041][T13554] Cannot find add_set index 0 as target [ 231.995957][T13554] Cannot find add_set index 0 as target [ 232.002017][T13554] Cannot find add_set index 0 as target [ 232.008688][T13554] Cannot find add_set index 0 as target [ 232.014606][T13554] Cannot find add_set index 0 as target [ 232.079946][T13557] tipc: Failed to remove unknown binding: 66,1,1/485353416:713833842/713833844 [ 232.092532][T13557] tipc: Failed to remove unknown binding: 66,1,1/485353416:713833842/713833844 [ 233.080146][T13557] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 233.121953][T13557] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 233.227853][T13564] __nla_validate_parse: 10 callbacks suppressed [ 233.227872][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'. [ 233.498473][T13590] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.505156][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 233.538260][ T50] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.828152][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2141'. [ 233.915195][T13615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2142'. [ 233.978544][T13615] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2142'. [ 234.464574][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2148'. [ 234.822170][T13650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2152'. [ 234.959984][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 234.988472][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 235.018528][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 235.050075][T13655] bond0: Error: Cannot enslave bond to itself. [ 235.194383][T13664] netlink: 'syz.4.2157': attribute type 13 has an invalid length. [ 235.230709][T13664] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 235.433610][T13683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.904817][T13711] netlink: 'syz.3.2171': attribute type 64 has an invalid length. [ 235.923632][T13711] netlink: 'syz.3.2171': attribute type 64 has an invalid length. [ 236.123427][T13731] openvswitch: netlink: IP tunnel dst address not specified [ 236.161674][T13735] sctp: [Deprecated]: syz.0.2179 (pid 13735) Use of int in maxseg socket option. [ 236.161674][T13735] Use struct sctp_assoc_value instead [ 236.389559][T13745] netlink: 'syz.1.2170': attribute type 2 has an invalid length. [ 237.076677][T13789] netlink: 'syz.4.2195': attribute type 3 has an invalid length. [ 237.089572][T13789] netlink: 'syz.4.2195': attribute type 2 has an invalid length. [ 237.168947][T13796] netlink: 'syz.0.2197': attribute type 1 has an invalid length. [ 237.177619][T13796] netlink: 'syz.0.2197': attribute type 2 has an invalid length. [ 237.185991][T13796] netlink: 'syz.0.2197': attribute type 1 has an invalid length. [ 237.520850][T13819] netlink: 'syz.3.2204': attribute type 58 has an invalid length. [ 237.634147][T13826] tipc: Enabled bearer , priority 0 [ 237.663371][T13826] syzkaller0: entered promiscuous mode [ 237.682393][T13826] syzkaller0: entered allmulticast mode [ 237.745446][T13826] tipc: Resetting bearer [ 237.759494][T13826] mac80211_hwsim hwsim17 ÿ: renamed from wlan1 [ 237.787836][T13825] tipc: Resetting bearer [ 237.817638][T13838] netlink: 'syz.0.2212': attribute type 83 has an invalid length. [ 237.855988][T13825] tipc: Disabling bearer [ 237.948897][T13845] TCP: TCP_TX_DELAY enabled [ 238.018853][T13852] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 238.039687][T13855] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 238.430133][T13886] : renamed from hsr0 (while UP) [ 238.439959][T13890] __nla_validate_parse: 21 callbacks suppressed [ 238.439977][T13890] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2227'. [ 238.671600][T13906] bridge_slave_1: left allmulticast mode [ 238.693865][T13906] bridge_slave_1: left promiscuous mode [ 238.699707][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.730027][T13906] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 238.792570][ T30] audit: type=1800 audit(1768445808.462:7): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2234" name="memory.events" dev="tmpfs" ino=2254 res=0 errno=0 [ 238.820570][T13903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.830606][ T30] audit: type=1804 audit(1768445808.462:8): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2234" name="/newroot/436/memory.events" dev="tmpfs" ino=2254 res=1 errno=0 [ 239.023261][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.195060][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 239.217057][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 239.235848][T13952] syzkaller0: entered promiscuous mode [ 239.241732][T13952] syzkaller0: entered allmulticast mode [ 239.352077][T13958] veth9: entered promiscuous mode [ 239.910490][T13993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.917831][T13993] IPv6: NLM_F_CREATE should be set when creating new route [ 239.925142][T13993] IPv6: NLM_F_CREATE should be set when creating new route [ 239.941021][T13993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.002674][T13992] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2259'. [ 240.147507][T14006] netlink: 'syz.4.2263': attribute type 11 has an invalid length. [ 240.156589][T14006] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2263'. [ 240.190355][T14011] xt_TCPMSS: Only works on TCP SYN packets [ 240.245767][T14009] syzkaller0: entered promiscuous mode [ 240.251454][T14009] syzkaller0: entered allmulticast