last executing test programs: 58.600900563s ago: executing program 2 (id=2662): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x48}}, 0x20004881) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES32=r8, @ANYBLOB="8000ff090a0002"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180714b3227c64fb1d2aa00080045e1744f00029078ac1e0001e0000001120090"], 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) 58.452367721s ago: executing program 2 (id=2664): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1}, 0xfffffffffffffe64) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x5a}]}, 0x10) 58.29306829s ago: executing program 2 (id=2667): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0000000100013070000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000000000000000000004000000693b000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000032000000ac141400000000010000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000020000009600000000000000"], 0xf0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x1, 0x0, 0x0, 0xfffff02c}, {0x5, 0xfc, 0x0, 0x8}]}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="359927bd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000800010000e700000c0006000200000002000000dbf15512c19355d008000e0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20008091}, 0x4040810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8806) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="df2a5a00"/13, @ANYRES16=r7, @ANYBLOB="08002cbd7000fddbdf25020000000c00060004000000000000000e000a007b2d2e237d972b2f7b3a00000c00030000000000000060000c00050020000000000000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="b6bf0d4f2d0ac9026bb9962d3b6c1b8386d2afe2fb58d82b3c6c277b9273995f57840dc4f49de5a3b5fec3545ebc066798d1dfc8b285a86fb6747be87a4113b4cdb8a5f9de637255212a292ef209e149950cdba577c9395fde23dca5ec901662ca5b080000", 0x65}], 0x1, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000400), 0x12) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r10, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000c40), 0x12) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r15, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="fa78f53061b7337ab0531b26b1117244cc15f30266321770767d6e79cae50e5f95cb56d78c1e88060d63547e9bb47ccbb8ae82a09a88a53c84409cc2e7751eeda8517394437bd35078406c2ae502dc9f3dfd43dcf86ff295a2bf6340d42337e4ddd6", @ANYRESDEC=r6, @ANYRES64=r12, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r5], 0x110) 51.780500699s ago: executing program 2 (id=2667): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0000000100013070000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000000000000000000004000000693b000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000032000000ac141400000000010000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000020000009600000000000000"], 0xf0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x1, 0x0, 0x0, 0xfffff02c}, {0x5, 0xfc, 0x0, 0x8}]}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="359927bd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000800010000e700000c0006000200000002000000dbf15512c19355d008000e0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20008091}, 0x4040810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8806) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="df2a5a00"/13, @ANYRES16=r7, @ANYBLOB="08002cbd7000fddbdf25020000000c00060004000000000000000e000a007b2d2e237d972b2f7b3a00000c00030000000000000060000c00050020000000000000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="b6bf0d4f2d0ac9026bb9962d3b6c1b8386d2afe2fb58d82b3c6c277b9273995f57840dc4f49de5a3b5fec3545ebc066798d1dfc8b285a86fb6747be87a4113b4cdb8a5f9de637255212a292ef209e149950cdba577c9395fde23dca5ec901662ca5b080000", 0x65}], 0x1, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000400), 0x12) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r10, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000c40), 0x12) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r15, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="fa78f53061b7337ab0531b26b1117244cc15f30266321770767d6e79cae50e5f95cb56d78c1e88060d63547e9bb47ccbb8ae82a09a88a53c84409cc2e7751eeda8517394437bd35078406c2ae502dc9f3dfd43dcf86ff295a2bf6340d42337e4ddd6", @ANYRESDEC=r6, @ANYRES64=r12, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r5], 0x110) 41.224859171s ago: executing program 2 (id=2667): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0000000100013070000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000000000000000000004000000693b000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000032000000ac141400000000010000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000020000009600000000000000"], 0xf0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x1, 0x0, 0x0, 0xfffff02c}, {0x5, 0xfc, 0x0, 0x8}]}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="359927bd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000800010000e700000c0006000200000002000000dbf15512c19355d008000e0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20008091}, 0x4040810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8806) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="df2a5a00"/13, @ANYRES16=r7, @ANYBLOB="08002cbd7000fddbdf25020000000c00060004000000000000000e000a007b2d2e237d972b2f7b3a00000c00030000000000000060000c00050020000000000000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="b6bf0d4f2d0ac9026bb9962d3b6c1b8386d2afe2fb58d82b3c6c277b9273995f57840dc4f49de5a3b5fec3545ebc066798d1dfc8b285a86fb6747be87a4113b4cdb8a5f9de637255212a292ef209e149950cdba577c9395fde23dca5ec901662ca5b080000", 0x65}], 0x1, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000400), 0x12) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r10, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000c40), 0x12) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r15, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="fa78f53061b7337ab0531b26b1117244cc15f30266321770767d6e79cae50e5f95cb56d78c1e88060d63547e9bb47ccbb8ae82a09a88a53c84409cc2e7751eeda8517394437bd35078406c2ae502dc9f3dfd43dcf86ff295a2bf6340d42337e4ddd6", @ANYRESDEC=r6, @ANYRES64=r12, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r5], 