last executing test programs: 2.812445375s ago: executing program 1 (id=2864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb, 0xfffffffd, 0x2}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.413936835s ago: executing program 3 (id=2871): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b2afef57f6fa11a59d87aca370e6dd4bb062d641caf5ee50e9a6e70f305e21bcd9d2a6783f57b0d344b89bdbe40956d"], 0x28}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$can_raw(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7815", 0x16}], 0x2, 0x0, 0x0, 0x20000080}, 0x240000d0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003e00002e5091e564dde6000005000000000000000004001c000180180010"], 0x34}}, 0x84) 2.266310221s ago: executing program 2 (id=2874): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40015}, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r5, 0x0, 0x104}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000640)='spmi_read_begin\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89fc, &(0x7f0000000700)={'syztnl1\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x80b, 0x0, 0x0, 0x82, 0x4, 0x15c6, 0x5886, 0x101, 0x447ee642794ab667, 0x7, 'syz1\x00'}) shutdown(r0, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r10, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80910540}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0000900", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20004840}, 0x20004051) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="02000000e0fdc95acedbefb6f2b3e4aa16263002396cf1aa62e03ef6c7b27dff30b08235f12ee94251ca60f29253831c52cd2e9b2f59135da6e3478e7a445f32631c0f5f5ac4f1a00fd6fc44c8b3854f4ac2f1e140561214531c1faecf1b5392f26b3d7fe91a140669e097", @ANYRES16=r11, @ANYBLOB="05000000000000dc27a98ee2332e3f9c9ea9b3a876416364b982ad2254d67815", @ANYRES32=r13, @ANYRESOCT, @ANYBLOB="2710b55a0923dbbb8ccd5cd3df7f750e541dc3c668bb064824ea7b8b0fc6e66752d5a839ddd52f31d42f231b3ef312a4ec9315be020e616bec984179dd79c9627dd2dfcf7166e48f45be44adbadc34761020d2b0d820da551b5626a8d7025238c637c5457e892efe3a3b523e9ee05264b1083cd0a7073bfb8b"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8040) 2.218546846s ago: executing program 1 (id=2875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x300, 0xf8, 0x300, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0xffffffff, 0xffffffff, 0xff000000, 0xff], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'caif0\x00', 'syzkaller0\x00', {0xff}, {}, 0x3a, 0x8, 0x3, 0xd}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000844}, 0x1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9da8bc0000fedbdb251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c00038008000200020000000600010000030000060003005d550000050002"], 0x64}}, 0x0) 1.752863054s ago: executing program 3 (id=2880): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c0001"], 0x44}}, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1411, 0x2, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 1.74284622s ago: executing program 1 (id=2881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, r2, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100003042b00"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB="0800040008000000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 1.728233502s ago: executing program 2 (id=2882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="c7d8f55eb2b915ec050000000000fbdbdf080800030012684c77ba75c87fa0001f3e6157f02eb027a2c9c372646e9f6e3324c3f197bf584f649037f14c38ce226906468f2f8acdf6ea04e37e2fd02f0a736dbb92c4a587f2be4ee03950ed6c372d4e51cdb8cd75dd9bfd5a00000000957f20410dc1ffffff7f00000000a04b62b87a89c5bba81f7649b458289ee7", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 1.606477291s ago: executing program 4 (id=2883): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x90, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x7f, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff8"]}]}, 0x90}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1.604727905s ago: executing program 0 (id=2884): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x29, 0x80000, 0xfffffff3) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xf4, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a0003000535", 0x1e}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@dev, @empty}, &(0x7f0000000100)=0xc) unshare(0x20000400) r4 = socket$kcm(0x2, 0x1, 0x0) listen(r4, 0x2000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="a23d559f31ea7837b01d253f9d000000000065ee770000000600000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x20008000) 1.519092182s ago: executing program 3 (id=2885): ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x2c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65415}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 1.506157906s ago: executing program 4 (id=2886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x3}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x18, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffef000000", @ANYRES32=r6, @ANYRES16=0x0], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44044) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xc4, r8, 0x11, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x71}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40c4}, 0x8000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x68) socket$inet6(0xa, 0x5, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) 1.450370108s ago: executing program 2 (id=2887): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x1}], 0x10}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x200, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r4], 0x2c}}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x150, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x124, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff295}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x1a[\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+./(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b55}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x150}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) 1.348219054s ago: executing program 1 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="200027bd7000fbdbdf250200020008000300100000000500000002000000080003004700000014000100fe880000000000000000000000000001050006000d000000050005000500000014000100ff010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x151) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012021, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r9, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x20300}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r8, @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a48034801400350070696d3672656730000093fc64ac6df4002000000000e100350076", @ANYRESOCT=r7], 0xe8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.270467855s ago: executing program 2 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="68c3e700", @ANYRESDEC=r1, @ANYBLOB="0100"/14], 0x14}}, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x49c001, 0x0) (async, rerun: 32) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) (async) syz_emit_ethernet(0x16, &(0x7f0000000500)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_mc}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x80, 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0xa) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0xd0, r11, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "e3daab20b5c8ea9bf5ba25f67e66845fd55f9f1bcdc93eb86725c00279716d185b926c6443ad8e3c65ae27e27da849db32176bc2e5fc371287cf4232fe9c5f27b2843682ef35de3e9ad822d37344de2752d18447e850e1c8258ef901cea518b4bc030000000000000069f70d9150b74abd84d86093adf315b0e1934bf3368da3ca9d0ff72c77469942f55b4577d91b34f1a9"}]}, 0xd0}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000007c0)={0x44, r10, 0x2c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7b67}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000c}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000c26bd7000fcdbdf25420000000a000600080000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) (async) recvfrom$rose(r0, &(0x7f00000001c0)=""/181, 0xb5, 0x0, &(0x7f0000000280)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'bond_slave_0\x00', @multicast}) 1.153364731s ago: executing program 0 (id=2890): sendmsg(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000140)=@phonet={0x23, 0x8, 0xc, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="5e743c3cbe86a83842c6475e292169723c9a4a5438db6dfb295edff1cc8183855dafb16f634f23ab553f871ac92a92341692dc5d65515a04aa6c5eae5035f6027c66eea73c2e75696f2f913e4aacea0503e6d96cedade6c53d4e2646bf2e210984216a0be5c1196ead5be87314f03b37020453857089dfdf8ec71e9f9a8e2c82a3c732942e7b386124c1dc2708676aca029dc01da9486b4398f475ab4a82d3de59b97fdf2c6796b901f9ad72db74eb15cb933949d2a723396199a6a1553d13a0a2535bfac2053b05eb0dec7078de9f96c3fad8e30fddafdb304b0100e7033b92a62dad26ff95200c8c57", 0xea}], 0x1, &(0x7f0000000300)=[{0x30, 0x115, 0x3, "73b9c5efa5cc5424107d59f66e2deb6991e638d41377e6da823dd8"}, {0x70, 0x88, 0x9, "2a7af4c68972e1108a3050d3acb312c2b45e809f36eb5df2708ff4c54ec952ca64c0b698f8961e8c2e072f614ccc44010110284fc3f45ea4762a6f0f6a2576b855a539daabfaafc8f0ef84337ee540aff8ef817469f0c6353932baaf8e66"}, {0x30, 0x84, 0x5d17, "663d9086dfb6cd70c15061c242c874c5a0a8c08073fbb4de3f33e6e028"}, {0xd0, 0x101, 0x6, "9e52a5fc2d20cb1d54dbba0815ffac75cb6b9c3e9e63f8a25cb2e0ef8e51dfa5725f1c6aa88c95974b8ab5bdde19f46819afbb2d9260c1e84e2203fcd28caeeded6b65565cb5079e863fc3bb4a8fcdb2b0efafa7c8a686e42b3b04911e43df66dd37ba4364f274d80913c1e36025b67e7356f1f5032e628de459fbaaed7ecd97228b2f7b6da348de50eaa151287653187a2e76edde4cf77c618f76778b762628a051411cac932caa15a4e95d51fa87c300311d2a1e62b1d5b183a0d9be177575"}, {0xe8, 0x101, 0x5, "0d317b74de231b6029845cde10ef15800f539a84cbf7c37e74ff25baa289c4ece1bbd5b849d6aff79ef0b831e4f531e60b2d5e00b7c4199fd38e0f37f570cd9269d2bdebd2d72aa93767169ccd2606c8efaa434c01b1c951dc261d7df2bfc1fb4d6e1b10f5a7d8068e97a209b0577373921d28a91c912937590399d5f9b55df96c86cfb1e5676ccc98cdec16b7014cf81a38a7605b60ecf9c257ca01071f8acd9042a5bfe633c2d8f9bf7f69dd82c4798ba082f7e9b0565765cfa5de5fad8fe441fee68024fa44498ac49b792fa074dc9efb6921c0cf"}, {0x1010, 0x104, 0x8, "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"}, {0x20, 0x1, 0x4, "1df98acec79d0339f50438f1"}, {0xd8, 0x10f, 0x3, "babe951ffec559b8262053559435a4a06aa19b28e7b49c99c12e49c5f7884d45be32c003e8802e24dce7a27d018e1a1914313aaee76045afcd0d256ccd45ea93cb1de54d2be66312a2b9d7ed6154351c3532b1265e430833298abb6ef5d27bc638ccfc55a7483530e45379fb5790c88c78443f1ac6eac22953ce6f600475be265a8b99b35488a4fff702176313b7fc4edba05e693e43ae09e257359d4cc6478d6b0a28eae85af3d726ea3707623c8ecba5da9ca28dd376bb993fb2d6fe65ae3a91da2f26ec783b1e"}, {0x70, 0x109, 0x81, "0588e353023fa57b46a81dfa458c515d3795260e08a9e26be852a8f523ba8cc012267366620c381d206cb475a21170e7f9535aa0886c51bf2efe18bad632c0c2e23dc4ac374499e0b4e26fb77e240c88d31f05283e558d46804d281c1b19c0"}], 0x1400}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0xa, 0x78}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000) (rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffd38}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) (async, rerun: 32) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000001740)={0x7, 0x7, 0x4}, &(0x7f0000001780)=0x28) 1.152463497s ago: executing program 4 (id=2891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x39c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x71a}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x229}], @NL80211_ATTR_FRAME={0x53, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="1ebfe2732b5f", {0x0, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x3, @val=0x600, @val, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0x5, 0x2, 0x0, 0x347, 0x0, 0x1, 0x1, 0x3}, 0x300, 0xfffffff8, 0x8}}, @val={0x65, 0x12, {@initial, @device_b}}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2ef, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x1, 0x2b7}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x6223, 0x1, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x65, "2b5759cfeb26983f464e89e5143c3006da872b5f5d8c6992288fb72e103c26c9188cbc3f52cdfddd15c93622b0710bb9c25ebe30d90de9ef077dee1b4d213affc0a8da37ee2817533a7206577d742ff6500b4bb3fced0f3a026f5f1c4eae832fa0026b08da"}, {0xdd, 0x79, "62803327b41ef803bae67e96ba3bd8f866837b34eb11f3d47456c2427ab716b54ae440df2355572bcf7aad23c84020d6945e6a0630a8b1c6ff002e8cbbfbb2f208c73635e19b92f5e77945f3ec3acbf2100177a569255143feae0f84db3cb061542e20a2767f757ee9754ad68a1c31e2a41d2e9ccdc85458eb"}, {0xdd, 0xc9, "95d4590c11362ddf9f07e5c9ae0f0e4a2e3ccaa10e38aa63f664b0b41a2562f5c81adfff7529e950935da08e0d78ab51660aa6edd61a0cf0c160058232e9b731aeff0f359cff78678136e6173ca5344eb485f5165e525515b77f966896487fb11d20c8cab27fe6d0d8eec3222f9b759ca4fad97f545051f56663da4172709d4e0f0f1cbabf3261409e778fe899c7b9c866cdc6784265fdcd5c66df3671f1079bc0e8c1cdb1c0ef234c0163dbe2b04528df07d5d697be0fa070738e85083ed665a71c3fd7f64e7592ad"}, {0xdd, 0x35, "c59e69b9a47505c4a2d00a35c3ed899f1f8d10bc63c8bf8f4094a234a2a3f88321cafea2ac381636ee64483187d3c35ec0481c3a66"}, {0xdd, 0xdd, "27a6cdf42739f2ef3c6ef40c479abe87d89fe288e5c6fc9e80a3f4ea671113227c3c2480c8dca600f715c73a378f06406f9a39078551a87e9563bf9552c0816729c8da6f650ee955acccb0034ef5002905da96e823a68cbdb80e25369baa76ffd9ae60533170576324ae94d3b65a7b2179f99cdde2f879ef79886a60c33c391fcedd356531976ab4c99ecffbda79a145497761717cc441a77456060c9663abdb427887ad3f6720a2952f22e0a9a9d7c94a9fdb3c4486012383bce73451f65a0f489e168c15a069df9053f1d253b6574147566bc44031eb6e7c31a743b2"}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000080) socket(0x10, 0x80002, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) accept$packet(r6, 0x0, &(0x7f0000000580)) (async) r9 = accept$packet(r6, 0x0, &(0x7f0000000580)) bind$packet(r9, &(0x7f00000005c0)={0x11, 0x11, r3, 0x1, 0x1, 0x6, @remote}, 0x14) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x0, 0x0, 0x0, 0xf}}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x140e, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040884) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00000000000061117100000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}}}, 0x1d) close(r7) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24}, 0x94) 996.486096ms ago: executing program 0 (id=2892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 825.197973ms ago: executing program 0 (id=2893): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x2) (async) sendfile(r0, r1, 0x0, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000001400)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001440)={r4, 0xb9, "dfa4ad306170203a9cc29882fed6d846e5defe6c8e1bc62e573870b2a89973d12edd5dcec5c3fc86a28ac9dcc7bb1cad444a5e5627ee99d1737107d17cc4a8d586083eef9f2509ec196aeed1de31499c49d55918477a7f8426506b3a583820988172fb12932c99bd12fe9de5f89603b41269356293da06ced3f3be94e3ec63690889637a633b6747090d6b39c399f7131e3da115ee65dd81aefac2e02202e0c76a89f9536718bf4ebb64348136da98b272944ced6b423f6cd3"}, &(0x7f0000001540)=0xc1) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="24020000652d77cadf7a", @ANYRES16=r3, @ANYBLOB="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"/542], 0x224}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="24020000652d77cadf7a", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002401088080000080500009804c000080060001000200000008000200ac1414aa0500030002000000060001000200000008000200e00000020500030001000000060001000200000008000200ac1414aa050003000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500060000004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88082e741a88b64f6dd9218ad21b44b472e44f1d1807ee6675c5400008024000200e0e75b4262080ddf4d7071dc42a16b58c27ead3c17f0f6dfdfcf01a25bba5fe80800030002000000240009801c0000800600010002000000080002007f00000105000300030000000400008024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e800008807c00008008000a0001000000200004000a004e2380000001000000000000000000000000000000000700000024000200c597267a7a58569d5745b712d646be422614446a1bb278cd23c4cdd7c57dd0e124000100000000000000000000000000000000000000000000000000000000000000000008000a000100000024000300000000000000000000000000000000000000000000000000000000000000000024000300"/542], 0x224}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 642.809739ms ago: executing program 3 (id=2894): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x20}) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="14002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000b64f7286f42ef4dcf087ebe8d66f9e8a313ccbeda23acb66c382589d729b2df7c142d03e4dc6dce517f0c14dab1f475815cad5f12ed0ec42afa150146f3bfabd87b97e6a18d0f4c335262c9f49fe1d2b1325e46dfc9037118e948a0c84d117b315ae02ec66521d464498fa007b8949a997a10e628ed0a15ae0fa006c7d96f1891e3986ddc0333185a12a1e"], 0x40}}, 0x0) 388.610335ms ago: executing program 2 (id=2895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000280)={0x50, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}}, 0x0) 340.331008ms ago: executing program 0 (id=2896): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x90, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x7f, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff8"]}]}, 0x90}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) 339.805523ms ago: executing program 1 (id=2897): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41071, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) (async) r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='bbr\x00', 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @mss={0x2, 0x9}, @window={0x3, 0x8, 0x6}, @timestamp, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe10", 0x54, 0x805, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) socket$isdn(0x22, 0x2, 0x21) (async) r3 = socket$isdn(0x22, 0x2, 0x21) close(r3) (async) close(r3) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x0, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6050230000140600fe9000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYBLOB="9af8fef9dd0f318a4798274d5db56c85e44d04453ac06e2724861554af56b5a6017352de9ccfd5bd04e480df46f971c7d914d357fb2fd9e02948380cf3b21a1898ed57265a72f6cc136005d62cc76ece25b7a7b4a876278a6894f1ff2b37e4b044d291545fce3f41715e6099aa66ea102fc7b800793d1cde93d8986f525e27536bb4f218416159643d265c1aa9fc7ba13845e6ac3c55ff0497b076edf26ed74e496d9482404972b5b726f3c1018d48e9568a504c16ce45220f3a208e", @ANYBLOB="50c2000090780000"], 0x0) unshare(0x20000400) (async) unshare(0x20000400) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="4000000063013000000000009500000000000000000000000000000000000000260554d9121685b538e9494cad1890f6ca3a8af05c2a4c0c9db1384304c79728b986eb9ad9ed8e43d684a6ee5b"], &(0x7f0000003ff6)='GPL\x00', 