mode [ 240.260026][T14009] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 240.528193][T14037] vlan2: entered allmulticast mode [ 240.534150][T14037] hsr_slave_1: entered allmulticast mode [ 240.613662][T14046] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2274'. [ 240.675623][ T60] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 240.702772][T14061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2274'. [ 240.712436][T14061] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2274'. [ 240.827335][T14071] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2281'. [ 241.568339][T14087] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2282'. [ 241.619889][T14094] syz_tun: entered allmulticast mode [ 241.655585][T14095] syz_tun: left allmulticast mode [ 241.997957][T14116] xt_bpf: check failed: parse error [ 242.480924][T14146] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 242.648648][T14151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.663711][T14157] validate_nla: 11 callbacks suppressed [ 242.663729][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.724524][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.760226][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.801228][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.874762][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.933821][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.948006][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.967635][T14170] xt_CONNSECMARK: invalid mode: 0 [ 242.971738][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.981923][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 242.990823][T14157] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 243.329763][T14195] ip6gre2: entered promiscuous mode [ 243.347301][T14195] ip6gre2: entered allmulticast mode [ 243.527523][T14208] dvmrp6: left allmulticast mode [ 243.601246][T14210] __nla_validate_parse: 207 callbacks suppressed [ 243.601265][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2321'. [ 243.604160][T14214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2322'. [ 243.759440][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2323'. [ 244.296577][T14248] tipc: Started in network mode [ 244.320124][T14248] tipc: Node identity ac14140f, cluster identity 4711 [ 244.347688][T14248] tipc: New replicast peer: 255.255.255.255 [ 244.373147][T14248] tipc: Enabled bearer , priority 10 [ 244.932558][T14284] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2342'. [ 244.974871][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'. [ 244.992182][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 245.015343][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2342'. [ 245.037729][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'. [ 245.037740][ T2938] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.072702][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 245.079371][ T2938] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.120630][ T2938] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.147577][ T2938] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.180101][T14292] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 245.538453][ T5919] tipc: Node number set to 2886997007 [ 246.182525][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2359'. [ 246.339038][T14357] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.617876][T14378] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 246.837736][T14395] block nbd2: Unsupported socket: should be TCP or UNIX. [ 247.086914][T14417] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 247.344314][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 248.087998][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.103837][T14467] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 248.123958][T14467] bond0: (slave gre0): Error -95 calling set_mac_address [ 248.182019][T14468] bond0: (slave rose0): Enslaving as an active interface with an up link [ 248.554448][T14498] bond9: (slave lo): Device is not bonding slave [ 248.560855][T14498] bond9: option active_slave: invalid value (lo) [ 248.694529][T14498] bond9 (unregistering): Released all slaves [ 248.788950][T14520] tipc: Enabled bearer , priority 0 [ 248.835897][T14520] syzkaller0: entered promiscuous mode [ 248.841444][T14520] syzkaller0: entered allmulticast mode [ 248.968473][T14520] tipc: Resetting bearer [ 249.036627][T14520] tipc: Disabling bearer [ 249.302120][ T3675] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.384660][T14566] validate_nla: 28 callbacks suppressed [ 249.384681][T14566] netlink: 'syz.1.2407': attribute type 1 has an invalid length. [ 249.462890][T14566] __nla_validate_parse: 4 callbacks suppressed [ 249.462910][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'. [ 249.543649][T14574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2410'. [ 249.561597][T14574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2410'. [ 249.662529][T14578] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2411'. [ 249.710264][T14546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 249.783847][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 249.895863][T14590] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 249.988026][T14590] bond5 (unregistering): Released all slaves [ 250.025726][T14598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2416'. [ 250.250931][T14613] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 