0x110) 31.121651507s ago: executing program 2 (id=2667): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0000000100013070000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000000000000000000004000000693b000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="00000000000000000032000000ac141400000000010000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000020000009600000000000000"], 0xf0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x1, 0x0, 0x0, 0xfffff02c}, {0x5, 0xfc, 0x0, 0x8}]}, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="359927bd7000ffdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000800010000e700000c0006000200000002000000dbf15512c19355d008000e0005000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20008091}, 0x4040810) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$NFC_CMD_GET_SE(r4, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8806) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="df2a5a00"/13, @ANYRES16=r7, @ANYBLOB="08002cbd7000fddbdf25020000000c00060004000000000000000e000a007b2d2e237d972b2f7b3a00000c00030000000000000060000c00050020000000000000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="b6bf0d4f2d0ac9026bb9962d3b6c1b8386d2afe2fb58d82b3c6c277b9273995f57840dc4f49de5a3b5fec3545ebc066798d1dfc8b285a86fb6747be87a4113b4cdb8a5f9de637255212a292ef209e149950cdba577c9395fde23dca5ec901662ca5b080000", 0x65}], 0x1, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000400), 0x12) unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r10, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000c40), 0x12) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r15, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="fa78f53061b7337ab0531b26b1117244cc15f30266321770767d6e79cae50e5f95cb56d78c1e88060d63547e9bb47ccbb8ae82a09a88a53c84409cc2e7751eeda8517394437bd35078406c2ae502dc9f3dfd43dcf86ff295a2bf6340d42337e4ddd6", @ANYRESDEC=r6, @ANYRES64=r12, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r5], 0x110) 3.758861269s ago: executing program 1 (id=3372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x657e, @loopback, 0x60be0441}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:4\t\nm'], 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x28, 0x24, 0x300, 0x1, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0xb}, {0xffff, 0xa}, {0x1, 0x4}}, [@TCA_STAB={0x4}]}, 0xd}}, 0x4004004) 3.614902076s ago: executing program 1 (id=3376): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}], 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x1}], 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRES16=r0], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xfff1}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x40088c5) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x4040840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.469214116s ago: executing program 1 (id=3379): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="740000001400000227bd700000000000097d521f729abc47e22e29531b1a0fe694f5a368b4221bb0d78c6fcfa844673e132ffcbc22068903f5c90661dead3a68b264bcb471f76a5f7a9a96ef2c158f384dc153c93943318b25998cf2f455ab02f74df69277e3833389a1c6917cb8029e174b0000"], 0x74}], 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x100) r5 = socket$netlink(0x10, 0x3, 0xb) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@RTM_DELMDB={0x78, 0x55, 0x690d4a22163e94a0, 0x70bd2b, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x2, {@in6_addr=@private2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10dba}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x1e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x24008004) 2.676821917s ago: executing program 3 (id=3393): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000001010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000800000000000000000801811000083a5e3ab008dba8af9a23bfb90e330c72129b25149fe0c5a6f9cfcf19a619b683d0f87ec7c2f03c0516c918a08030ba85037fa3dfeb83e5d00542da808f424553ddabd4b4b6a495efec9d44824df7dc248b72be27bdd3f8903e6ec25a620", @ANYRES32=r1, @ANYBLOB="0000000000000000b700ba343200bf4bd59465533ce9343db2e6c2498aa200000100000007020000f8ffffffb7030000080000000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000ff7f00000000f8ffffffb70200f60700000000000000000000000000000000870d68cd33de6e2e39b79030bc0f148c2d18edae2911464984f60ef9aa4cabc930078ce7e67b65b2a3af7ab0b2d5c84b128c57e389250911b4b093e044af5f67daa8cc67731c36fc36ab524e1be4a5bfa34aa0c55c310eea7c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r3, 0x0, 0x8001) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000780)='caif0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r3, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r7, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0xa, 0x3, {{0x7, 0x4, 0x3, 0x8, 0x1c, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x7, 0x54, [@rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60ca49ec5e0c2ef409103e03888a130a00000000", @ANYRES32=r8, @ANYBLOB="08000a000000000008000800000500001400060000000000ff0f00000010000001000080140003006e72300000000000000000000000000008000400640101000800080004000000"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.548796742s ago: executing program 1 (id=3395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x44) connect$can_j1939(r5, &(0x7f0000000600)={0x1d, r6, 0x0, {0x2, 0xff}, 0xff}, 0x18) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r7, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x65b2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64000040}, 0x2015) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 2.065989902s ago: executing program 1 (id=3399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) 1.990120345s ago: executing program 1 (id=3402): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') unshare(0x6a040000) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000080)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4, 