0xfff, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="4000000063013000000000009500000000000000000000000000000000000000260554d9121685b538e9494cad1890f6ca3a8af05c2a4c0c9db1384304c79728b986eb9ad9ed8e43d684a6ee5b"], &(0x7f0000003ff6)='GPL\x00', 0xfff, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 278.146702ms ago: executing program 4 (id=2898): getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x427e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x387}, 0xe) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000200)={{0x5, 0x1ff}, 0x100, './file0\x00'}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0x0, [0x8, 0x5, 0x4, 0x7, 0x9], 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000003c0)}, &(0x7f0000000480)=0x78) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0x0, [0x8, 0x5, 0x4, 0x7, 0x9], 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000003c0)}, &(0x7f0000000480)=0x78) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000500)={0x0, 0x6}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000580)={r4, 0x6}, &(0x7f00000005c0)=0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'bond_slave_0\x00', 0x800}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'bond_slave_0\x00', 0x800}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040015) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040015) sendmsg$nl_crypto(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)=@upd={0x108, 0x12, 0x601, 0x70bd25, 0x25dfdbff, {{'crct10dif-arm64-neon\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0xfffffff9}, {0x8, 0x1, 0xea5}, {0x8, 0x1, 0x10}]}, 0x108}}, 0x4c0c4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, &(0x7f00000009c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x1, 0x2, 0x5, 0x4, 0x7], 0x2, 0x1}, {0xffffffffffffffff, [0x1, 0x1, 0x2, 0x5, 0x1, 0x2], 0x4, 0x4}}}}, {{@ip={@broadcast, @remote, 0xffffff00, 0x0, 'batadv_slave_1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x2, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x80000000, 0x7f, 0x2}}}, {{@ip={@multicast2, @private=0xa010100, 0xffffff00, 0xffffffff, 'syzkaller0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0xa60, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000004) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000004) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000ec0)={0x7, 0x1}) bind$l2tp6(r2, &(0x7f0000000f00)={0xa, 0x0, 0xdc56, @mcast1, 0x2, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000f80)={'wg2\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000fc0)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f00000010c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f00000016c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001100)=@polexpire={0x544, 0x1b, 0x400, 0x70bd26, 0x25dfdbfe, {{{@in=@multicast1, @in6=@mcast1, 0x4e21, 0x6, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x67, 0x0, 0xee00}, {0xfffffffffffffc01, 0xfec, 0x100000000, 0x2, 0x82, 0x8, 0x1ff000000, 0xc}, {0x7, 0x9, 0xe, 0x3}, 0x3d, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, 0x2}, [@sec_ctx={0xf5, 0x8, {0xf1, 0x8, 0x1, 0xff, 0xe9, "5fa7efe661c28b7b949434d3555bd0086c612323cc0be3c91df90487aed32126191d1aa168d1ce959d72d499d0a154bb1cff6ce11c64524e803a8587dd36b9e5e51553c67acd19487559cb399acfb7665df8239263457861a008dae2f65cb53a1abfb0507afeda483a134e3d0e0d9f0603eb216419c6534ae29cebf8cfa1f4e534f0414276148cec0eec15d2b722f41531b31810717e070d31e62fd3c846293da36ffb5b90681e707de2c60970f2c75e124b0ee3e8911bf83d84404e5affcca391e4572b99056730d82fc0ba5f7c2adb7968a03c168faafea393373d25038936a76b75b0c0d6a7a065"}}, @algo_comp={0x121, 0x3, {{'deflate\x00'}, 0x6c8, "454832972629a734858850ae2121974344e0fd9657142977376f6b012245de39a0b3f69510fea377bca120ee8479d2ded5ea1784e7c7a34bfab73aeced6db653ca2e0eb143cbb66cb14192cae1bdfda39300943a233a0ac6b60c325a0c2a977059d6dff3fe0a772d775d6a1eccf06b69e11dde0d7f5b22e4c423e88a4085c2a0d3854cd9e3ed0640eebbd6b790b9e4490f6bbe61f5c926b3efd3204ec045a6363277cc2fe1984f1b0a007508a927ff325920c29ca97ecb27742ba3647f1fc790b8f9890694df8fbf073c89e6a488d70a9c82eff8c543b97f72"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @offload={0xc, 0x1c, {0x0, 0x1}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@multicast2, 0x4e22, 0x800, 0x4e21, 0x8, 0x2, 0x20, 0x80, 0x21, r8, r10}, {@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4d2, 0x6c}, @in=@multicast2, {0x7f, 0xfffffffffffffff8, 0xe, 0x5, 0x3, 0x1, 0x52, 0xfff}, {0x8c, 0x49, 0x7, 0x9}, {0x0, 0x2, 0x4}, 0x70bd2b, 0x3501, 0xa, 0x4, 0x2, 0x8a}}, @algo_auth={0x11d, 0x1, {{'hmac(blake2b-384)\x00'}, 0x6a8, "bb3be6c186f530b963313976ed5ce4b8b71af94d223015cdb87d551e0b32e7cee67162a789bfbc5b33a7b010a8a26389dba902e9c9c85a6e80379320a22f37e83ba1185b493aa04bfcaff28eeea22b16b27bd8a0674e733bd0795322b424b5b2228ff47e115f350ba439c9e1d4b4aa0dddcd3f590242ade199b4394c7bcec2e2892972bdae1ff718b5980415b5770acb9f6980611e34e5468c366456880701ddb66f14d10dcfb221cf66281be983622b793d5174285822e0f5060143ca6f7a098a32800406a48f19da4f2083d42d669c412df10baf"}}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x2, 0x8, 0x7}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in6=@loopback, 0xa, 0x10, 0xfe}}]}, 0x544}}, 0x4000) (async) sendmsg$nl_xfrm(r2, &(0x7f00000016c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001100)=@polexpire={0x544, 0x1b, 0x400, 0x70bd26, 0x25dfdbfe, {{{@in=@multicast1, @in6=@mcast1, 0x4e21, 0x6, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x67, 0x0, 0xee00}, {0xfffffffffffffc01, 0xfec, 0x100000000, 0x2, 0x82, 0x8, 0x1ff000000, 0xc}, {0x7, 0x9, 0xe, 0x3}, 0x3d, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, 0x2}, [@sec_ctx={0xf5, 0x8, {0xf1, 0x8, 0x1, 0xff, 0xe9, "5fa7efe661c28b7b949434d3555bd0086c612323cc0be3c91df90487aed32126191d1aa168d1ce959d72d499d0a154bb1cff6ce11c64524e803a8587dd36b9e5e51553c67acd19487559cb399acfb7665df8239263457861a008dae2f65cb53a1abfb0507afeda483a134e3d0e0d9f0603eb216419c6534ae29cebf8cfa1f4e534f0414276148cec0eec15d2b722f41531b31810717e070d31e62fd3c846293da36ffb5b90681e707de2c60970f2c75e124b0ee3e8911bf83d84404e5affcca391e4572b99056730d82fc0ba5f7c2adb7968a03c168faafea393373d25038936a76b75b0c0d6a7a065"}}, @algo_comp={0x121, 0x3, {{'deflate\x00'}, 0x6c8, "454832972629a734858850ae2121974344e0fd9657142977376f6b012245de39a0b3f69510fea377bca120ee8479d2ded5ea1784e7c7a34bfab73aeced6db653ca2e0eb143cbb66cb14192cae1bdfda39300943a233a0ac6b60c325a0c2a977059d6dff3fe0a772d775d6a1eccf06b69e11dde0d7f5b22e4c423e88a4085c2a0d3854cd9e3ed0640eebbd6b790b9e4490f6bbe61f5c926b3efd3204ec045a6363277cc2fe1984f1b0a007508a927ff325920c29ca97ecb27742ba3647f1fc790b8f9890694df8fbf073c89e6a488d70a9c82eff8c543b97f72"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @offload={0xc, 0x1c, {0x0, 0x1}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@multicast2, 0x4e22, 0x800, 0x4e21, 0x8, 0x2, 0x20, 0x80, 0x21, r8, r10}, {@in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4d2, 0x6c}, @in=@multicast2, {0x7f, 0xfffffffffffffff8, 0xe, 0x5, 0x3, 0x1, 0x52, 0xfff}, {0x8c, 0x49, 0x7, 0x9}, {0x0, 0x2, 0x4}, 0x70bd2b, 0x3501, 0xa, 0x4, 0x2, 0x8a}}, @algo_auth={0x11d, 0x1, {{'hmac(blake2b-384)\x00'}, 0x6a8, "bb3be6c186f530b963313976ed5ce4b8b71af94d223015cdb87d551e0b32e7cee67162a789bfbc5b33a7b010a8a26389dba902e9c9c85a6e80379320a22f37e83ba1185b493aa04bfcaff28eeea22b16b27bd8a0674e733bd0795322b424b5b2228ff47e115f350ba439c9e1d4b4aa0dddcd3f590242ade199b4394c7bcec2e2892972bdae1ff718b5980415b5770acb9f6980611e34e5468c366456880701ddb66f14d10dcfb221cf66281be983622b793d5174285822e0f5060143ca6f7a098a32800406a48f19da4f2083d42d669c412df10baf"}}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x2, 0x8, 0x7}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in6=@loopback, 0xa, 0x10, 0xfe}}]}, 0x544}}, 0x4000) sendmsg$can_bcm(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x1d, r9}, 0x10, &(0x7f00000017c0)={&(0x7f0000001740)={0x7, 0x10, 0xa, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x10, 0x2, 0x0, 0x0, "85bf713120c118ee59a2233dd248e2f695426998ad61f89a915f7a989c494c09563d7717a8432b3d9339bd0b093c96ad72c9a5d2013d1201cc1f6b2fc8d781ea"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000045}, 0x44800) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r2) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x4c, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4142}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4800) (async) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x4c, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4142}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4800) sendmsg$nl_xfrm(r2, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@newspdinfo={0x64, 0x24, 0x400, 0x70bd28, 0x25dfdbff, 0xdf, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040040}, 0x81) (async) sendmsg$nl_xfrm(r2, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@newspdinfo={0x64, 0x24, 0x400, 0x70bd28, 0x25dfdbff, 0xdf, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040040}, 0x81) 276.434121ms ago: executing program 3 (id=2899): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000000200)) listen(r0, 0x0) 219.801867ms ago: executing program 4 (id=2900): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 131.4675ms ago: executing program 2 (id=2901): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x80c4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x2, 0xfffffff9, 0x0, @rand_addr=' \x01\x00', @loopback, 0x80, 0x7800, 0x47ff, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9], 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r12}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x144, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) 129.181152ms ago: executing program 0 (id=2902): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c) (async, rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) (rerun: 64) 73.516999ms ago: executing program 4 (id=2903): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x8}, 0x200480c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 45.42654ms ago: executing program 3 (id=2904): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x28) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005003c0012800b00010062726964676500002c028005001900020000000c0023000f000000000000000c00220006000000000000000500240001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000700)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) write(r5, &(0x7f0000000140)="24000000010006", 0x7) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x3, 0x2, @vifc_lcl_ifindex=r1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x38, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x1d, 0x5, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004824) 0s ago: executing program 1 (id=2905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e000018000280040012000600020001ab"], 0x48}}, 0x88890) kernel console output (not intermixed with test programs): veth0_to_bond: entered promiscuous mode [ 133.124132][ T7844] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 133.150049][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.153305][ T7843] netlink: 'syz.1.486': attribute type 83 has an invalid length. [ 133.163881][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.179518][ T7843] netlink: 'syz.1.486': attribute type 83 has an invalid length. [ 133.192219][ T7843] netlink: 'syz.1.486': attribute type 83 has an invalid length. [ 133.201231][ T7843] netlink: 'syz.1.486': attribute type 83 has an invalid length. [ 133.214697][ T7843] netlink: 'syz.1.486': attribute type 83 has an invalid length. [ 133.223618][ T7851] net veth1_virt_wifi .: renamed from virt_wifi0 [ 133.466720][ T7858] netlink: set zone limit has 8 unknown bytes [ 133.508312][ T7862] bridge0: left allmulticast mode [ 133.523425][ T7862] bridge0: entered allmulticast mode [ 133.541411][ T7863] Bluetooth: MGMT ver 1.23 [ 133.580128][ T7862] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 133.692709][ T7871] siw: device registration error -23 [ 133.877540][ T7882] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 134.032482][ T7893] tipc: Enabling of bearer rejected, failed to enable media [ 134.388993][ T7910] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 134.400617][ T7910] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 134.984134][ T7946] bond2: entered promiscuous mode [ 134.991437][ T7946] bond2: entered allmulticast mode [ 134.999136][ T7946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.668596][ T7976] team0: Device gtp0 is of different type [ 135.939276][ T67] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 137.089042][ T8027] __nla_validate_parse: 8 callbacks suppressed [ 137.089060][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 137.260722][ T8032] openvswitch: netlink: Key type 29 is not supported [ 137.478007][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'. [ 137.558137][ T8045] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.545'. [ 137.702872][ T8052] bond3: entered allmulticast mode [ 137.709322][ T8052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.719576][ T8052] bridge0: port 3(bond3) entered blocking state [ 137.728088][ T8052] bridge0: port 3(bond3) entered disabled state [ 137.738276][ T8052] bond3: entered promiscuous mode [ 137.744607][ T8052] bridge0: port 3(bond3) entered blocking state [ 137.752077][ T8052] bridge0: port 3(bond3) entered forwarding state [ 137.954181][ T8064] netlink: 32 bytes leftover after parsing attributes in process `syz.3.549'. [ 138.179430][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 138.300451][ T8087] validate_nla: 63 callbacks suppressed [ 138.300471][ T8087] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 138.346734][ T8087] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 138.466796][ T8087] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 138.549600][ T8095] netlink: 'syz.4.558': attribute type 4 has an invalid length. [ 138.560885][ T36] bridge0: port 3(bond3) entered disabled state [ 138.727596][ T8107] netlink: 'syz.2.560': attribute type 11 has an invalid length. [ 138.772977][ T8107] netlink: 'syz.2.560': attribute type 11 has an invalid length. [ 138.852731][ T8117] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 138.939571][ T8122] netlink: 'syz.4.565': attribute type 10 has an invalid length. [ 138.981173][ T8122] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.012562][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 139.251416][ T8134] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 139.267431][ T8134] tipc: Enabled bearer , priority 10 [ 139.670307][ T8153] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.682915][ T24] IPVS: starting estimator thread 0... [ 139.795683][ T8157] IPVS: using max 32 ests per chain, 76800 per kthread [ 139.828386][ T8161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.573'. [ 139.907853][ T8167] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 139.918805][ T8168] netlink: 'syz.2.575': attribute type 11 has an invalid length. [ 139.927785][ T8167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.576'. [ 140.179690][ T8185] sctp: [Deprecated]: syz.0.578 (pid 8185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.179690][ T8185] Use struct sctp_sack_info instead [ 140.220004][ T8185] sctp: [Deprecated]: syz.0.578 (pid 8185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.220004][ T8185] Use struct sctp_sack_info instead [ 140.386124][ T5957] tipc: Node number set to 3619912084 [ 140.414760][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.580'. [ 140.458209][ T8194] netlink: 96 bytes leftover after parsing attributes in process `syz.2.579'. [ 140.595165][ T8197] vlan1: entered allmulticast mode [ 140.629205][ T8197] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 140.682797][ T8202] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 141.620477][ T30] audit: type=1800 audit(1753917363.335:2): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.587" name="memory.events" dev="tmpfs" ino=619 res=0 errno=0 [ 142.100990][ T8269] syzkaller1: entered promiscuous mode [ 142.122236][ T8269] syzkaller1: entered allmulticast mode [ 142.353628][ T8283] __nla_validate_parse: 4 callbacks suppressed [ 142.353646][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 142.373904][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 142.444294][ T8285] ieee802154 phy1 wpan1: encryption failed: -90 [ 142.669273][ T8298] tipc: Started in network mode [ 142.709678][ T8298] tipc: Node identity 5a68fa735da4, cluster identity 4711 [ 142.732274][ T8298] tipc: Enabled bearer , priority 0 [ 142.918068][ T8307] syzkaller0: entered promiscuous mode [ 142.935058][ T8307] syzkaller0: entered allmulticast mode [ 143.003181][ T8316] tipc: Resetting bearer [ 143.060321][ T8321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.608'. [ 143.114454][ T8297] tipc: Resetting bearer [ 143.198533][ T8297] tipc: Disabling bearer [ 143.253800][ T8331] tipc: Enabled bearer , priority 0 [ 143.290220][ T8324] syzkaller0: entered promiscuous mode [ 143.308707][ T8324] syzkaller0: entered allmulticast mode [ 143.479181][ T8340] netlink: 96 bytes leftover after parsing attributes in process `syz.3.613'. [ 143.571550][ T8324] tipc: Resetting bearer [ 143.651919][ T8323] tipc: Resetting bearer [ 143.790244][ T8323] tipc: Disabling bearer [ 143.936840][ T8361] tipc: Enabled bearer , priority 0 [ 143.994717][ T8361] syzkaller0: entered promiscuous mode [ 144.045342][ T8361] syzkaller0: entered allmulticast mode [ 144.073370][ T8376] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 144.204390][ T8365] tipc: Resetting bearer [ 144.288113][ T8359] tipc: Resetting bearer [ 144.392172][ T8359] tipc: Disabling bearer [ 144.558464][ T3448] veth0_to_bond: left promiscuous mode [ 144.962591][ T8426] netlink: 72 bytes leftover after parsing attributes in process `syz.1.636'. [ 145.097713][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.106515][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.474191][ T8410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.938782][ T49] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.959203][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.640'. [ 145.962188][ T49] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.975956][ T8452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 145.992161][ T49] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.021053][ T49] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.127881][ T8452] gretap1: entered promiscuous mode [ 146.133504][ T8452] gretap1: entered allmulticast mode [ 146.238313][ T8454] tipc: Enabled bearer , priority 0 [ 146.270489][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.294142][ T8470] netlink: 9 bytes leftover after parsing attributes in process `syz.3.644'. [ 146.324022][ T49] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.355316][ T8458] syzkaller0: entered promiscuous mode [ 146.357412][ T8473] netlink: 5 bytes leftover after parsing attributes in process `syz.3.644'. [ 146.367206][ T8458] syzkaller0: entered allmulticast mode [ 146.399468][ T8470] gretap0: entered promiscuous mode [ 146.410313][ T8470] gretap0: left allmulticast mode [ 146.459692][ T8473] 0{X: renamed from gretap0 [ 146.487058][ T8473] 0{X: left promiscuous mode [ 146.492782][ T8473] 0{X: entered allmulticast mode [ 146.530493][ T8473] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 146.616360][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.642821][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.671987][ T8476] hsr0 speed is unknown, defaulting to 1000 [ 146.679939][ T8449] tipc: Resetting bearer [ 146.714681][ T8448] tipc: Resetting bearer [ 146.828893][ T8448] tipc: Disabling bearer [ 146.986638][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 147.052086][ T8473] syz.3.644 (8473) used greatest stack depth: 19288 bytes left [ 147.281727][ T8514] veth3: entered allmulticast mode [ 147.370405][ T8516] veth5: entered allmulticast mode [ 147.813986][ T8537] __nla_validate_parse: 7 callbacks suppressed [ 147.814005][ T8537] netlink: 48 bytes leftover after parsing attributes in process `syz.2.663'. [ 148.017742][ T8545] openvswitch: netlink: IPv4 tun info is not correct [ 148.347045][ T8564] netlink: 'syz.0.673': attribute type 21 has an invalid length. [ 148.376039][ T8564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.673'. [ 148.396943][ T8566] netlink: 'syz.3.672': attribute type 1 has an invalid length. [ 148.416689][ T8564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'. [ 148.587659][ T8582] netlink: 'syz.0.673': attribute type 4 has an invalid length. [ 148.630328][ T8566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.660661][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 148.703106][ T8574] bond2: (slave gretap0): making interface the new active one [ 148.715129][ T8574] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 148.783190][ T8586] netlink: 'syz.0.673': attribute type 4 has an invalid length. [ 148.831041][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'. [ 148.861221][ T8588] sit2: entered promiscuous mode [ 148.924973][ T8588] sit2: entered allmulticast mode [ 148.943386][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 149.139295][ T8604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.147482][ T8604] IPv6: NLM_F_CREATE should be set when creating new route [ 149.148662][ T8602] netlink: 'syz.2.683': attribute type 12 has an invalid length. [ 149.251516][ T8605] lo: entered allmulticast mode [ 149.298655][ T8605] tunl0: entered allmulticast mode [ 149.319818][ T8605] gre0: entered allmulticast mode [ 149.389906][ T8605] gretap0: entered allmulticast mode [ 149.540191][ T8605] erspan0: entered allmulticast mode [ 149.625205][ T8605] ip_vti0: entered allmulticast mode [ 149.668381][ T8605] ip6_vti0: entered allmulticast mode [ 149.728644][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 149.767994][ T8605] sit0: entered allmulticast mode [ 149.843457][ T8605] ip6tnl0: entered allmulticast mode [ 150.001856][ T8605] ip6gre0: entered allmulticast mode [ 150.032601][ T8605] syz_tun: entered allmulticast mode [ 150.060975][ T8605] ip6gretap0: entered allmulticast mode [ 150.089577][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.098221][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.124459][ T8605] bridge0: entered allmulticast mode [ 150.226508][ T8605] bond0: entered allmulticast mode [ 150.239360][ T8605] bond_slave_0: entered allmulticast mode [ 150.247207][ T8605] bond_slave_1: entered allmulticast mode [ 150.253807][ T8605] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 150.296518][ T8605] team0: entered allmulticast mode [ 150.301784][ T8660] openvswitch: netlink: Unknown key attributes 2 [ 150.304355][ T8605] team_slave_0: entered allmulticast mode [ 150.317904][ T8605] team_slave_1: entered allmulticast mode [ 150.362213][ T8605] nlmon0: entered allmulticast mode [ 150.388484][ T8605] caif0: entered allmulticast mode [ 150.398681][ T8605] vxcan0: entered allmulticast mode [ 150.407592][ T8605] vxcan1: entered allmulticast mode [ 150.421371][ T8605] veth0: entered allmulticast mode [ 150.433889][ T8605] veth1: entered allmulticast mode [ 150.453686][ T8605] wg0: entered allmulticast mode [ 150.464009][ T8605] wg1: entered allmulticast mode [ 150.489528][ T8605] wg2: entered allmulticast mode [ 150.499734][ T8605] veth0_to_bridge: entered allmulticast mode [ 150.519176][ T8605] veth1_to_bridge: entered allmulticast mode [ 150.555162][ T8605] veth0_to_bond: entered allmulticast mode [ 150.572297][ T8605] veth1_to_bond: entered allmulticast mode [ 150.590428][ T8605] veth0_to_team: entered allmulticast mode [ 150.611001][ T8605] veth1_to_team: entered allmulticast mode [ 150.628201][ T8605] veth0_to_batadv: entered allmulticast mode [ 150.641926][ T8605] batadv_slave_0: entered allmulticast mode [ 150.655254][ T8605] veth1_to_batadv: entered allmulticast mode [ 150.678917][ T8605] batadv_slave_1: entered allmulticast mode [ 150.699634][ T8605] xfrm0: entered allmulticast mode [ 150.719411][ T8605] veth0_to_hsr: entered allmulticast mode [ 150.735830][ T8605] hsr_slave_0: entered allmulticast mode [ 150.753410][ T8605] veth1_to_hsr: entered allmulticast mode [ 150.765719][ T8605] hsr_slave_1: entered allmulticast mode [ 150.778113][ T8605] hsr0: entered allmulticast mode [ 150.790757][ T8605] veth1_virt_wifi: entered allmulticast mode [ 150.801124][ T8605] veth0_virt_wifi: entered allmulticast mode [ 150.811227][ T8605] net veth1_virt_wifi .: entered allmulticast mode [ 150.825266][ T8605] veth1_vlan: entered allmulticast mode [ 150.838618][ T8605] veth0_vlan: entered allmulticast mode [ 150.927578][ T8605] vlan0: entered allmulticast mode [ 150.938302][ T8605] vlan1: entered allmulticast mode [ 150.945137][ T8605] macvlan0: entered allmulticast mode [ 150.959744][ T8605] macvlan1: entered allmulticast mode [ 150.978992][ T8605] ipvlan0: entered allmulticast mode [ 150.984929][ T8605] ipvlan1: entered allmulticast mode [ 150.992997][ T8605] veth1_macvtap: entered allmulticast mode [ 151.006631][ T8605] veth0_macvtap: entered allmulticast mode [ 151.027649][ T8605] macvtap0: entered allmulticast mode [ 151.040756][ T8605] macsec0: entered allmulticast mode [ 151.054839][ T8605] geneve0: entered allmulticast mode [ 151.082297][ T8605] geneve1: entered allmulticast mode [ 151.094858][ T8605] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 151.111790][ T8605] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 151.127097][ T8605] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 151.138708][ T8605] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 151.154325][ T8605] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 151.179121][ T8605] vxlan0: entered allmulticast mode [ 151.185011][ T8605] veth1_to_hsr.1: entered allmulticast mode [ 151.195434][ T8605] *iE: entered allmulticast mode [ 151.202026][ T8605] bond1: entered allmulticast mode [ 151.208297][ T8605] macvlan2: entered allmulticast mode [ 151.213890][ T8605] vlan2: left promiscuous mode [ 151.220845][ T8605] bridge0: left promiscuous mode [ 151.228496][ T8605] vlan2: entered allmulticast mode [ 151.234822][ T8605] macsec1: entered allmulticast mode [ 151.244887][ T8605] ipvlan2: entered allmulticast mode [ 151.261577][ T8605] ipvlan3: entered allmulticast mode [ 151.272939][ T8605] ip6gre1: entered allmulticast mode [ 151.280600][ T8605] vxlan1: entered allmulticast mode [ 151.292962][ T8605] bond2: entered allmulticast mode [ 151.299642][ T8605] gre1: entered allmulticast mode [ 151.355717][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 151.371697][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.699'. [ 151.384185][ T8645] kthread_run failed with err -4 [ 151.411267][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.435614][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.476386][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.511180][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.564663][ T8672] veth0_to_bond: left allmulticast mode [ 151.575207][ T8684] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.702'. [ 151.583076][ T8672] bridge2: port 1(veth0_to_bond) entered blocking state [ 151.629671][ T8672] bridge2: port 1(veth0_to_bond) entered disabled state [ 151.677624][ T8672] veth0_to_bond: entered allmulticast mode [ 151.727749][ T8672] veth0_to_bond: entered promiscuous mode [ 151.851771][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.876483][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.919748][ T8683] vlan2: entered promiscuous mode [ 151.925133][ T8683] bridge0: entered promiscuous mode [ 151.945609][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.973567][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.138059][ T8753] __nla_validate_parse: 3 callbacks suppressed [ 153.138078][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.718'. [ 153.280488][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 153.394199][ T8767] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 154.418617][ T8809] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 154.496350][ T8801] hsr0 speed is unknown, defaulting to 1000 [ 155.185119][ T8832] veth0: entered promiscuous mode [ 155.315769][ T8833] veth0: left promiscuous mode [ 155.783760][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 155.891769][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 155.931533][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 156.012853][ T8858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.038789][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.751'. [ 156.143723][ T8865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.181084][ T8865] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 156.212342][ T8865] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 156.280965][ T8887] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.755'. [ 156.501860][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 156.589014][ T8904] openvswitch: netlink: IP tunnel dst address not specified [ 156.684402][ T8908] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.124070][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 157.146413][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'. [ 158.284079][ T8967] openvswitch: netlink: IP tunnel dst address not specified [ 158.333159][ T8970] __nla_validate_parse: 1 callbacks suppressed [ 158.333176][ T8970] netlink: 48 bytes leftover after parsing attributes in process `syz.1.777'. [ 158.616933][ T8985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.655257][ T8991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.672965][ T8990] tipc: Enabled bearer , priority 0 [ 158.682181][ T8982] hsr0 speed is unknown, defaulting to 1000 [ 158.682617][ T8990] syzkaller0: entered promiscuous mode [ 158.704669][ T8990] syzkaller0: entered allmulticast mode [ 158.737670][ T8990] tipc: Resetting bearer [ 158.794088][ T8986] tipc: Resetting bearer [ 158.853599][ T8986] tipc: Disabling bearer [ 160.877701][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'. [ 160.888952][ T9079] netlink: 32 bytes leftover after parsing attributes in process `syz.2.800'. [ 160.909677][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 161.172023][ T9093] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 161.181746][ T9093] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 161.369646][ T9104] netlink: 'syz.3.806': attribute type 6 has an invalid length. [ 161.393247][ T9104] netlink: 248 bytes leftover after parsing attributes in process `syz.3.806'. [ 161.854822][ T9120] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.809'. [ 162.358654][ T9141] netlink: 'syz.4.815': attribute type 21 has an invalid length. [ 162.391352][ T9141] netlink: 128 bytes leftover after parsing attributes in process `syz.4.815'. [ 162.442544][ T9141] netlink: 3 bytes leftover after parsing attributes in process `syz.4.815'. [ 162.587038][ T9159] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 162.612968][ T9159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.820'. [ 163.703710][ T9211] netlink: 168 bytes leftover after parsing attributes in process `syz.2.835'. [ 163.752358][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 163.792611][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 164.124374][ T9222] veth3: entered allmulticast mode [ 164.133671][ T9230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 164.194015][ T9221] veth5: entered allmulticast mode [ 164.450177][ T9245] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 164.469479][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 164.490313][ T9245] netlink: 'syz.3.842': attribute type 29 has an invalid length. [ 164.517569][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 164.649030][ T9250] netlink: 104 bytes leftover after parsing attributes in process `syz.1.844'. [ 164.674002][ T9252] dvmrp0: entered allmulticast mode [ 164.683072][ T9250] netlink: 248 bytes leftover after parsing attributes in process `syz.1.844'. [ 164.703472][ T9255] netlink: 45 bytes leftover after parsing attributes in process `syz.3.846'. [ 164.718668][ T9252] dvmrp0: left allmulticast mode [ 164.781923][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 165.283729][ T9272] team0 (unregistering): Port device team_slave_0 removed [ 165.322250][ T9272] team0 (unregistering): Port device team_slave_1 removed [ 165.351534][ T9272] team0 (unregistering): Port device geneve0 removed [ 165.782558][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 167.491435][ T9391] batadv1: entered promiscuous mode [ 167.554929][ T9394] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 167.586371][ T9394] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 167.633498][ T9394] gretap1: entered promiscuous mode [ 167.672416][ T9394] gretap1: entered allmulticast mode [ 167.937308][ T9414] Bluetooth: MGMT ver 1.23 [ 167.961432][ T9414] openvswitch: netlink: Flow key attr not present in new flow. [ 168.184425][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.203391][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.365440][ T30] audit: type=1800 audit(1753917390.085:3): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.906" name="memory.events" dev="tmpfs" ino=947 res=0 errno=0 [ 168.499835][ T9449] netlink: 'syz.3.908': attribute type 10 has an invalid length. [ 169.143047][ T9491] __nla_validate_parse: 6 callbacks suppressed [ 169.143064][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 169.148615][ T9494] netlink: 51 bytes leftover after parsing attributes in process `syz.1.923'. [ 169.152255][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'. [ 169.183825][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 169.194905][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.918'. [ 169.200622][ T9496] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 169.280556][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 169.290522][ T9502] netlink: 'syz.4.926': attribute type 5 has an invalid length. [ 169.299176][ T9502] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 169.320223][ T9502] geneve2: entered promiscuous mode [ 169.327015][ T9502] geneve2: entered allmulticast mode [ 169.370987][ T9502] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 169.381525][ T9502] netlink: 224 bytes leftover after parsing attributes in process `syz.4.926'. [ 169.392146][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 169.402400][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 169.414306][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 169.451770][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 169.572841][ T9514] netlink: 'syz.3.930': attribute type 4 has an invalid length. [ 169.583768][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 169.628526][ T9516] tipc: Enabled bearer , priority 0 [ 169.637732][ T9516] syzkaller0: entered promiscuous mode [ 169.643513][ T9516] syzkaller0: entered allmulticast mode [ 169.684691][ T9516] tipc: Resetting bearer [ 169.694721][ T9515] tipc: Resetting bearer [ 169.712701][ T9515] tipc: Disabling bearer [ 169.733730][ T9518] tipc: Enabled bearer , priority 10 [ 169.763198][ T9518] : entered promiscuous mode [ 169.969516][ T9532] sctp: [Deprecated]: syz.3.934 (pid 9532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.969516][ T9532] Use struct sctp_sack_info instead [ 170.091536][ T9539] netlink: 'syz.0.938': attribute type 12 has an invalid length. [ 170.115152][ T9539] netlink: 'syz.0.938': attribute type 29 has an invalid length. [ 170.136985][ T9539] netlink: 148 bytes leftover after parsing attributes in process `syz.0.938'. [ 170.161646][ T9539] netlink: 'syz.0.938': attribute type 2 has an invalid length. [ 170.849053][ T5894] tipc: Node number set to 3585613593 [ 170.979621][ T9580] openvswitch: netlink: Flow key attr not present in new flow. [ 171.688104][ T9616] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 171.700810][ T9619] netlink: 'syz.0.964': attribute type 29 has an invalid length. [ 171.739291][ T9623] netlink: 'syz.0.964': attribute type 29 has an invalid length. [ 171.969674][ T9638] netlink: 'syz.4.970': attribute type 39 has an invalid length. [ 172.052317][ T9634] hsr0 speed is unknown, defaulting to 1000 [ 172.078844][ T9639] hsr0 speed is unknown, defaulting to 1000 [ 172.829057][ T9681] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 172.867172][ T9681] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 173.441135][ T9702] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDz [ 174.227195][ T9743] IPv6: sit1: Disabled Multicast RS [ 174.582628][ T9755] __nla_validate_parse: 12 callbacks suppressed [ 174.582646][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 174.793210][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 174.806571][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 175.278999][ T9807] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 175.292836][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 175.330983][ T9814] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 175.347492][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 175.463923][ T9811] vlan4: entered allmulticast mode [ 175.509712][ T9811] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 175.561684][ T9817] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 175.630892][ T9827] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 175.669260][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 175.736192][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 175.748619][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'. [ 175.970351][ T9847] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 176.180517][ T9857] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1012'. [ 176.210073][ T9859] netlink: 'syz.4.1015': attribute type 7 has an invalid length. [ 176.240582][ T9857] netlink: 'syz.0.1012': attribute type 10 has an invalid length. [ 176.266718][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 176.292856][ T9857] team0: Device hsr_slave_0 failed to register rx_handler [ 176.544483][ T9880] hsr_slave_0: left promiscuous mode [ 176.554018][ T9880] hsr_slave_1: left promiscuous mode [ 176.864629][ T9900] x_tables: ip_tables: udp match: only valid for protocol 17 [ 177.333728][ T9927] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 177.374740][ T9927] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.637480][ T9940] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.771709][ T9958] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 177.823498][ T9944] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.893964][ T9944] macvlan3: entered promiscuous mode [ 177.900739][ T9944] macvlan3: entered allmulticast mode [ 177.913012][ T9944] bond4: (slave macvlan3): Opening slave failed [ 179.598842][T10064] __nla_validate_parse: 15 callbacks suppressed [ 179.598862][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 179.623510][T10062] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 179.660507][ T5847] IPVS: starting estimator thread 0... [ 179.720536][T10063] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1065'. [ 179.814508][T10069] IPVS: using max 28 ests per chain, 67200 per kthread [ 179.873753][T10081] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1069'. [ 179.948233][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1069'. [ 180.158873][T10095] netlink: 'syz.4.1074': attribute type 13 has an invalid length. [ 180.194899][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 180.234088][T10097] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 180.241044][T10095] netlink: 'syz.4.1074': attribute type 13 has an invalid length. [ 180.287675][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 180.312410][T10103] macsec0: left allmulticast mode [ 180.413321][T10112] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 180.443162][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 180.516304][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 180.561321][T10113] macvlan3: entered promiscuous mode [ 180.570802][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1081'. [ 180.589896][T10113] macvlan3: entered allmulticast mode [ 180.701170][T10124] tc_dump_action: action bad kind [ 180.710630][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 180.793501][T10128] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 181.772031][T10184] openvswitch: netlink: IP tunnel dst address not specified [ 182.782635][T10249] tipc: Enabling of bearer rejected, failed to enable media [ 182.816952][T10250] tipc: Enabling of bearer rejected, failed to enable media [ 183.792466][T10293] tipc: Enabling of bearer rejected, failed to enable media [ 184.160933][T10315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.715412][T10343] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 184.755181][T10343] netlink: 'syz.0.1143': attribute type 4 has an invalid length. [ 184.766202][T10343] __nla_validate_parse: 10 callbacks suppressed [ 184.766222][T10343] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1143'. [ 185.056632][ T30] audit: type=1800 audit(1753917406.775:4): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1148" name="memory.events" dev="tmpfs" ino=1191 res=0 errno=0 [ 185.284493][T10365] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 185.304332][T10365] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1149'. [ 185.316540][T10365] nbd: couldn't find device at index 1048576 [ 185.324597][T10377] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 185.335017][T10377] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1152'. [ 185.365014][T10377] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 185.384373][T10377] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1152'. [ 186.088810][ T5847] hsr0 speed is unknown, defaulting to 1000 [ 186.089147][T10413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 186.127527][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 186.146072][T10410] tc_dump_action: action bad kind [ 186.977979][T10439] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1163'. [ 187.066635][T10439] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1163'. [ 187.103868][T10439] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1163'. [ 187.164261][T10447] raw_sendmsg: syz.0.1166 forgot to set AF_INET. Fix it! [ 187.514218][T10467] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 187.622710][T10438] team0 (unregistering): Port device team_slave_0 removed [ 187.641986][T10438] team0 (unregistering): Port device team_slave_1 removed [ 187.658694][T10438] team0 (unregistering): Port device bond1 removed [ 188.177588][T10496] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 188.235342][T10501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 188.699173][T10528] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 188.980964][T10545] veth3: entered allmulticast mode [ 189.151805][T10553] tls_set_device_offload_rx: netdev not found [ 189.295150][T10565] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 189.428230][T10570] veth0: entered promiscuous mode [ 189.543128][T10570] veth0: left promiscuous mode [ 190.014446][T10603] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 190.274429][T10611] hsr0 speed is unknown, defaulting to 1000 [ 190.435082][T10627] __nla_validate_parse: 6 callbacks suppressed [ 190.435101][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 190.508787][T10629] tipc: New replicast peer: 0.0.0.0 [ 190.518447][T10629] tipc: Enabled bearer , priority 10 [ 190.565025][T10632] tipc: New replicast peer: fe80:0000:0000:0000:e2ff:ffff:0000:00aa [ 191.064157][T10665] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1221'. [ 191.076798][T10665] netlink: 'syz.1.1221': attribute type 9 has an invalid length. [ 191.097678][T10664] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 191.162866][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 191.181901][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 191.360471][T10677] netlink: 'syz.4.1226': attribute type 21 has an invalid length. [ 191.398381][T10677] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1226'. [ 191.651499][ T5938] tipc: Node number set to 130873971 [ 192.339641][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 192.483673][T10723] hsr_slave_1 (unregistering): left promiscuous mode [ 193.125235][T10762] 8021q: VLANs not supported on sit0 [ 193.157358][T10762] 8021q: VLANs not supported on sit0 [ 193.162976][T10762] 8021q: VLANs not supported on sit0 [ 193.220281][T10762] 8021q: VLANs not supported on sit0 [ 193.265862][T10775] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1250'. [ 193.286816][T10776] netlink: 'syz.4.1251': attribute type 24 has an invalid length. [ 193.342319][T10768] hsr0 speed is unknown, defaulting to 1000 [ 193.848238][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 193.921510][T10807] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 193.958365][T10809] netlink: 'syz.1.1256': attribute type 10 has an invalid length. [ 193.967616][T10809] netlink: 'syz.1.1256': attribute type 5 has an invalid length. [ 193.982153][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1256'. [ 194.012311][T10815] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 194.253873][T10828] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1261'. [ 194.317494][T10828] netem: change failed [ 194.479124][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059403400: rx timeout, send abort [ 194.491044][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059403400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 194.572592][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.583978][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.653540][T10836] veth0_virt_wifi: renamed from vlan0 [ 195.012075][T10866] C: renamed from lo [ 195.103323][T10866] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.121668][T10872] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 195.280490][T10872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.425168][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.434493][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.467258][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.512396][T10893] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 195.567839][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.579009][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.588457][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.597684][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.626805][T10893] syzkaller0 speed is unknown, defaulting to 1000 [ 195.659257][T10899] __nla_validate_parse: 1 callbacks suppressed [ 195.659275][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1277'. [ 196.074395][T10913] hsr0 speed is unknown, defaulting to 1000 [ 196.110936][T10913] syzkaller0 speed is unknown, defaulting to 1000 [ 196.223026][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 196.500999][T10934] tipc: Enabled bearer , priority 10 [ 196.545417][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 196.803508][T10959] team0: No ports can be present during mode change [ 196.831919][T10959] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (39785) ! [ 196.870995][T10966] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 197.030565][T10972] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 197.138471][T10959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1294'. [ 197.174287][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 197.210618][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 197.361891][T10992] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1300'. [ 197.410837][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 197.458106][T10992] openvswitch: netlink: Unknown nsh attribute 0 [ 197.496629][T10992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.542033][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 197.595285][T11003] netlink: 'syz.0.1305': attribute type 23 has an invalid length. [ 197.736105][T11011] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1307'. [ 197.844793][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 198.168972][ T6540] wlan1: Trigger new scan to find an IBSS to join [ 198.334539][T11021] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 198.380483][T11025] team0: No ports can be present during mode change [ 198.888105][T11067] 0{X: renamed from gretap0 [ 198.959912][T11067] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 199.312570][T11082] bond0: entered promiscuous mode [ 199.350531][T11082] bond_slave_0: entered promiscuous mode [ 199.399848][T11082] bond_slave_1: entered promiscuous mode [ 199.586549][T11087] syzkaller1: entered promiscuous mode [ 199.594835][T11087] syzkaller1: entered allmulticast mode [ 199.608020][T11097] 8021q: VLANs not supported on ip6gre0 [ 201.066508][T11161] __nla_validate_parse: 8 callbacks suppressed [ 201.066528][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1335'. [ 201.510634][T11172] veth5: entered promiscuous mode [ 201.537613][T11172] veth5: entered allmulticast mode [ 201.672390][T11186] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1340'. [ 201.917601][T11200] netlink: 'syz.4.1343': attribute type 29 has an invalid length. [ 201.973731][T11200] netlink: 'syz.4.1343': attribute type 29 has an invalid length. [ 202.000818][T11200] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1343'. [ 202.022781][T11200] unsupported nla_type 58 [ 202.793410][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 202.823949][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 203.126880][ T6540] wlan1: Trigger new scan to find an IBSS to join [ 203.269382][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 203.625381][T11275] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1366'. [ 203.738294][T11282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1368'. [ 203.847442][T11289] netlink: 'syz.4.1369': attribute type 4 has an invalid length. [ 203.882459][T11289] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1369'. [ 204.132401][ T8785] wlan1: Creating new IBSS network, BSSID b2:c7:9d:25:19:41 [ 204.619908][T11341] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 204.643793][T11341] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 204.659066][T11305] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1375'. [ 204.885311][T11358] netlink: 'syz.2.1386': attribute type 4 has an invalid length. [ 204.938618][T11355] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 205.439632][T11384] syzkaller0: entered promiscuous mode [ 205.463286][T11384] syzkaller0: entered allmulticast mode [ 206.126840][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 206.166624][ T13] wlan1: Trigger new scan to find an IBSS to join [ 206.200314][T11414] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.914341][T11448] openvswitch: netlink: IP tunnel dst address not specified [ 207.086490][T11461] __nla_validate_parse: 2 callbacks suppressed [ 207.086509][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1405'. [ 207.192269][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 207.209140][T11469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1410'. [ 207.441246][T11483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.441959][T11480] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 207.554332][T11487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1412'. [ 207.567955][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'. [ 208.212211][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 208.222532][T11524] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.349612][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 208.390644][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 208.417286][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 208.440170][T11535] geneve2: entered promiscuous mode [ 208.474256][T11535] geneve2: entered allmulticast mode [ 208.532271][T11543] IPv6: NLM_F_REPLACE set, but no existing node found! [ 208.547170][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1427'. [ 209.126972][ T6540] wlan1: Trigger new scan to find an IBSS to join [ 209.150652][T11566] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 209.157803][T11566] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 209.182442][T11568] pimreg3: entered allmulticast mode [ 209.214035][T11568] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 209.690248][T11604] vlan5: entered allmulticast mode [ 209.718097][T11604] bridge0: entered allmulticast mode [ 209.733374][T11604] bridge4: port 1(vlan5) entered blocking state [ 209.741542][T11604] bridge4: port 1(vlan5) entered disabled state [ 209.753803][T11604] vlan5: entered promiscuous mode [ 209.760450][T11604] bridge0: entered promiscuous mode [ 209.768646][T11608] netlink: 'syz.4.1444': attribute type 5 has an invalid length. [ 210.441607][T11636] veth0_to_bridge: entered promiscuous mode [ 210.493533][T11636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.630503][T11629] veth0_to_bridge: left promiscuous mode [ 211.461013][T11694] netlink: 'syz.4.1475': attribute type 3 has an invalid length. [ 212.019646][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.024883][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 212.028243][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 212.033055][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 212.168443][ T12] wlan1: Trigger new scan to find an IBSS to join [ 212.244219][T11735] __nla_validate_parse: 11 callbacks suppressed [ 212.244239][T11735] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1488'. [ 212.451447][T11746] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1492'. [ 212.594822][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'. [ 212.694391][T11761] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1497'. [ 212.781914][T11765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 213.655021][T11805] delete_channel: no stack [ 213.673602][T11807] delete_channel: no stack [ 213.788473][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.878520][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 214.158475][T11825] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 215.124149][T11884] delete_channel: no stack [ 215.157202][T11888] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1531'. [ 215.266712][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'. [ 215.319644][T11891] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 215.519917][T11897] tipc: Enabled bearer , priority 0 [ 215.550796][T11897] syzkaller0: entered promiscuous mode [ 215.592026][T11897] syzkaller0: entered allmulticast mode [ 215.661796][T11901] geneve2: entered promiscuous mode [ 215.677923][T11901] geneve2: entered allmulticast mode [ 215.790384][T11903] tipc: Resetting bearer [ 215.868634][T11896] tipc: Resetting bearer [ 215.888416][T11923] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 215.927935][T11928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1540'. [ 215.961969][T11896] tipc: Disabling bearer [ 215.979667][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1540'. [ 216.001652][T11927] netlink: 'syz.2.1542': attribute type 3 has an invalid length. [ 216.004255][T11924] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 216.024372][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1542'. [ 216.081332][T11924] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 216.215035][T11936] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 216.623158][T11968] netlink: 'syz.0.1552': attribute type 12 has an invalid length. [ 216.649864][T11968] netlink: 'syz.0.1552': attribute type 29 has an invalid length. [ 217.169799][T11999] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.177433][T11988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.286335][T12004] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 