250.280198][T14615] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 250.379528][T14613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 250.504894][T14616] 8021q: adding VLAN 0 to HW filter on device bond9 [ 250.512032][T14616] bond9: (slave vxcan2): The slave device specified does not support setting the MAC address [ 250.572464][T14637] openvswitch: netlink: IP tunnel dst address not specified [ 250.573878][T14616] bond9: (slave vxcan2): Error -95 calling set_mac_address [ 250.685023][T14606] syzkaller1: entered promiscuous mode [ 250.691139][T14606] syzkaller1: entered allmulticast mode [ 250.719466][T14647] netlink: 'syz.2.2422': attribute type 9 has an invalid length. [ 250.727481][T14647] netlink: 'syz.2.2422': attribute type 7 has an invalid length. [ 250.743206][T14647] netlink: 'syz.2.2422': attribute type 8 has an invalid length. [ 251.431625][T14677] sctp: [Deprecated]: syz.0.2428 (pid 14677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.431625][T14677] Use struct sctp_sack_info instead [ 251.544386][T14682] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2429'. [ 251.886184][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 251.924547][T14699] bond0: entered promiscuous mode [ 251.943698][T14699] bond0: left promiscuous mode [ 251.955908][T14711] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 251.964913][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 252.100506][T14716] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 252.119350][T14716] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 252.268309][T14711] gretap2: entered promiscuous mode [ 252.320797][T14732] macvlan3: entered promiscuous mode [ 252.349805][T14732] macvlan3: entered allmulticast mode [ 252.367076][T14732] bond5: entered promiscuous mode [ 252.388568][T14732] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 252.408582][T14744] x_tables: duplicate underflow at hook 3 [ 252.427590][T14732] bond5: left promiscuous mode [ 252.562331][T14740] bond5: Removing last ns target with arp_interval on [ 252.569356][T14740] bond5: entered promiscuous mode [ 252.716393][T14765] Cannot find add_set index 2 as target [ 252.828197][T14772] netlink: 'syz.3.2451': attribute type 10 has an invalid length. [ 252.838910][T14766] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 252.862162][T14766] bond6 (unregistering): Released all slaves [ 252.888478][T14772] team0: Port device dummy0 added [ 252.900317][T14771] netlink: 'syz.2.2450': attribute type 5 has an invalid length. [ 253.107802][T14789] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 253.117049][T14789] netlink: 'syz.4.2457': attribute type 3 has an invalid length. [ 255.032915][ T5833] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 256.318400][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.485226][ T6794] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.046389][T14805] : entered promiscuous mode [ 267.249817][T14841] bond6: option all_slaves_active: invalid value (222) [ 267.289286][T14841] bond6 (unregistering): Released all slaves [ 268.284184][T14925] __nla_validate_parse: 5 callbacks suppressed [ 268.284203][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2493'. [ 268.316592][T14926] ipvlan2: entered promiscuous mode [ 268.538025][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 268.809990][T14949] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 268.912470][T14966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2507'. [ 268.963619][T14961] netlink: 'syz.3.2504': attribute type 83 has an invalid length. [ 269.062486][T14975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2510'. [ 269.078294][T14977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2510'. [ 269.132740][T14986] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2511'. [ 269.752990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.211955][T15008] nbd: must specify a device to reconfigure [ 270.231878][T15009] syzkaller0: entered promiscuous mode [ 270.240206][T15009] syzkaller0: entered allmulticast mode [ 270.259437][T15009] delete_channel: no stack [ 270.286400][T15008] bond6: Unable to set down delay as MII monitoring is disabled [ 270.299198][T15008] bond6 (unregistering): Released all slaves [ 270.427425][T15025] ip6tnl1: entered promiscuous mode [ 270.722125][T15043] gre0: left promiscuous mode [ 270.733485][T15043] gre0: left allmulticast mode [ 270.764982][T15043] erspan0: left allmulticast mode [ 270.783286][T15045] netlink: 'syz.0.2529': attribute type 4 has an invalid length. [ 270.791376][T15045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2529'. [ 270.990733][T15043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.011401][T15043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.082254][T15043] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 271.118693][T15043] veth3: left allmulticast mode [ 271.125234][T15043] geneve2: left promiscuous mode [ 271.131256][T15043] geneve2: left allmulticast mode [ 271.173354][T15064] tap0: tun_chr_ioctl cmd 1074025672 [ 271.182905][T15064] tap0: ignored: set checksum disabled [ 271.188787][ T1151] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.215441][ T1151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.245326][ T1151] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.260639][ T1151] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.275877][ T1151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.285511][ T1151] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.345038][ T1151] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.372753][ T1151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.382713][ T1151] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.397522][ T1151] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.407521][ T1151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.417448][ T1151] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 271.481506][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2540'. [ 271.598068][T15090] netlink: 'syz.2.2544': attribute type 1 has an invalid length. [ 271.637099][T15096] sctp: [Deprecated]: syz.1.2543 (pid 15096) Use of int in max_burst socket option deprecated. [ 271.637099][T15096] Use struct sctp_assoc_value instead [ 271.689388][T15096] sctp: [Deprecated]: syz.1.2543 (pid 15096) Use of int in max_burst socket option deprecated. [ 271.689388][T15096] Use struct sctp_assoc_value instead [ 271.821086][T15104] netlink: 'syz.3.2550': attribute type 29 has an invalid length. [ 271.868395][T15107] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 271.884580][T15108] netlink: 'syz.4.2549': attribute type 21 has an invalid length. [ 272.089405][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 272.116125][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'. [ 272.335714][T15138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.213820][T15183] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.718111][T15207] __nla_validate_parse: 7 callbacks suppressed [ 273.718129][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2577'. [ 274.479969][T15245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2584'. [ 274.661786][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2587'. [ 274.706038][T15250] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 275.160098][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 275.203128][T15292] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 275.373849][T15299] netlink: 'syz.0.2596': attribute type 11 has an invalid length. [ 275.403902][T15299] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2596'. [ 275.427627][T15297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.447375][T15297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.645802][T15297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.658323][T15297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.853440][T15297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.888242][T15297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.121166][T15297] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 276.151753][T15297] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.171731][T15297] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.350551][ T1151] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.373486][ T1151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.454548][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.471699][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.479908][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 276.514438][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.546159][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.600391][ T50] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.615736][ T50] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.750989][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2608'. [ 276.762467][T15344] veth5: entered allmulticast mode [ 276.829924][T15345] veth7: entered allmulticast mode [ 277.067233][T15364] ip6gre2: entered allmulticast mode [ 277.104058][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 277.135555][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2617'. [ 277.260886][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2619'. [ 277.457395][T15390] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 277.478214][T15390] bond6 (unregistering): Released all slaves [ 277.972777][T15391] bond6: option xmit_hash_policy: invalid value (64) [ 277.999204][T15391] bond6 (unregistering): Released all slaves [ 278.731421][T15441] __nla_validate_parse: 3 callbacks suppressed [ 278.731433][T15441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2637'. [ 278.781338][T15443] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2638'. [ 278.956365][T15421] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 279.011138][T15456] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2642'. [ 279.119476][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.137415][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.152292][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.171283][T15458] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2644'. [ 279.173350][T15461] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.216400][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.242319][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.270319][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.279203][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.287748][T15461] wg1 speed is unknown, defaulting to 1000 [ 279.439645][T15482] netlink: 'syz.0.2650': attribute type 21 has an invalid length. [ 279.474775][T15482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2650'. [ 280.285852][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'. [ 280.357979][T15510] syzkaller0: entered promiscuous mode [ 280.364708][T15510] syzkaller0: entered allmulticast mode [ 282.213588][T15540] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2660'. [ 282.560506][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 282.608341][T15584] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.634738][T15586] netlink: 'syz.2.2669': attribute type 6 has an invalid length. [ 282.747644][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 282.912600][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2676'. [ 283.013783][T15602] bond6 (unregistering): Released all slaves [ 283.080479][T15607] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 283.219812][T15615] veth11: entered promiscuous mode [ 283.690753][T15648] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 283.771639][T15656] netlink: 'syz.3.2694': attribute type 4 has an invalid length. [ 283.871722][T15665] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.251403][T15694] __nla_validate_parse: 4 callbacks suppressed [ 284.251419][T15694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2704'. [ 284.271501][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 284.280977][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 284.292060][T15696] team0: Device ip6gre1 is of different type [ 284.502184][T15706] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 284.515617][T15706] bond6 (unregistering): Released all slaves [ 284.551187][T15710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2709'. [ 284.557049][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'. [ 284.575488][T15714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2713'. [ 284.741279][T15724] netlink: 'syz.0.2716': attribute type 1 has an invalid length. [ 285.101093][T15745] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2723'. [ 285.475768][T15766] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2728'. [ 285.488617][T15766] syzkaller0: entered promiscuous mode [ 285.533449][T15766] syzkaller0: entered allmulticast mode [ 285.777908][T15782] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 285.902307][T15790] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 285.976155][T15796] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 286.076231][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2738'. [ 286.267225][T15810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2740'. [ 286.295766][T15809] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 286.436322][T15819] netlink: 'syz.1.2742': attribute type 11 has an invalid length. [ 286.534549][T15824] macsec1: entered promiscuous mode [ 286.557682][T15824] bridge0: entered promiscuous mode [ 286.565076][T15824] macsec1: entered allmulticast mode [ 286.576535][T15824] bridge0: entered allmulticast mode [ 286.584574][T15824] bridge0: port 1(macsec1) entered blocking state [ 286.591288][T15832] sctp: [Deprecated]: syz.4.2747 (pid 15832) Use of int in max_burst socket option deprecated. [ 286.591288][T15832] Use struct sctp_assoc_value instead [ 286.591576][T15824] bridge0: port 1(macsec1) entered disabled state [ 286.617992][T15824] bridge0: left allmulticast mode [ 286.624133][T15833] netlink: 'syz.1.2746': attribute type 23 has an invalid length. [ 286.634218][T15824] bridge0: left promiscuous mode [ 286.670476][T15829] 8021q: VLANs not supported on lo [ 286.812467][T15839] syzkaller1: entered promiscuous mode [ 286.830712][T15839] syzkaller1: entered allmulticast mode [ 287.379902][T15870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.891199][T15894] netlink: 'syz.0.2763': attribute type 3 has an invalid length. [ 288.022996][T15899] netlink: 'syz.1.2765': attribute type 9 has an invalid length. [ 288.055879][T15899] netlink: 'syz.1.2765': attribute type 4 has an invalid length. [ 288.888305][T15962] nbd: nbd64 already in use [ 289.010420][T15598] udevd[15598]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 289.455577][T16007] netlink: 'syz.0.2792': attribute type 17 has an invalid length. [ 289.480305][T16007] __nla_validate_parse: 12 callbacks suppressed [ 289.480324][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2792'. [ 289.570656][T16010] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.656887][T16019] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2795'. [ 289.858987][T16029] bond6: option min_links: invalid value (18446744073709551614) [ 289.868617][T16029] bond6: option min_links: allowed values 0 - 2147483647 [ 289.898360][T16029] bond6 (unregistering): Released all slaves [ 290.133599][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 291.139993][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.158540][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.177929][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.191616][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.201159][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.285877][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 291.450343][T16114] openvswitch: netlink: IP tunnel TTL not specified. [ 291.589495][ T5832] bond0: (slave syz_tun): Releasing backup interface [ 291.731144][T16135] openvswitch: netlink: Tunnel attr 8208 out of range max 16 [ 291.977124][T16148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2828'. [ 292.012721][T16148] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 292.126946][T16093] wg1 speed is unknown, defaulting to 1000 [ 292.172442][T16153] netlink: 'syz.3.2830': attribute type 10 has an invalid length. [ 292.200035][T16153] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 