217.336119][T12004] __nla_validate_parse: 4 callbacks suppressed [ 217.336138][T12004] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1563'. [ 217.380666][T12010] netlink: 'syz.2.1564': attribute type 2 has an invalid length. [ 217.542518][T12017] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 217.609318][T12017] netlink: 'syz.3.1565': attribute type 2 has an invalid length. [ 217.649770][T12017] netlink: 1180 bytes leftover after parsing attributes in process `syz.3.1565'. [ 217.710391][T12017] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 217.753738][T12017] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1565'. [ 217.788984][T12017] netlink: 'syz.3.1565': attribute type 1 has an invalid length. [ 218.259874][T12045] veth13: entered allmulticast mode [ 218.429978][T12052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.670491][T12052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.100230][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1580'. [ 219.162358][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1583'. [ 219.229708][T12087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1584'. [ 219.239942][T12080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1583'. [ 219.800533][T12130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1595'. [ 220.169284][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1597'. [ 220.457082][T12177] netlink: 'syz.2.1605': attribute type 9 has an invalid length. [ 220.630215][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'. [ 220.815176][T12181] 8021q: adding VLAN 0 to HW filter on device bond8 [ 220.832985][T12181] bond7: (slave bond8): making interface the new active one [ 220.880246][T12181] bond7: (slave bond8): Enslaving as an active interface with an up link [ 220.955061][T12184] bond7: (slave gretap2): Enslaving as a backup interface with an up link [ 221.183185][T12194] hsr0 speed is unknown, defaulting to 1000 [ 221.306968][T12194] syzkaller0 speed is unknown, defaulting to 1000 [ 221.761704][T12238] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 221.815131][T12194] validate_nla: 1 callbacks suppressed [ 221.815152][T12194] netlink: 'syz.0.1608': attribute type 6 has an invalid length. [ 221.883990][T12194] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 222.175841][T12263] net veth1_virt_wifi .: renamed from virt_wifi0 [ 222.426363][T12272] __nla_validate_parse: 2 callbacks suppressed [ 222.426383][T12272] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1628'. [ 223.270521][T12325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1638'. [ 223.284982][T12327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1637'. [ 223.489568][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 223.539749][T12343] tipc: Enabling of bearer rejected, failed to enable media [ 223.936271][T12369] netlink: 'syz.4.1647': attribute type 4 has an invalid length. [ 223.993538][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 224.125202][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 224.252903][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 224.438625][T12401] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1657'. [ 224.449238][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1657'. [ 224.462088][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1657'. [ 225.162288][T12438] netlink: 'syz.1.1668': attribute type 4 has an invalid length. [ 225.262682][T12440] netlink: 'syz.3.1667': attribute type 9 has an invalid length. [ 225.412027][T12451] unsupported nlmsg_type 40 [ 226.230338][T12496] netlink: 'syz.4.1685': attribute type 1 has an invalid length. [ 226.356223][T12494] syz_tun: entered allmulticast mode [ 226.428242][T12493] syz_tun: left allmulticast mode [ 226.541358][T12520] netem: incorrect gi model size [ 226.563533][T12520] netem: change failed [ 226.779643][T12535] netlink: 'syz.3.1690': attribute type 4 has an invalid length. [ 227.083723][T12556] netlink: 'syz.1.1698': attribute type 12 has an invalid length. [ 227.169710][T12556] bond3: entered promiscuous mode [ 227.176679][T12556] bond3: entered allmulticast mode [ 227.184235][T12556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.209300][T12564] tunl0: entered promiscuous mode [ 227.214565][T12564] tunl0: entered allmulticast mode [ 227.386726][T12572] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 227.416099][T12572] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 227.457417][T12577] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 227.834402][T12602] __nla_validate_parse: 14 callbacks suppressed [ 227.834426][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'. [ 227.842677][T12578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.267976][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 228.365459][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 228.434787][T12627] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 228.499161][T12627] bond3: (slave vcan0): Error -95 calling set_mac_address [ 228.588046][T12634] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1723'. [ 228.743990][T12640] tipc: MTU too low for tipc bearer [ 228.768182][T12643] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1725'. [ 228.787583][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'. [ 228.789961][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 228.822477][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 228.849674][T12643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1725'. [ 228.951964][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 229.387293][T12674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.431644][T12676] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 229.492314][T12681] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 229.504792][T12676] 8021q: adding VLAN 0 to HW filter on device bond10 [ 229.514079][T12681] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 229.571165][T12681] Bluetooth: MGMT ver 1.23 [ 229.587948][T12683] 8021q: adding VLAN 0 to HW filter on device bond10 [ 229.597608][T12683] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.614383][T12683] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 229.762482][T12691] bridge2: entered allmulticast mode [ 229.809297][T12691] veth2: entered allmulticast mode [ 229.832541][T12691] veth4: entered allmulticast mode [ 229.853295][T12691] veth6: entered allmulticast mode [ 229.883983][T12691] veth7: entered allmulticast mode [ 229.910943][T12691] veth8: entered allmulticast mode [ 229.926167][T12691] veth9: entered allmulticast mode [ 229.932083][T12691] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 229.943087][T12691] gre2: entered allmulticast mode [ 229.949386][T12691] bridge3: entered allmulticast mode [ 229.965358][T12691] veth10: entered allmulticast mode [ 229.971733][T12691] veth11: entered allmulticast mode [ 229.982982][T12691] gtp0: entered allmulticast mode [ 229.990325][T12691] batadv_slave_0.: entered allmulticast mode [ 230.038394][T12691] bridge4: entered allmulticast mode [ 230.046333][T12691] bridge5: entered allmulticast mode [ 230.066862][T12691] veth12: entered allmulticast mode [ 230.073812][T12691] sit1: entered allmulticast mode [ 230.082068][T12691] sit2: entered allmulticast mode [ 230.091652][T12691] bond3: entered allmulticast mode [ 230.101346][T12706] netlink: 'syz.3.1748': attribute type 29 has an invalid length. [ 230.127046][T12707] netlink: 'syz.3.1748': attribute type 29 has an invalid length. [ 230.386723][T12726] netlink: 'syz.3.1754': attribute type 2 has an invalid length. [ 230.402362][T12723] bridge: RTM_NEWNEIGH with invalid ether address [ 230.414409][T12727] bridge: RTM_NEWNEIGH with invalid ether address [ 231.606862][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 231.614341][ T5853] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 231.676268][T12786] veth0_to_bridge: entered promiscuous mode [ 231.783372][T12785] veth0_to_bridge: left promiscuous mode [ 232.673612][ T5894] IPVS: starting estimator thread 0... [ 232.766844][T12852] IPVS: using max 25 ests per chain, 60000 per kthread [ 232.901977][T12856] netlink: 'syz.3.1793': attribute type 1 has an invalid length. [ 232.939298][T12865] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 232.952005][T12856] __nla_validate_parse: 19 callbacks suppressed [ 232.952080][T12856] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1793'. [ 232.988541][T12865] netlink: 'syz.0.1796': attribute type 4 has an invalid length. [ 233.080964][T12865] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.1796'. [ 233.133980][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 233.177851][T12876] dummy0: entered promiscuous mode [ 233.211981][T12876] batadv_slave_1: entered promiscuous mode [ 233.304576][T12878] tipc: Enabled bearer , priority 0 [ 233.328037][T12878] syzkaller0: entered promiscuous mode [ 233.366751][T12878] syzkaller0: entered allmulticast mode [ 233.433560][T12892] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1805'. [ 233.451931][T12878] tipc: Resetting bearer [ 233.681826][T12906] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 233.757212][T12892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.773939][T12892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.797189][T12892] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 233.807683][T12892] bridge0: left allmulticast mode [ 233.814432][T12892] bond0 (unregistering): Released all slaves [ 233.844678][T12877] tipc: Resetting bearer [ 233.858939][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 233.887531][T12917] netlink: 'syz.0.1809': attribute type 23 has an invalid length. [ 233.899661][T12877] tipc: Disabling bearer [ 233.923979][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 234.098296][T12910] 8021q: adding VLAN 0 to HW filter on device bond12 [ 234.109736][T12910] bond11: (slave bond12): making interface the new active one [ 234.120091][T12910] bond11: (slave bond12): Enslaving as an active interface with an up link [ 234.150308][T12916] 8021q: adding VLAN 0 to HW filter on device bond11 [ 234.636914][T12964] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1821'. [ 234.746365][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1825'. [ 234.779621][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 234.799063][T12971] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 234.814257][T12976] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 234.815226][T12968] bridge_slave_1: left promiscuous mode [ 234.835227][T12973] openvswitch: netlink: IP tunnel TTL not specified. [ 234.849965][T12968] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.864225][T12968] bridge_slave_0: left promiscuous mode [ 234.875303][T12968] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.974718][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1829'. [ 235.601980][T13009] netlink: 'syz.1.1836': attribute type 29 has an invalid length. [ 235.634297][T13012] netlink: 'syz.1.1836': attribute type 29 has an invalid length. [ 235.790023][T13021] netlink: 'syz.3.1840': attribute type 11 has an invalid length. [ 235.815403][T13016] hsr0 speed is unknown, defaulting to 1000 [ 235.819826][T13021] netlink: 'syz.3.1840': attribute type 11 has an invalid length. [ 235.823993][T13016] syzkaller0 speed is unknown, defaulting to 1000 [ 235.905208][T13020] netlink: 'syz.3.1840': attribute type 11 has an invalid length. [ 235.935349][T13020] netlink: 'syz.3.1840': attribute type 11 has an invalid length. [ 236.171701][T12528] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.598197][T13063] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 236.719146][T13070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.761423][T13076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.015196][T13094] netlink: 'syz.0.1862': attribute type 13 has an invalid length. [ 237.140441][T13104] bond0: entered allmulticast mode [ 237.151063][T13104] bond_slave_0: entered allmulticast mode [ 237.161300][T13104] bond_slave_1: entered allmulticast mode [ 237.177425][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.190880][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.226270][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.576545][T13126] syzkaller1: entered promiscuous mode [ 237.599623][T13126] syzkaller1: entered allmulticast mode [ 237.983838][T13157] __nla_validate_parse: 19 callbacks suppressed [ 237.983857][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 238.060629][T13159] nbd: socks must be embedded in a SOCK_ITEM attr [ 238.234080][T13167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1881'. [ 238.424905][T13179] validate_nla: 4 callbacks suppressed [ 238.424925][T13179] netlink: 'syz.0.1886': attribute type 1 has an invalid length. [ 238.473621][T13179] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1886'. [ 238.511352][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 238.933746][T13204] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 238.944625][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1891'. [ 239.269701][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 239.290708][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1894'. [ 239.453467][T13225] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1897'. [ 239.511512][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 239.522441][T13232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1897'. [ 239.583661][T13230] team_slave_0: entered promiscuous mode [ 239.590218][T13230] team_slave_1: entered promiscuous mode [ 239.870222][T13251] IPVS: stopping backup sync thread 8202 ... [ 240.361895][T13282] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.845402][T13308] netlink: 'syz.2.1923': attribute type 11 has an invalid length. [ 241.668831][T13363] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 241.684453][T13363] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 242.133366][T13370] veth7: entered allmulticast mode [ 242.146186][T13375] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 242.319100][T13382] netlink: 'syz.1.1944': attribute type 5 has an invalid length. [ 242.602100][T13397] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20002 [ 242.748786][T13397] syzkaller0: entered promiscuous mode [ 242.773236][T13397] syzkaller0: entered allmulticast mode [ 242.878620][T13415] netlink: 'syz.3.1953': attribute type 39 has an invalid length. [ 243.681886][T13438] __nla_validate_parse: 8 callbacks suppressed [ 243.681907][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 244.223495][T13451] netlink: 'syz.0.1963': attribute type 21 has an invalid length. [ 244.343066][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.577872][T13437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.590370][T13437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.606948][T13437] hsr0: entered promiscuous mode [ 245.613763][T13437] hsr0: entered allmulticast mode [ 245.622625][T13437] hsr_slave_0: entered allmulticast mode [ 245.637931][T13437] hsr_slave_1: entered allmulticast mode [ 245.712051][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1961'. [ 245.755250][T13459] tipc: Enabled bearer , priority 0 [ 245.764908][T13459] syzkaller0: entered promiscuous mode [ 245.777029][T13459] syzkaller0: entered allmulticast mode [ 245.799681][T13459] tipc: Resetting bearer [ 245.833928][T13456] tipc: Resetting bearer [ 245.893626][T13456] tipc: Disabling bearer [ 246.003929][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'. [ 246.031724][T13466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1967'. [ 246.140821][T13480] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 246.198549][T13480] bond4: entered promiscuous mode [ 246.204985][T13480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.237901][T13486] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.251024][T13486] bond4: (slave bond5): making interface the new active one [ 246.260453][T13486] bond5: entered promiscuous mode [ 246.269672][T13486] bond4: (slave bond5): Enslaving as an active interface with an up link [ 246.345246][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 246.409966][ T8785] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 246.448174][T13498] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1976'. [ 246.622980][T13508] netlink: 'syz.4.1977': attribute type 1 has an invalid length. [ 246.710748][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 246.774772][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 246.801334][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 246.914409][T13520] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1981'. [ 247.131489][T13534] netlink: 'syz.3.1984': attribute type 24 has an invalid length. [ 247.538291][T13560] netlink: 'syz.2.1992': attribute type 2 has an invalid length. [ 247.607392][T13564] team0: Device vti0 is of different type [ 247.794793][T13569] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 247.845334][T13569] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 247.845402][T13575] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 247.873878][T13569] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 248.128566][T13601] netlink: 'syz.0.2004': attribute type 15 has an invalid length. [ 248.138133][T13601] netlink: 'syz.0.2004': attribute type 15 has an invalid length. [ 248.148507][T13601] netlink: 'syz.0.2004': attribute type 15 has an invalid length. [ 248.182849][T13601] netlink: 'syz.0.2004': attribute type 15 has an invalid length. [ 248.559871][T13625] tc_dump_action: action bad kind [ 248.584659][T13574] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 248.615118][T13574] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 248.640869][T13574] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 248.851667][T13643] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.944933][ T8785] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 249.682978][T13701] __nla_validate_parse: 6 callbacks suppressed [ 249.682997][T13701] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2034'. [ 249.703994][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 249.758164][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2034'. [ 249.777288][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 249.838460][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 250.123225][T13730] validate_nla: 29 callbacks suppressed [ 250.123244][T13730] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 250.156169][T13730] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2040'. [ 250.332500][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 