292.368304][T16159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 292.383599][T16093] chnl_net:caif_netlink_parms(): no params data found [ 292.480650][T16093] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.488258][T16093] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.495820][T16093] bridge_slave_0: entered allmulticast mode [ 292.503775][T16093] bridge_slave_0: entered promiscuous mode [ 292.511617][T16093] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.519333][T16093] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.527316][T16093] bridge_slave_1: entered allmulticast mode [ 292.534853][T16093] bridge_slave_1: entered promiscuous mode [ 292.567678][T16093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.580031][T16093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.612723][T16093] team0: Port device team_slave_0 added [ 292.621085][T16093] team0: Port device team_slave_1 added [ 292.648916][T16093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.656620][T16093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.683530][T16093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.698851][T16093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.706568][T16093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.733452][T16093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.822157][T16093] hsr_slave_0: entered promiscuous mode [ 292.844993][T16093] hsr_slave_1: entered promiscuous mode [ 292.851493][T16093] debugfs: 'hsr0' already exists in 'hsr' [ 292.873440][T16093] Cannot create hsr debugfs directory [ 292.889870][T16168] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2833'. [ 293.088990][T16176] syzkaller1: entered promiscuous mode [ 293.110336][T16176] syzkaller1: entered allmulticast mode [ 293.236860][T16187] tipc: New replicast peer: 255.255.255.255 [ 293.251264][T16187] tipc: Enabled bearer , priority 10 [ 293.264856][ T5833] Bluetooth: hci5: command tx timeout [ 293.360091][T16191] netlink: 'syz.2.2839': attribute type 1 has an invalid length. [ 293.368680][T16191] netlink: 'syz.2.2839': attribute type 4 has an invalid length. [ 293.373686][T16093] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.380014][T16191] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2839'. [ 293.408535][T16093] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.487990][T16093] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.533279][T16093] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.594918][T16206] syzkaller1: entered promiscuous mode [ 293.600874][T16206] syzkaller1: entered allmulticast mode [ 293.646764][T16093] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.673677][T16093] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.688837][T16216] openvswitch: netlink: IP tunnel dst address not specified [ 293.741508][T16093] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.760022][T16093] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.763282][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2848'. [ 293.833792][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2848'. [ 294.150963][T16238] netlink: 'syz.0.2855': attribute type 75 has an invalid length. [ 294.157105][T16093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.217099][T16093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.282030][T16093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.329598][T16093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.562769][T16263] netlink: 'syz.3.2861': attribute type 9 has an invalid length. [ 294.593516][T16263] netlink: 'syz.3.2861': attribute type 11 has an invalid length. [ 294.601484][T16263] netlink: 'syz.3.2861': attribute type 12 has an invalid length. [ 294.631831][T16269] __nla_validate_parse: 2 callbacks suppressed [ 294.631851][T16269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2863'. [ 294.658568][T16263] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2861'. [ 294.666117][T16093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.754513][T16093] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.835539][T16277] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 294.840905][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 294.845977][T16277] bond6: option packets_per_slave: allowed values 0 - 65535 [ 294.862436][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2863'. [ 294.864520][T16277] bond6 (unregistering): Released all slaves [ 294.871889][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2863'. [ 294.889105][T16275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2863'. [ 294.894565][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 294.909748][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.916961][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.998012][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.005278][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.062382][T16287] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2868'. [ 295.104937][T16287] tipc: Enabling of bearer rejected, media not registered [ 295.122426][T16287] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2868'. [ 295.138488][T16291] tipc: Enabling of bearer rejected, media not registered [ 295.217711][T16298] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 295.226433][T16295] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 295.276168][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2871'. [ 295.346267][ T5833] Bluetooth: hci5: command tx timeout [ 295.508046][T16313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.585838][T16093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.059341][T16345] syzkaller0: entered promiscuous mode [ 296.067749][T16345] syzkaller0: entered allmulticast mode [ 296.099013][T16343] syzkaller0: entered promiscuous mode [ 296.119218][T16343] syzkaller0: entered allmulticast mode [ 296.264209][T16093] veth0_vlan: entered promiscuous mode [ 296.298755][T16093] veth1_vlan: entered promiscuous mode [ 296.371035][T16093] veth0_macvtap: entered promiscuous mode [ 296.457787][T16093] veth1_macvtap: entered promiscuous mode [ 296.570182][T16093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.647520][T16093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.673970][ T2938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.701417][ T2938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.729398][ T2938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.742196][T16381] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 296.750519][ T2938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.941460][T16394] openvswitch: netlink: IP tunnel TTL not specified. [ 296.976838][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.982883][T16394] netlink: 'syz.0.2895': attribute type 29 has an invalid length. [ 296.994048][T16394] netlink: 'syz.0.2895': attribute type 29 has an invalid length. [ 296.994128][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.060906][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.101665][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.347484][T16406] syzkaller0: entered promiscuous mode [ 297.359778][T16406] syzkaller0: entered allmulticast mode [ 297.395130][T16412] syzkaller0: entered promiscuous mode [ 297.400656][T16412] syzkaller0: entered allmulticast mode [ 297.412123][T16419] netlink: 'syz.1.2903': attribute type 1 has an invalid length. [ 297.424144][ T5833] Bluetooth: hci5: command tx timeout [ 297.464323][T16419] 8021q: adding VLAN 0 to HW filter on device bond12 [ 297.495087][T16425] bond12: (slave veth9): Enslaving as an active interface with a down link [ 297.547810][T16419] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 299.341599][T16453] gtp0: entered promiscuous mode [ 299.350832][T16453] gtp0: entered allmulticast mode [ 299.503991][ T5833] Bluetooth: hci5: command tx timeout [ 299.598275][T16467] netlink: 'syz.1.2919': attribute type 9 has an invalid length. [ 299.609121][T16467] netlink: 'syz.1.2919': attribute type 6 has an invalid length. [ 299.656564][T16463] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 299.680476][T16463] bond1 (unregistering): Released all slaves [ 299.732250][T16468] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 299.763224][T16477] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 299.789975][T16477] tipc: Enabled bearer , priority 0 [ 299.808027][T16477] syzkaller0: entered promiscuous mode [ 299.823771][ T3675] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.835152][T16477] syzkaller0: entered allmulticast mode [ 299.851101][T16477] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 299.886606][T16485] __nla_validate_parse: 5 callbacks suppressed [ 299.886625][T16485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2923'. [ 299.903631][T16486] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 299.911737][T16486] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 299.944574][T16485] bridge8: entered promiscuous mode [ 299.963519][T16485] bridge8: entered allmulticast mode [ 300.053116][T16495] team0: Device ip6gre1 is of different type [ 300.111704][T16477] gre0: mtu less than device minimum [ 300.131765][T16471] tipc: Resetting bearer [ 300.203917][T16471] tipc: Disabling bearer [ 300.230997][T16509] netlink: 'syz.2.2928': attribute type 7 has an invalid length. [ 300.307183][T16505] syzkaller0: entered promiscuous mode [ 300.317251][T16505] syzkaller0: entered allmulticast mode [ 300.380742][T16524] netlink: 'syz.4.2932': attribute type 10 has an invalid length. [ 300.392540][T16524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2932'. [ 300.412484][T16525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.426691][T16523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2931'. [ 300.441048][T16525] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2930'. [ 300.625899][T16528] udevd[16528]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 300.648818][T16528] udevd[16528]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 300.747077][T16535] sctp: [Deprecated]: syz.2.2933 (pid 16535) Use of int in maxseg socket option. [ 300.747077][T16535] Use struct sctp_assoc_value instead [ 301.958954][T16520] netlink: 'syz.3.2930': attribute type 4 has an invalid length. [ 301.978436][T16524] team0: Port device geneve0 added [ 302.134965][T16537] bond7: Removing last ns target with arp_interval on [ 302.363945][T16557] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2942'. [ 302.387546][T16556] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2942'. [ 302.423870][T16556] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2942'. [ 302.483172][T16557] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2942'. [ 302.725027][T16574] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2946'. [ 302.869593][T16574] bond9 (unregistering): Released all slaves [ 303.105361][T16596] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 303.123021][ T5920] IPVS: starting