250.343315][T13743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2045'. [ 250.422118][T13748] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2048'. [ 250.457559][T13744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 250.574121][T13757] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.401060][T13812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 251.440368][T13802] netlink: 'syz.1.2063': attribute type 4 has an invalid length. [ 251.656726][T13818] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.672291][T13823] syz.1.2068 uses old SIOCAX25GETINFO [ 252.413842][T13867] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 252.544966][T13875] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 252.736368][T13882] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 253.046217][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 253.093687][T13903] netlink: 'syz.3.2095': attribute type 1 has an invalid length. [ 253.131064][T13906] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 253.141844][T13906] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 254.325393][T13950] netlink: 'syz.0.2107': attribute type 10 has an invalid length. [ 254.339752][T13952] lo: entered allmulticast mode [ 254.351615][T13952] tunl0: entered allmulticast mode [ 254.380453][T13952] gre0: entered allmulticast mode [ 254.459169][T13952] gretap0: entered allmulticast mode [ 254.580908][T13963] netlink: 'syz.4.2109': attribute type 1 has an invalid length. [ 254.740244][T13952] erspan0: entered allmulticast mode [ 254.763680][T13952] ip_vti0: entered allmulticast mode [ 254.790035][T13952] ip6_vti0: entered allmulticast mode [ 254.806579][T13952] sit0: entered allmulticast mode [ 254.831666][T13952] ip6tnl0: entered allmulticast mode [ 254.847175][T13952] ip6gre0: entered allmulticast mode [ 254.920406][T13952] syz_tun: entered allmulticast mode [ 254.953503][T13952] ip6gretap0: entered allmulticast mode [ 254.985053][T13952] vcan0: entered allmulticast mode [ 255.013123][T13952] bond0: left promiscuous mode [ 255.021333][T13952] bond_slave_0: left promiscuous mode [ 255.033707][T13952] bond_slave_1: left promiscuous mode [ 255.055237][T13952] team_slave_0: left promiscuous mode [ 255.074431][T13952] team_slave_1: left promiscuous mode [ 255.081116][T13952] team0: entered allmulticast mode [ 255.087681][T13952] team_slave_0: entered allmulticast mode [ 255.102950][T13952] team_slave_1: entered allmulticast mode [ 255.141586][T13952] dummy0: entered allmulticast mode [ 255.159276][T13952] nlmon0: entered allmulticast mode [ 255.168422][T13952] caif0: entered allmulticast mode [ 255.194686][T13952] batadv0: entered allmulticast mode [ 255.215174][T13952] vxcan0: entered allmulticast mode [ 255.224446][T13952] vxcan1: entered allmulticast mode [ 255.238921][T13952] veth0: entered allmulticast mode [ 255.283416][T13952] wg0: entered allmulticast mode [ 255.299806][T13952] wg1: entered allmulticast mode [ 255.310477][T13952] wg2: entered allmulticast mode [ 255.320730][T13952] veth0_to_bridge: entered allmulticast mode [ 255.351771][T13952] veth1_to_bridge: entered allmulticast mode [ 255.380055][T13952] veth0_to_bond: entered allmulticast mode [ 255.400109][T13952] veth1_to_bond: entered allmulticast mode [ 255.427586][T13952] veth0_to_team: entered allmulticast mode [ 255.461513][T13952] veth1_to_team: entered allmulticast mode [ 255.490192][T13952] veth0_to_batadv: entered allmulticast mode [ 255.514147][T13952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.523482][T13952] batadv_slave_0: entered allmulticast mode [ 255.544985][T13952] veth1_to_batadv: entered allmulticast mode [ 255.558333][T13952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.567940][T13952] batadv_slave_1: entered allmulticast mode [ 255.581774][T13952] xfrm0: entered allmulticast mode [ 255.600502][T13952] veth0_to_hsr: entered allmulticast mode [ 255.626543][T13952] hsr_slave_0: entered allmulticast mode [ 255.639021][T13952] veth1_to_hsr: entered allmulticast mode [ 255.661497][T13952] hsr_slave_1: entered allmulticast mode [ 255.679149][T13952] veth1_virt_wifi: entered allmulticast mode [ 255.702392][T13952] veth0_virt_wifi: entered allmulticast mode [ 255.727896][T13952] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 255.747637][T13952] veth1_macvtap: entered allmulticast mode [ 255.768934][T13952] veth0_macvtap: entered allmulticast mode [ 255.787844][T13952] macvtap0: entered allmulticast mode [ 255.814078][T13952] macsec0: entered allmulticast mode [ 255.829657][T13952] geneve0: entered allmulticast mode [ 255.841345][T13952] geneve1: entered allmulticast mode [ 255.859348][T13952] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 255.870752][T13952] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 255.887474][T13952] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 255.917104][T13952] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 255.940101][T13952] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 255.983433][T13952] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 255.998170][T13952] vxcan2: entered allmulticast mode [ 256.011795][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 256.025230][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.026185][T13952] vxcan3: left promiscuous mode [ 256.059305][T13952] xfrm1: entered allmulticast mode [ 256.066929][T13952] sit1: entered allmulticast mode [ 256.080146][T13952] bridge1: entered allmulticast mode [ 256.089998][T13952] bond1: entered allmulticast mode [ 256.106730][T13952] veth2: entered allmulticast mode [ 256.113009][T13952] veth3: entered allmulticast mode [ 256.126563][T13952] gre1: entered allmulticast mode [ 256.132568][T13952] vcan1: entered allmulticast mode [ 256.142032][T13952] sit2: left promiscuous mode [ 256.151392][T13952] bond2: entered allmulticast mode [ 256.159136][T13952] vlan3: entered allmulticast mode [ 256.167569][T13952] bridge2: entered allmulticast mode [ 256.184606][T13952] gretap1: left promiscuous mode [ 256.197345][T13952] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 256.206819][T13952] macvlan2: entered allmulticast mode [ 256.227101][T13952] ip6tnl1: entered allmulticast mode [ 256.235220][T13952] macvlan3: left promiscuous mode [ 256.244606][T13952] syztnl0: entered allmulticast mode [ 256.252123][T13952] mac80211_hwsim hwsim20 wlan2: entered allmulticast mode [ 256.263135][T13952] veth4: entered allmulticast mode [ 256.269992][T13952] veth5: left promiscuous mode [ 256.278020][T13952] bridge3: entered allmulticast mode [ 256.294381][T13952] bridge4: entered allmulticast mode [ 256.308226][T13952] geneve2: left promiscuous mode [ 256.317986][T13952] mac80211_hwsim hwsim23 wlan3: entered allmulticast mode [ 256.331422][T13952] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 256.341386][T13952] hsr0: entered allmulticast mode [ 256.349397][T13952] macsec1: entered allmulticast mode [ 256.363306][T13952] ip6tnl2: entered allmulticast mode [ 256.415061][T13960] tipc: Enabling of bearer rejected, already enabled [ 256.451418][T13963] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 256.464939][T13989] tipc: Enabling of bearer rejected, failed to enable media [ 256.549639][ T8785] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.588459][ T30] audit: type=1107 audit(1753917478.305:5): pid=13993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 256.610541][ T8785] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.674909][T14003] __nla_validate_parse: 29 callbacks suppressed [ 256.674928][T14003] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2117'. [ 256.700115][ T8785] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.802845][T14011] netlink: 'syz.0.2120': attribute type 3 has an invalid length. [ 256.842721][T14009] netlink: 'syz.4.2118': attribute type 2 has an invalid length. [ 256.865352][T14011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2120'. [ 256.904546][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 256.916871][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 257.123266][T14027] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.2126'. [ 257.164636][T14027] netlink: zone id is out of range [ 257.201167][T14027] netlink: zone id is out of range [ 257.232258][T14027] netlink: zone id is out of range [ 257.269768][T14027] netlink: zone id is out of range [ 257.308135][T14037] tipc: Enabled bearer , priority 0 [ 257.332714][T14027] netlink: zone id is out of range [ 257.349413][T14037] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 257.373681][T14027] netlink: zone id is out of range [ 257.420784][T14027] netlink: zone id is out of range [ 257.492662][T14027] netlink: zone id is out of range [ 257.545231][T14027] netlink: zone id is out of range [ 257.559439][T14037] tipc: Resetting bearer [ 257.600553][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2131'. [ 257.605338][T14042] netlink: 'syz.1.2129': attribute type 3 has an invalid length. [ 257.644724][T14052] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2131'. [ 257.733068][T14054] netlink: 'syz.1.2133': attribute type 1 has an invalid length. [ 257.743667][T14054] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2133'. [ 257.757957][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 257.902232][T14060] tipc: Enabled bearer , priority 0 [ 257.922757][T14060] syzkaller0: entered promiscuous mode [ 257.930709][T14060] syzkaller0: entered allmulticast mode [ 257.967715][T14061] netlink: 'syz.2.2134': attribute type 5 has an invalid length. [ 258.085177][T14067] tipc: Resetting bearer [ 258.109989][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 258.206798][T14084] sctp: [Deprecated]: syz.2.2143 (pid 14084) Use of int in maxseg socket option. [ 258.206798][T14084] Use struct sctp_assoc_value instead [ 258.299184][T14093] tipc: Enabling of bearer rejected, already enabled [ 258.436335][ T5957] tipc: Node number set to 1738726492 [ 258.688632][T14058] tipc: Resetting bearer [ 258.708722][T14058] tipc: Disabling bearer [ 259.155018][T14136] 8021q: VLANs not supported on sit0 [ 259.174763][T14136] IPVS: Unknown mcast interface: syzkaller1 [ 259.204494][T14136] netlink: 'syz.1.2159': attribute type 39 has an invalid length. [ 259.228976][T14136] veth0_macvtap: left promiscuous mode [ 260.011181][T14190] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 260.069319][T14190] netlink: 'syz.0.2174': attribute type 11 has an invalid length. [ 260.097788][T14199] sctp: [Deprecated]: syz.2.2177 (pid 14199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.097788][T14199] Use struct sctp_sack_info instead [ 260.167521][T14199] 8021q: VLANs not supported on ip_vti0 [ 260.507948][T14221] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 260.884499][T14233] syzkaller1: entered promiscuous mode [ 260.896291][T14233] syzkaller1: entered allmulticast mode [ 262.621783][T14255] __nla_validate_parse: 11 callbacks suppressed [ 262.621803][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2196'. [ 262.643644][T14255] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 262.674921][T14261] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 262.685028][T14261] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2199'. [ 262.699740][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'. [ 262.928758][T14271] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 262.953907][T14271] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2202'. [ 262.978807][T14271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2202'. [ 263.332263][T14300] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 263.362710][T14300] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2214'. [ 263.397128][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 263.482633][T14308] netlink: 'syz.4.2217': attribute type 21 has an invalid length. [ 263.509048][T14308] netlink: 'syz.4.2217': attribute type 6 has an invalid length. [ 263.530474][T14308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2217'. [ 263.567934][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 263.888081][T14328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2223'. [ 263.957793][T14331] veth9: entered allmulticast mode [ 264.110985][T14338] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.142577][T14338] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.304305][T14350] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 264.328860][ T8442] syzkaller0 speed is unknown, defaulting to 1000 [ 264.336908][ T10] syzkaller0 speed is unknown, defaulting to 1000 [ 264.345223][ T10] syz2: Port: 1 Link ACTIVE [ 264.550827][T14361] netlink: 'syz.0.2235': attribute type 1 has an invalid length. [ 264.624360][T14363] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 264.729525][T14359] C: renamed from lo (while UP) [ 264.781168][T14359] net_ratelimit: 218 callbacks suppressed [ 264.781190][T14359] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 264.869626][T14378] : entered promiscuous mode [ 265.197782][T14400] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 266.037398][T14431] erspan0: entered promiscuous mode [ 266.105984][T14435] netlink: 'syz.3.2259': attribute type 2 has an invalid length. [ 266.147628][T14437] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 266.532089][ T6540] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 266.542760][T14465] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 266.781139][T14485] veth0: entered promiscuous mode [ 266.803834][T14484] veth0: left promiscuous mode [ 267.217133][ T67] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 267.361381][T14517] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 267.492029][T14518] tipc: Enabling of bearer rejected, already enabled [ 267.521642][T14525] bond0: Device is already in use. [ 267.680266][T14536] __nla_validate_parse: 21 callbacks suppressed [ 267.680287][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'. [ 267.887518][T14542] validate_nla: 2 callbacks suppressed [ 267.887538][T14542] netlink: 'syz.3.2300': attribute type 3 has an invalid length. [ 267.979577][T14549] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 267.990511][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 268.019738][T14549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2301'. [ 268.033401][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'. [ 268.134882][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 268.200579][T14559] bridge: RTM_NEWNEIGH with invalid ether address [ 268.306797][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'. [ 268.431841][T14571] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 268.444349][T14571] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2307'. [ 268.490318][T14575] syzkaller1: entered promiscuous mode [ 268.508857][T14575] syzkaller1: entered allmulticast mode [ 268.734466][T14589] netlink: 'syz.2.2314': attribute type 13 has an invalid length. [ 268.758038][T14589] lo: entered promiscuous mode [ 268.803612][T14589] tunl0: entered promiscuous mode [ 268.825095][T14589] gre0: entered promiscuous mode [ 268.836891][T14595] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 268.861481][T14589] gretap0: entered promiscuous mode [ 268.872528][T14595] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2316'. [ 268.891236][T14589] gretap0: refused to change device tx_queue_len [ 268.908328][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'. [ 268.923271][T14589] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 269.096838][T14608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2319'. [ 269.597502][T14641] veth0: entered promiscuous mode [ 269.831431][T14650] netlink: 'syz.3.2329': attribute type 1 has an invalid length. [ 270.407317][T14638] veth0: left promiscuous mode [ 270.575877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.646645][T14699] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 270.833369][T14704] netlink: 'syz.2.2343': attribute type 7 has an invalid length. [ 270.863468][T14704] netlink: 'syz.2.2343': attribute type 8 has an invalid length. [ 270.928778][ T5853] block nbd1: Receive control failed (result -32) [ 271.430563][T14734] netlink: 'syz.2.2349': attribute type 7 has an invalid length. [ 272.047452][T14766] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 272.579413][T14787] veth5: entered allmulticast mode [ 272.666601][T14793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.747363][T14793] macvtap1: entered promiscuous mode [ 272.781437][T14793] bond3: entered promiscuous mode [ 272.789757][T14793] macvtap1: entered allmulticast mode [ 272.809850][T14793] bond3: entered allmulticast mode [ 272.818398][T14793] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 272.828579][T14796] tipc: Enabled bearer , priority 0 [ 272.893167][T14797] bond3: (slave gretap2): making interface the new active one [ 272.926419][T14797] gretap2: entered promiscuous mode [ 272.945142][T14797] gretap2: entered allmulticast mode [ 272.973495][T14797] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 273.028180][T14803] bond7: entered promiscuous mode [ 273.034034][T14803] bond7: entered allmulticast mode [ 273.041132][T14803] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.148764][T14824] validate_nla: 3 callbacks suppressed [ 273.148782][T14824] netlink: 'syz.2.2374': attribute type 1 has an invalid length. [ 273.173055][T14824] __nla_validate_parse: 19 callbacks suppressed [ 273.173074][T14824] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2374'. [ 273.334657][T14803] bond7 (unregistering): Released all slaves [ 273.676223][T14846] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 273.711068][T14846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2380'. [ 273.742141][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 273.762267][T14851] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 273.784319][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'. [ 273.900757][T14859] sctp: [Deprecated]: syz.3.2385 (pid 14859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.900757][T14859] Use struct sctp_sack_info instead [ 273.942006][T14859] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.972015][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 274.030602][T14865] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.058390][T14872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2388'. [ 274.094471][T14872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2388'. [ 274.137921][ T10] IPVS: starting estimator thread 0... [ 274.252263][T14878] IPVS: using max 26 ests per chain, 62400 per kthread [ 274.459155][T14895] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 