estimator thread 0... [ 303.179857][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.190346][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.198837][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.208386][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.210166][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 303.227645][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.253786][T16598] IPVS: using max 29 ests per chain, 69600 per kthread [ 303.456841][T16609] openvswitch: netlink: IPv4 tun info is not correct [ 303.550072][T16609] ip6erspan0: entered promiscuous mode [ 303.561293][T16609] ip6erspan0: entered allmulticast mode [ 303.829191][T16638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.114849][ T4313] bond0: (slave netdevsim0): Releasing backup interface [ 304.788961][T16688] netlink: 'syz.0.2971': attribute type 5 has an invalid length. [ 305.011489][T16697] __nla_validate_parse: 5 callbacks suppressed [ 305.011508][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2973'. [ 305.267078][ T5833] Bluetooth: hci2: command tx timeout [ 305.312467][T16670] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 305.324922][T16670] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 305.333613][T16670] CPU: 0 UID: 0 PID: 16670 Comm: syz.2.2966 Not tainted syzkaller #0 PREEMPT(full) [ 305.343004][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.353435][T16670] RIP: 0010:rose_transmit_link+0x32/0x740 [ 305.359346][T16670] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 79 55 76 f7 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8 [ 305.380266][T16670] RSP: 0018:ffffc9001a8ff910 EFLAGS: 00010207 [ 305.386539][T16670] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000 [ 305.394911][T16670] RDX: ffffc9000c669000 RSI: 0000000000000224 RDI: 0000000000000225 [ 305.403003][T16670] RBP: 0000000000000000 R08: ffff888028c35b80 R09: 0000000000000008 [ 305.411093][T16670] R10: 000000000000000f R11: 0000000000000002 R12: ffff8880280ca500 [ 305.419509][T16670] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036 [ 305.427500][T16670] FS: 00007f99958876c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 305.436612][T16670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.443296][T16670] CR2: 00007f1f09b0ca10 CR3: 000000006b3d2000 CR4: 00000000003526f0 [ 305.451277][T16670] Call Trace: [ 305.454581][T16670] [ 305.457594][T16670] ? skb_put+0x11b/0x210 [ 305.461949][T16670] rose_write_internal+0x11dc/0x1ac0 [ 305.467599][T16670] ? lockdep_hardirqs_on+0x7b/0x110 [ 305.473000][T16670] ? __pfx_rose_write_internal+0x10/0x10 [ 305.479173][T16670] ? __timer_delete+0x5d/0x390 [ 305.483952][T16670] rose_release+0x25b/0x510 [ 305.488489][T16670] sock_close+0xc3/0x240 [ 305.493050][T16670] ? __pfx_sock_close+0x10/0x10 [ 305.498151][T16670] __fput+0x44c/0xa70 [ 305.502261][T16670] task_work_run+0x1d4/0x260 [ 305.506969][T16670] ? __pfx_task_work_run+0x10/0x10 [ 305.512099][T16670] ? task_work_add+0x391/0x440 [ 305.517152][T16670] ? __pfx_task_work_add+0x10/0x10 [ 305.522391][T16670] get_signal+0x11ec/0x1340 [ 305.526916][T16670] arch_do_signal_or_restart+0x9a/0x7a0 [ 305.532751][T16670] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 305.539033][T16670] exit_to_user_mode_loop+0x87/0x4e0 [ 305.544442][T16670] ? rcu_is_watching+0x15/0xb0 [ 305.549225][T16670] do_syscall_64+0x2c1/0xf80 [ 305.553926][T16670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.560247][T16670] ? trace_irq_disable+0x37/0x100 [ 305.566336][T16670] ? clear_bhb_loop+0x60/0xb0 [ 305.571130][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.577048][T16670] RIP: 0033:0x7f999498f749 [ 305.581588][T16670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.601639][T16670] RSP: 002b:00007f9995887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 305.610154][T16670] RAX: 0000000000000000 RBX: 00007f9994be5fa0 RCX: 00007f999498f749 [ 305.618224][T16670] RDX: 000000000000001c RSI: 00002000000007c0 RDI: 0000000000000004 [ 305.626338][T16670] RBP: 00007f9994a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.634315][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.642292][T16670] R13: 00007f9994be6038 R14: 00007f9994be5fa0 R15: 00007fff4ea79fd8 [ 305.650378][T16670] [ 305.653503][T16670] Modules linked in: [ 305.658793][T16670] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.683497][T16670] RIP: 0010:rose_transmit_link+0x32/0x740 [ 305.689509][T16670] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 79 55 76 f7 4c 8d 7d 36 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8 [ 305.775976][T16670] RSP: 0018:ffffc9001a8ff910 EFLAGS: 00010207 [ 305.820939][T16670] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000080000 [ 305.835136][T16670] RDX: ffffc9000c669000 RSI: 0000000000000224 RDI: 0000000000000225 [ 305.844560][T16670] RBP: 0000000000000000 R08: ffff888028c35b80 R09: 0000000000000008 [ 305.852564][T16670] R10: 000000000000000f R11: 0000000000000002 R12: ffff8880280ca500 [ 305.867671][T16670] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000036 [ 305.883327][T16670] FS: 00007f99958876c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 305.892417][T16670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.901256][T16670] CR2: 0000561d24cab138 CR3: 000000006b3d2000 CR4: 00000000003526f0 [ 305.910024][T16670] Kernel panic - not syncing: Fatal exception [ 305.919346][T16670] Kernel Offset: disabled [ 305.923689][T16670] Rebooting in 86400 seconds..