274.471056][T14895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2395'. [ 274.484504][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 274.662831][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 275.160777][T14932] netlink: 'syz.4.2406': attribute type 2 has an invalid length. [ 275.170074][T14932] netlink: 'syz.4.2406': attribute type 1 has an invalid length. [ 275.473831][T14952] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 275.585096][T14959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.598593][T14960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.823323][T14978] netlink: 'syz.0.2421': attribute type 2 has an invalid length. [ 275.914090][T14982] tipc: Enabled bearer , priority 0 [ 275.932230][T14982] syzkaller0: entered promiscuous mode [ 275.953085][T14983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.964791][T14982] syzkaller0: entered allmulticast mode [ 276.002830][T14982] tipc: Resetting bearer [ 276.050866][T14982] tipc: Disabling bearer [ 276.250718][T15005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.307128][T15007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.669317][T15020] syz.2.2440 (15020) used greatest stack depth: 17864 bytes left [ 277.099343][T15054] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 277.839127][T15098] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 277.890918][T15103] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 277.903797][T15103] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 277.930661][T15108] tipc: Enabled bearer , priority 0 [ 277.948115][T15108] syzkaller0: entered promiscuous mode [ 277.954885][T15108] syzkaller0: entered allmulticast mode [ 278.042764][T15108] tipc: Resetting bearer [ 278.053952][T15106] tipc: Resetting bearer [ 278.124221][T15106] tipc: Disabling bearer [ 278.406257][ T8785] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.563067][T15127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.579258][T15139] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 278.631031][T15139] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 278.819819][T15152] __nla_validate_parse: 15 callbacks suppressed [ 278.819839][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2477'. [ 278.849378][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 278.944832][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 279.045596][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.247655][T15174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2483'. [ 279.301042][T15174] bond0: entered promiscuous mode [ 279.324117][T15174] bond0: left promiscuous mode [ 279.480438][T15184] syzkaller1: entered promiscuous mode [ 279.487380][T15184] syzkaller1: entered allmulticast mode [ 279.932766][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2492'. [ 279.936904][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 279.962990][T15216] bond0: entered promiscuous mode [ 279.969961][T15216] bond_slave_0: entered promiscuous mode [ 279.976923][T15216] bond_slave_1: entered promiscuous mode [ 279.984666][T15216] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 279.994857][T15216] bond0: left promiscuous mode [ 280.001471][T15216] bond_slave_0: left promiscuous mode [ 280.008864][T15216] bond_slave_1: left promiscuous mode [ 280.016821][T15216] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 280.341146][T15228] netlink: 'syz.4.2502': attribute type 12 has an invalid length. [ 280.535227][T15249] openvswitch: netlink: Multiple metadata blocks provided [ 280.994200][T15282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2517'. [ 281.009156][T15282] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2517'. [ 281.150277][T15292] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2520'. [ 281.209478][T15296] netlink: 'syz.1.2521': attribute type 1 has an invalid length. [ 281.219996][T15296] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2521'. [ 281.546689][T15320] netlink: 'syz.3.2526': attribute type 1 has an invalid length. [ 281.662154][T15320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.811353][T15332] tipc: Enabled bearer , priority 0 [ 281.833175][T15332] syzkaller0: entered promiscuous mode [ 281.867041][T15332] syzkaller0: entered allmulticast mode [ 281.934361][T15342] netlink: 'syz.2.2533': attribute type 1 has an invalid length. [ 281.937465][T15337] bond7: entered promiscuous mode [ 281.951021][T15337] bond7: entered allmulticast mode [ 281.958511][T15337] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.195313][T15337] bond7 (unregistering): Released all slaves [ 282.383753][T15350] tipc: Resetting bearer [ 282.427697][T15330] tipc: Resetting bearer [ 282.471071][T15330] tipc: Disabling bearer [ 282.677494][T15371] tipc: Enabling of bearer rejected, already enabled [ 282.754363][T15371] tipc: Resetting bearer [ 283.804057][T15414] netlink: 'syz.1.2556': attribute type 4 has an invalid length. [ 283.859342][T15420] netlink: 'syz.1.2556': attribute type 4 has an invalid length. [ 283.929140][T15420] __nla_validate_parse: 4 callbacks suppressed [ 283.929159][T15420] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2556'. [ 283.974426][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 284.044976][T15430] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2560'. [ 284.354833][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 284.519032][T15454] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.682742][T15468] netlink: 'syz.2.2569': attribute type 4 has an invalid length. [ 284.981951][T15487] netlink: 'syz.2.2579': attribute type 28 has an invalid length. [ 284.997989][T15487] netlink: 'syz.2.2579': attribute type 3 has an invalid length. [ 285.007910][T15487] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2579'. [ 285.171309][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 285.185068][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'. [ 285.556617][T15518] netlink: 'syz.2.2585': attribute type 11 has an invalid length. [ 286.203424][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2588'. [ 286.638099][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2595'. [ 286.677330][T15542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2595'. [ 286.943604][T15563] netlink: 'syz.3.2601': attribute type 21 has an invalid length. [ 286.976690][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 296.326547][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.242498][ T6541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.406279][T12528] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.074646][T15576] __nla_validate_parse: 2 callbacks suppressed [ 313.074666][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2603'. [ 313.108236][T15578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.153731][T15585] netlink: 'syz.1.2603': attribute type 1 has an invalid length. [ 313.163578][T15585] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2603'. [ 313.263860][T15589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2608'. [ 313.793733][T15622] bond_slave_0: left allmulticast mode [ 314.154519][T15645] syzkaller1: entered promiscuous mode [ 314.163195][T15645] syzkaller1: entered allmulticast mode [ 314.172651][T15643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.385967][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 314.527759][T15668] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2631'. [ 314.540413][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 314.569186][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2631'. [ 314.614406][T15673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2633'. [ 314.918160][T15685] ip6erspan0: entered promiscuous mode [ 315.062817][T15693] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2640'. [ 315.096339][T15692] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2638'. [ 315.772177][T15729] IPVS: length: 157 != 24 [ 315.788917][T15728] syzkaller0: entered promiscuous mode [ 315.795223][T15728] syzkaller0: entered allmulticast mode [ 315.839882][T15725] tipc: Enabled bearer , priority 0 [ 315.920780][T15734] tipc: Enabling of bearer rejected, already enabled [ 315.982534][T15725] tipc: Resetting bearer [ 316.007001][T15725] tipc: Disabling bearer [ 316.084649][T15744] : renamed from hsr0 (while UP) [ 316.229263][T15754] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.285129][T15756] netlink: 'syz.1.2659': attribute type 4 has an invalid length. [ 316.309245][T15756] netlink: 'syz.1.2659': attribute type 4 has an invalid length. [ 316.383769][T15762] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 316.396183][T15762] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 316.432101][T15764] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 316.486516][T15764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.506995][T15772] bridge_slave_1: mtu greater than device maximum [ 316.762328][T15783]  speed is unknown, defaulting to 1000 [ 316.798425][T15783] syzkaller0 speed is unknown, defaulting to 1000 [ 316.881755][T15791] netlink: zone id is out of range [ 316.922541][T15791] netlink: zone id is out of range [ 316.937898][T15791] netlink: zone id is out of range [ 316.954664][T15791] netlink: zone id is out of range [ 316.978117][T15791] netlink: zone id is out of range [ 317.001693][T15791] netlink: zone id is out of range [ 317.092349][T15794]  speed is unknown, defaulting to 1000 [ 317.101304][T15794] syzkaller0 speed is unknown, defaulting to 1000 [ 317.353750][T15811] FAULT_INJECTION: forcing a failure. [ 317.353750][T15811] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.378322][T15811] CPU: 0 UID: 0 PID: 15811 Comm: syz.1.2676 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 317.378351][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.378370][T15811] Call Trace: [ 317.378377][T15811] [ 317.378390][T15811] dump_stack_lvl+0x189/0x250 [ 317.378417][T15811] ? __pfx____ratelimit+0x10/0x10 [ 317.378443][T15811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.378460][T15811] ? __pfx__printk+0x10/0x10 [ 317.378482][T15811] ? __might_fault+0xb0/0x130 [ 317.378519][T15811] should_fail_ex+0x414/0x560 [ 317.378552][T15811] _copy_from_user+0x2d/0xb0 [ 317.378576][T15811] ___sys_sendmsg+0x158/0x2a0 [ 317.378599][T15811] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.378656][T15811] ? __fget_files+0x2a/0x420 [ 317.378673][T15811] ? __fget_files+0x3a0/0x420 [ 317.378701][T15811] __x64_sys_sendmsg+0x19b/0x260 [ 317.378721][T15811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.378748][T15811] ? __pfx_ksys_write+0x10/0x10 [ 317.378770][T15811] ? rcu_is_watching+0x15/0xb0 [ 317.378802][T15811] ? do_syscall_64+0xbe/0x3b0 [ 317.378828][T15811] do_syscall_64+0xfa/0x3b0 [ 317.378850][T15811] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.378872][T15811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.378890][T15811] ? clear_bhb_loop+0x60/0xb0 [ 317.378911][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.378927][T15811] RIP: 0033:0x7fa0e118e9a9 [ 317.378949][T15811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.378971][T15811] RSP: 002b:00007fa0e1fb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.378996][T15811] RAX: ffffffffffffffda RBX: 00007fa0e13b5fa0 RCX: 00007fa0e118e9a9 [ 317.379010][T15811] RDX: 0000000024004052 RSI: 0000200000000140 RDI: 0000000000000004 [ 317.379021][T15811] RBP: 00007fa0e1fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 317.379033][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.379044][T15811] R13: 0000000000000000 R14: 00007fa0e13b5fa0 R15: 00007ffef44b6168 [ 317.379073][T15811] [ 318.102186][T15845] __nla_validate_parse: 5 callbacks suppressed [ 318.102204][T15845] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2687'. [ 318.193225][T15840]  speed is unknown, defaulting to 1000 [ 318.236924][T15840] syzkaller0 speed is unknown, defaulting to 1000 [ 318.238683][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 318.263541][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2688'. [ 318.327529][T15856] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2689'. [ 318.350592][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'. [ 318.474461][T15864] FAULT_INJECTION: forcing a failure. [ 318.474461][T15864] name failslab, interval 1, probability 0, space 0, times 1 [ 318.501226][T15864] CPU: 0 UID: 0 PID: 15864 Comm: syz.1.2691 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 318.501254][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.501265][T15864] Call Trace: [ 318.501272][T15864] [ 318.501280][T15864] dump_stack_lvl+0x189/0x250 [ 318.501304][T15864] ? __pfx____ratelimit+0x10/0x10 [ 318.501328][T15864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.501347][T15864] ? __pfx__printk+0x10/0x10 [ 318.501371][T15864] ? __pfx___might_resched+0x10/0x10 [ 318.501400][T15864] should_fail_ex+0x414/0x560 [ 318.501429][T15864] should_failslab+0xa8/0x100 [ 318.501447][T15864] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 318.501472][T15864] ? __alloc_skb+0x112/0x2d0 [ 318.501499][T15864] __alloc_skb+0x112/0x2d0 [ 318.501526][T15864] netlink_sendmsg+0x5c6/0xb30 [ 318.501560][T15864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.501584][T15864] ? aa_sock_msg_perm+0x94/0x160 [ 318.501608][T15864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.501628][T15864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.501661][T15864] __sock_sendmsg+0x219/0x270 [ 318.501686][T15864] ____sys_sendmsg+0x505/0x830 [ 318.501711][T15864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.501737][T15864] ? import_iovec+0x74/0xa0 [ 318.501762][T15864] ___sys_sendmsg+0x21f/0x2a0 [ 318.501782][T15864] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.501840][T15864] ? __fget_files+0x2a/0x420 [ 318.501857][T15864] ? __fget_files+0x3a0/0x420 [ 318.501885][T15864] __x64_sys_sendmsg+0x19b/0x260 [ 318.501904][T15864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.501932][T15864] ? __pfx_ksys_write+0x10/0x10 [ 318.501953][T15864] ? rcu_is_watching+0x15/0xb0 [ 318.501983][T15864] ? do_syscall_64+0xbe/0x3b0 [ 318.502011][T15864] do_syscall_64+0xfa/0x3b0 [ 318.502033][T15864] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.502055][T15864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.502073][T15864] ? clear_bhb_loop+0x60/0xb0 [ 318.502094][T15864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.502110][T15864] RIP: 0033:0x7fa0e118e9a9 [ 318.502124][T15864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.502138][T15864] RSP: 002b:00007fa0e1fb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.502158][T15864] RAX: ffffffffffffffda RBX: 00007fa0e13b5fa0 RCX: 00007fa0e118e9a9 [ 318.502171][T15864] RDX: 0000000024004052 RSI: 0000200000000140 RDI: 0000000000000004 [ 318.502183][T15864] RBP: 00007fa0e1fb1090 R08: 0000000000000000 R09: 0000000000000000 [ 318.502195][T15864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.502205][T15864] R13: 0000000000000000 R14: 00007fa0e13b5fa0 R15: 00007ffef44b6168 [ 318.502233][T15864] [ 319.188930][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2695'. [ 319.689915][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2701'. [ 319.810261][T15906] vlan2: entered allmulticast mode [ 319.817612][T15906] veth1: entered allmulticast mode [ 319.991894][T15923] sctp: [Deprecated]: syz.1.2708 (pid 15923) Use of int in maxseg socket option. [ 319.991894][T15923] Use struct sctp_assoc_value instead [ 320.028274][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'. [ 320.103029][T15923] team_slave_0: entered promiscuous mode [ 320.109072][T15923] team_slave_1: entered promiscuous mode [ 320.117289][T15923] macsec1: entered allmulticast mode [ 320.132621][T15923] team0: entered allmulticast mode [ 320.143348][T15923] team_slave_0: entered allmulticast mode [ 320.150319][T15937] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2712'. [ 320.164382][T15923] team_slave_1: entered allmulticast mode [ 320.168984][ T8785] wlan1: Trigger new scan to find an IBSS to join [ 320.181687][T15923] team0: left allmulticast mode [ 320.191542][T15923] team_slave_0: left allmulticast mode [ 320.199110][T15923] team_slave_1: left allmulticast mode [ 320.205143][T15923] team_slave_0: left promiscuous mode [ 320.211748][T15923] team_slave_1: left promiscuous mode [ 320.459659][T15958] bridge0: port 3(veth0_to_bridge) entered blocking state [ 320.468437][T15949] block nbd2: server does not support multiple connections per device. [ 320.482068][T15958] bridge0: port 3(veth0_to_bridge) entered disabled state [ 320.487218][T15949] block nbd2: shutting down sockets [ 320.500861][T15963] FAULT_INJECTION: forcing a failure. [ 320.500861][T15963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.530251][T15963] CPU: 0 UID: 0 PID: 15963 Comm: syz.3.2717 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 320.530278][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.530289][T15963] Call Trace: [ 320.530297][T15963] [ 320.530304][T15963] dump_stack_lvl+0x189/0x250 [ 320.530327][T15963] ? __pfx____ratelimit+0x10/0x10 [ 320.530352][T15963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.530370][T15963] ? __pfx__printk+0x10/0x10 [ 320.530390][T15963] ? __might_fault+0xb0/0x130 [ 320.530423][T15963] should_fail_ex+0x414/0x560 [ 320.530450][T15963] _copy_from_iter+0x1db/0x16f0 [ 320.530474][T15963] ? rcu_is_watching+0x15/0xb0 [ 320.530499][T15963] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 320.530523][T15963] ? __pfx__copy_from_iter+0x10/0x10 [ 320.530544][T15963] ? __build_skb_around+0x257/0x3e0 [ 320.530571][T15963] ? netlink_sendmsg+0x642/0xb30 [ 320.530591][T15963] ? skb_put+0x11b/0x210 [ 320.530610][T15963] netlink_sendmsg+0x6b2/0xb30 [ 320.530640][T15963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.530667][T15963] ? aa_sock_msg_perm+0x94/0x160 [ 320.530689][T15963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.530714][T15963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.530737][T15963] __sock_sendmsg+0x219/0x270 [ 320.530762][T15963] ____sys_sendmsg+0x505/0x830 [ 320.530784][T15963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.530809][T15963] ? import_iovec+0x74/0xa0 [ 320.530833][T15963] ___sys_sendmsg+0x21f/0x2a0 [ 320.530852][T15963] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.530899][T15963] ? __fget_files+0x2a/0x420 [ 320.530916][T15963] ? __fget_files+0x3a0/0x420 [ 320.530941][T15963] __x64_sys_sendmsg+0x19b/0x260 [ 320.530963][T15963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.530989][T15963] ? __pfx_ksys_write+0x10/0x10 [ 320.531017][T15963] ? do_syscall_64+0xbe/0x3b0 [ 320.531043][T15963] do_syscall_64+0xfa/0x3b0 [ 320.531064][T15963] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.531085][T15963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.531102][T15963] ? clear_bhb_loop+0x60/0xb0 [ 320.531122][T15963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.531138][T15963] RIP: 0033:0x7fccef38e9a9 [ 320.531154][T15963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.531168][T15963] RSP: 002b:00007fccf02a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.531189][T15963] RAX: ffffffffffffffda RBX: 00007fccef5b6080 RCX: 00007fccef38e9a9 [ 320.531201][T15963] RDX: 0000000024004052 RSI: 0000200000000140 RDI: 0000000000000004 [ 320.531212][T15963] RBP: 00007fccf02a1090 R08: 0000000000000000 R09: 0000000000000000 [ 320.531223][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.531237][T15963] R13: 0000000000000001 R14: 00007fccef5b6080 R15: 00007ffc8bdfcc38 [ 320.531265][T15963] [ 320.531743][T15958] veth0_to_bridge: entered promiscuous mode [ 320.883218][T15974] ip6gre1: entered allmulticast mode [ 321.069923][T15986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2729'. [ 321.476293][T16015] FAULT_INJECTION: forcing a failure. [ 321.476293][T16015] name failslab, interval 1, probability 0, space 0, times 0 [ 321.555670][T16015] CPU: 0 UID: 0 PID: 16015 Comm: syz.0.2735 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 321.555699][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.555710][T16015] Call Trace: [ 321.555718][T16015] [ 321.555726][T16015] dump_stack_lvl+0x189/0x250 [ 321.555751][T16015] ? __pfx____ratelimit+0x10/0x10 [ 321.555776][T16015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.555795][T16015] ? __pfx__printk+0x10/0x10 [ 321.555823][T16015] ? __pfx___might_resched+0x10/0x10 [ 321.555847][T16015] ? fs_reclaim_acquire+0x7d/0x100 [ 321.555872][T16015] should_fail_ex+0x414/0x560 [ 321.555899][T16015] should_failslab+0xa8/0x100 [ 321.555918][T16015] __kmalloc_cache_noprof+0x70/0x3d0 [ 321.555941][T16015] ? genl_start+0x1c9/0x6c0 [ 321.555965][T16015] genl_start+0x1c9/0x6c0 [ 321.555983][T16015] ? netlink_lookup+0x30/0x200 [ 321.556013][T16015] __netlink_dump_start+0x469/0x7e0 [ 321.556047][T16015] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 321.556071][T16015] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 321.556090][T16015] ? genl_get_cmd+0x7d9/0x910 [ 321.556112][T16015] ? __pfx_genl_start+0x10/0x10 [ 321.556128][T16015] ? __pfx_genl_dumpit+0x10/0x10 [ 321.556144][T16015] ? __pfx_genl_done+0x10/0x10 [ 321.556169][T16015] ? stack_trace_save+0x9c/0xe0 [ 321.556196][T16015] genl_rcv_msg+0x5da/0x790 [ 321.556223][T16015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.556242][T16015] ? __pfx_netlbl_calipso_listall+0x10/0x10 [ 321.556282][T16015] netlink_rcv_skb+0x205/0x470 [ 321.556303][T16015] ? __lock_acquire+0xab9/0xd20 [ 321.556328][T16015] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.556350][T16015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.556393][T16015] ? down_read+0x1ad/0x2e0 [ 321.556414][T16015] genl_rcv+0x28/0x40 [ 321.556431][T16015] netlink_unicast+0x82c/0x9e0 [ 321.556464][T16015] ? __pfx_netlink_unicast+0x10/0x10 [ 321.556488][T16015] ? netlink_sendmsg+0x642/0xb30 [ 321.556509][T16015] ? skb_put+0x11b/0x210 [ 321.556529][T16015] netlink_sendmsg+0x805/0xb30 [ 321.556561][T16015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.556587][T16015] ? aa_sock_msg_perm+0x94/0x160 [ 321.556611][T16015] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.556637][T16015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.556662][T16015] __sock_sendmsg+0x219/0x270 [ 321.556687][T16015] ____sys_sendmsg+0x505/0x830 [ 321.556712][T16015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.556741][T16015] ? import_iovec+0x74/0xa0 [ 321.556768][T16015] ___sys_sendmsg+0x21f/0x2a0 [ 321.556789][T16015] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.556847][T16015] ? __fget_files+0x2a/0x420 [ 321.556864][T16015] ? __fget_files+0x3a0/0x420 [ 321.556889][T16015] __x64_sys_sendmsg+0x19b/0x260 [ 321.556910][T16015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.556939][T16015] ? __pfx_ksys_write+0x10/0x10 [ 321.556958][T16015] ? rcu_is_watching+0x15/0xb0 [ 321.556988][T16015] ? do_syscall_64+0xbe/0x3b0 [ 321.557016][T16015] do_syscall_64+0xfa/0x3b0 [ 321.557038][T16015] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.557059][T16015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.557076][T16015] ? clear_bhb_loop+0x60/0xb0 [ 321.557098][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.557114][T16015] RIP: 0033:0x7f258ed8e9a9 [ 321.557131][T16015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.557146][T16015] RSP: 002b:00007f258fb5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.557167][T16015] RAX: ffffffffffffffda RBX: 00007f258efb5fa0 RCX: 00007f258ed8e9a9 [ 321.557180][T16015] RDX: 0000000024004052 RSI: 0000200000000140 RDI: 0000000000000004 [ 321.557192][T16015] RBP: 00007f258fb5c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.557203][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.557213][T16015] R13: 0000000000000000 R14: 00007f258efb5fa0 R15: 00007ffd8e6b9d48 [ 321.557243][T16015] [ 322.087297][T16034] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 323.037158][T16086] netlink: 'syz.1.2756': attribute type 4 has an invalid length. [ 323.217182][ T8785] wlan1: Trigger new scan to find an IBSS to join [ 323.247138][T16096] __nla_validate_parse: 6 callbacks suppressed [ 323.247156][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2764'. [ 323.331784][T16105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2767'. [ 323.476790][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'. [ 323.626932][T16119] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 323.653342][T16119] nbd: error processing sock list [ 323.675309][T16119] block nbd2: shutting down sockets [ 323.689526][T16125] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2774'. [ 323.908425][T16132] netlink: 'syz.2.2775': attribute type 11 has an invalid length. [ 323.938969][T16132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2775'. [ 324.190636][ T8782] wlan1: Creating new IBSS network, BSSID de:c5:4b:77:70:9a [ 324.510704][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 324.655035][T16173] pim6reg1: entered promiscuous mode [ 324.662080][T16173] pim6reg1: entered allmulticast mode [ 324.692193][T16177] bridge: RTM_NEWNEIGH with invalid ether address [ 324.923341][T16186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2797'. [ 325.118462][T16199] vlan0: entered promiscuous mode [ 325.124554][T16199] bridge0: entered promiscuous mode [ 325.308958][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 325.328398][T16216] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2804'. [ 325.521287][T16225] pim6reg: entered allmulticast mode [ 325.532519][T16225] netlink: 'syz.2.2808': attribute type 3 has an invalid length. [ 325.553042][T16225] pim6reg: left allmulticast mode [ 325.671472][T16236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2811'. [ 325.843028][T16243] vlan0: entered allmulticast mode [ 325.890534][T16251] tipc: Disabling bearer [ 326.156347][ T3565] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.176151][ T3565] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.202959][ T3565] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.236326][T16267] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 326.249337][ T3565] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.529709][T16296] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 326.678355][T16296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.770016][T16305] veth9: entered allmulticast mode [ 326.782160][T16296] veth0_to_bond: left allmulticast mode [ 326.794878][T16314] net_ratelimit: 13 callbacks suppressed [ 326.794894][T16314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.801718][T16296] veth0_to_bond: left promiscuous mode [ 326.802000][T16296] bridge1: port 1(veth0_to_bond) entered disabled state [ 326.893287][T16303] vlan1: entered allmulticast mode [ 326.902886][T16303] veth1: entered allmulticast mode [ 326.937191][T16319] syzkaller1: entered promiscuous mode [ 326.943839][T16319] syzkaller1: entered allmulticast mode [ 327.189395][T16328] bridge_slave_0: left allmulticast mode [ 327.217722][T16328] bridge_slave_0: left promiscuous mode [ 327.268724][T16328] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.309384][T16328] bridge_slave_1: left allmulticast mode [ 327.349961][T16328] bridge_slave_1: left promiscuous mode [ 327.372040][T16328] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.431819][T16349] netlink: 'syz.2.2848': attribute type 1 has an invalid length. [ 327.647763][T16363] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.244510][T16328] bond0: (slave bond_slave_0): Releasing backup interface [ 328.261775][T16328] bond0: (slave bond_slave_1): Releasing backup interface [ 328.280996][T16328] team0: Port device team_slave_0 removed [ 328.295276][T16328] team0: Port device team_slave_1 removed [ 328.318844][T16328] bond0: (slave wlan1): Releasing backup interface [ 328.344599][T16328] bond4: (slave bond5): Releasing backup interface [ 328.353275][T16328] bond5: left promiscuous mode [ 328.370461][T16344] team0: Mode changed to "activebackup" [ 328.381567][T16361] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 328.432101][T16371] tipc: Enabled bearer , priority 0 [ 328.803563][T16401] __nla_validate_parse: 11 callbacks suppressed [ 328.803582][T16401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2859'. [ 328.983445][T16413] siw: device registration error -23 [ 329.033068][T16415] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2863'. [ 329.104670][T16417] tipc: Enabled bearer , priority 0 [ 329.149343][T16417] syzkaller0: entered promiscuous mode [ 329.155120][T16417] syzkaller0: entered allmulticast mode [ 329.167482][ T8785] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 329.324090][T16432] tipc: Resetting bearer [ 329.357058][T16416] tipc: Resetting bearer [ 329.421110][T16416] tipc: Disabling bearer [ 329.443555][T12528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.479017][T12528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.161476][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'. [ 330.231864][T16489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.394210][T16497] tipc: Can't bind to reserved service type 1 [ 330.415269][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2886'. [ 330.433654][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 330.447356][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2887'. [ 330.459563][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 330.478967][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 330.522674][T16503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2885'. [ 330.604999][ T8782] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.619978][ T8782] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.625597][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 330.631069][ T8782] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.658780][ T8782] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.882253][T16529] vlan1: entered allmulticast mode [ 331.525587][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 331.851841][T16567] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 331.864740][T16567] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 331.874827][T16567] CPU: 1 UID: 0 PID: 16567 Comm: syz.3.2904 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 331.887769][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.898619][T16567] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 331.904608][T16567] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 331.926389][T16567] RSP: 0018:ffffc9001aaa67f0 EFLAGS: 00010206 [ 331.932727][T16567] RAX: 000000001fffe000 RBX: 1ffff110091cb482 RCX: ffff888025b35a00 [ 331.941056][T16567] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 331.949286][T16567] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 331.957953][T16567] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 331.966741][T16567] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888048e5a410 [ 331.976031][T16567] FS: 00007fccf02c26c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 331.986198][T16567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.993122][T16567] CR2: 000055555dee2808 CR3: 0000000048ac4000 CR4: 00000000003526f0 [ 332.001888][T16567] Call Trace: [ 332.005335][T16567] [ 332.008540][T16567] __ipv6_dev_mc_dec+0x2e4/0x330 [ 332.015402][T16567] ipv6_dev_mc_dec+0x30/0xc0 [ 332.020279][T16567] br_multicast_leave_snoopers+0x15a/0x1c0 [ 332.026794][T16567] ? __pfx___timer_delete_sync+0x10/0x10 [ 332.032957][T16567] ? __pfx_br_multicast_leave_snoopers+0x10/0x10 [ 332.040168][T16567] br_dev_stop+0x8a/0x180 [ 332.045801][T16567] ? __pfx_br_dev_stop+0x10/0x10 [ 332.051260][T16567] __dev_close_many+0x361/0x6f0 [ 332.056219][T16567] ? __pfx___dev_close_many+0x10/0x10 [ 332.061858][T16567] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 332.068179][T16567] __dev_change_flags+0x2c7/0x6d0 [ 332.073794][T16567] ? __pfx___dev_change_flags+0x10/0x10 [ 332.080765][T16567] netif_change_flags+0x88/0x1a0 [ 332.085801][T16567] do_setlink+0xc55/0x41c0 [ 332.090740][T16567] ? ___ratelimit+0x7c3/0xab0 [ 332.095499][T16567] ? __pfx_do_setlink+0x10/0x10 [ 332.101110][T16567] ? __pfx____ratelimit+0x10/0x10 [ 332.106660][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.111872][T16567] ? __mutex_trylock_common+0x153/0x260 [ 332.117768][T16567] ? __pfx___mutex_trylock_common+0x10/0x10 [ 332.124088][T16567] ? rcu_is_watching+0x15/0xb0 [ 332.129310][T16567] ? trace_contention_end+0x39/0x120 [ 332.134954][T16567] ? __mutex_lock+0x335/0x1340 [ 332.140090][T16567] ? __pfx_aa_get_newest_label+0x10/0x10 [ 332.146067][T16567] ? __pfx_aa_get_newest_label+0x10/0x10 [ 332.152710][T16567] ? rtnl_newlink+0x8db/0x1c70 [ 332.157999][T16567] ? rcu_is_watching+0x15/0xb0 [ 332.162946][T16567] ? __pfx___mutex_lock+0x10/0x10 [ 332.168405][T16567] ? ns_capable+0x8a/0xf0 [ 332.173173][T16567] ? rtnl_link_get_net_capable+0x16a/0x350 [ 332.179864][T16567] rtnl_newlink+0x160b/0x1c70 [ 332.184938][T16567] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.190685][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.196066][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.201260][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.206700][T16567] ? is_bpf_text_address+0x26/0x2b0 [ 332.212548][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.217588][T16567] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.222870][T16567] rtnetlink_rcv_msg+0x7cc/0xb70 [ 332.228108][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.233821][T16567] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 332.239281][T16567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.244945][T16567] netlink_rcv_skb+0x205/0x470 [ 332.250086][T16567] ? __lock_acquire+0xab9/0xd20 [ 332.255507][T16567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.261240][T16567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.267664][T16567] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.274097][T16567] netlink_unicast+0x82c/0x9e0 [ 332.279291][T16567] ? __pfx_netlink_unicast+0x10/0x10 [ 332.284974][T16567] ? netlink_sendmsg+0x642/0xb30 [ 332.289992][T16567] ? skb_put+0x11b/0x210 [ 332.294319][T16567] netlink_sendmsg+0x805/0xb30 [ 332.299699][T16567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.305730][T16567] ? aa_sock_msg_perm+0x94/0x160 [ 332.311220][T16567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.316779][T16567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.322241][T16567] __sock_sendmsg+0x219/0x270 [ 332.327103][T16567] ____sys_sendmsg+0x505/0x830 [ 332.332044][T16567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.338633][T16567] ? import_iovec+0x74/0xa0 [ 332.343218][T16567] ___sys_sendmsg+0x21f/0x2a0 [ 332.348233][T16567] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.353992][T16567] ? __fget_files+0x2a/0x420 [ 332.359405][T16567] ? __fget_files+0x3a0/0x420 [ 332.364579][T16567] __x64_sys_sendmsg+0x19b/0x260 [ 332.369859][T16567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.375845][T16567] ? rcu_is_watching+0x15/0xb0 [ 332.381138][T16567] ? do_syscall_64+0xbe/0x3b0 [ 332.386777][T16567] do_syscall_64+0xfa/0x3b0 [ 332.391582][T16567] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.398534][T16567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.405046][T16567] ? clear_bhb_loop+0x60/0xb0 [ 332.410255][T16567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.417594][T16567] RIP: 0033:0x7fccef38e9a9 [ 332.422578][T16567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.445248][T16567] RSP: 002b:00007fccf02c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.454199][T16567] RAX: ffffffffffffffda RBX: 00007fccef5b5fa0 RCX: 00007fccef38e9a9 [ 332.464532][T16567] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 332.473306][T16567] RBP: 00007fccef410d69 R08: 0000000000000000 R09: 0000000000000000 [ 332.481717][T16567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.490212][T16567] R13: 0000000000000000 R14: 00007fccef5b5fa0 R15: 00007ffc8bdfcc38 [ 332.499359][T16567] [ 332.502819][T16567] Modules linked in: [ 332.510607][T16567] ---[ end trace 0000000000000000 ]--- [ 332.528633][T16573] netlink: 'syz.1.2905': attribute type 178 has an invalid length. [ 332.548859][T16567] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 332.560471][T16567] Code: ff ff ff e8 a3 ba 41 01 89 c5 31 ff 89 c6 e8 98 a3 91 f7 85 ed 74 45 e8 4f 9f 91 f7 eb 05 e8 48 9f 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 22 c2 f4 f7 49 8b 2c 24 49 8d 7c [ 332.583148][T16567] RSP: 0018:ffffc9001aaa67f0 EFLAGS: 00010206 [ 332.590318][T16567] RAX: 000000001fffe000 RBX: 1ffff110091cb482 RCX: ffff888025b35a00 [ 332.600279][T16567] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 332.611048][T16567] RBP: 0000000000000001 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e [ 332.620727][T16567] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: 00000000ffff0000 [ 332.630429][T16567] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888048e5a410 [ 332.640820][T16567] FS: 00007fccf02c26c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 332.653034][T16567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.660961][T16567] CR2: 0000200000001640 CR3: 0000000048ac4000 CR4: 00000000003526f0 [ 332.670078][T16567] Kernel panic - not syncing: Fatal exception [ 332.677011][T16567] Kernel Offset: disabled [ 332.681704][T16567] Rebooting in 86400 seconds..