0x2, {0x5, 0x1}}}]}, 0x38}}, 0x0) 1.561742972s ago: executing program 0 (id=3406): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cf653f", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r6, 0x4, 0x14, 0x1, 0x4, 0x1c, @local, @remote, 0x20, 0x7, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0xc0, r5, 0x11, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x68}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2e3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040010}, 0x40000) 1.211183312s ago: executing program 4 (id=3408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd25, 0x25df5bfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f20014060020010000000000000000000000000002fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 1.13789436s ago: executing program 0 (id=3409): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r2, 0x0, 0x31, 0x0, &(0x7f00000000c0)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x96, "a365f560d0526e460f837f9b206135ca57563bafaf4dc12109fcce7157decba105e199ed507863d98c12b31b7960c6d22333f71b5dcebfb941e5475c7e0c6270476348b82893a16d5654e7a83e02a7147e6fae6a3370a60669ddd616a16b40367202ea2907e5dfdbec438b59b039e2a016bfa5465541bf1f94268c9e2ecb09bb815aa05ca661f64c5a3cdf427797905a2b196a8565cf"}, &(0x7f0000000300)=0x9e) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 901.746092ms ago: executing program 0 (id=3410): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="15edaa64430333180602db3294fff26eb0b7e057f29e0c6338c7917676c66d67b83bea6547595fbb152b4b1dc5b51d97f4f0948d839db5a805b497d2a19506f31e379ac4193e0a679cc8b7c550cade9bad0814e644ded82bb551266c829719f268e40e4369dbce33096cd232d53f9bfd3ac19e88ba22ba018ae834de8d84f81988531b8600f49ea8434e98274205ee6d1521526cdea059d939c995926d8e9b634efce6e607379fdadeff037d623bafd4faa4d06793cbdeb7e2dd197d6aded4504b692c35a9bdc65495f9", @ANYRES16=r0, @ANYBLOB="010025bd7000fddbdf255d00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r7, 0x0) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x7ff, 0x4) sendmmsg$inet(r8, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r8, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00'/20, @ANYRES32=r11, @ANYBLOB="000100006c300000500012800b000100697036746e6c000040000280140002002001000000000000000000000000000206000f00030000000500060001000000080007000001000005000600070000000800140004000000"], 0x70}}, 0xeb64d656001f6f32) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0xfe60) 858.880769ms ago: executing program 4 (id=3411): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRESDEC=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRESDEC=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x20, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x83}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x20, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x83}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000000000)={0x8, {0x3a, 0x4, 0x7, 0x7fffffff, 0xfffffffffffffffb}}) sendto$rxrpc(r7, 0x0, 0x0, 0x40080, 0x0, 0x0) (async) sendto$rxrpc(r7, 0x0, 0x0, 0x40080, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) listen(r8, 0xfff) (async) listen(r8, 0xfff) accept(r8, 0xfffffffffffffffd, 0x0) socket(0x10, 0x80002, 0x0) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="170000001300290a000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x2c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="170000001300290a000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x2c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x1) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000003040)) 813.852527ms ago: executing program 3 (id=3412): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010100}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt(r3, 0x84, 0x82, &(0x7f0000000480)="1a00000002000000", 0x8) connect$vsock_stream(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r4, 0x3) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @random="7e1651d03cea", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xd, 0x6, 0x1, @remote, @private1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 752.759493ms ago: executing program 0 (id=3413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040000000200800000000011040000000086c3a1d6e2e9e6eaf200000000000000000000020300000002000000000000120200000002000000006100000000007599a091a8f31b"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 711.067843ms ago: executing program 3 (id=3414): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) 633.982461ms ago: executing program 4 (id=3415): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000240)={r5, 0x7, 0x25, "c1858ff0e92d1031b51dd7a9bbd58819824f88b497b412583dd4af4d650d44289ee7d81c5e"}, 0x2d) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 559.378754ms ago: executing program 3 (id=3416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="180200000c0010000000000000000000850000004100000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x12, 0xf00, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x4140}}}}}}]}, 0x48}}, 0x0) 553.276371ms ago: executing program 0 (id=3417): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x0, 0x0, 0x0) close(0x3) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb764}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x40) 433.942229ms ago: executing program 4 (id=3418): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={0xfffffffffffffffc, 0x0, 0x1000, 0x103, 0x7}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0xfffb, 0x4}, 0x6) (async) close(r1) (async) r2 = socket$isdn(0x22, 0x2, 0x25) close(r2) 379.842637ms ago: executing program 3 (id=3419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000080)=@xdp={0x2c, 0xc, r2, 0x40}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)="21aed4904852cd13736fdcdcb12e98083671fa31d2b2d40f51dae97953929d0b9ed6271e832a6351f0eb866678541c4c30b09ed455b3dced23ffb40c20147eafd74db14f2d913818c7ac99f2a96485e8a242eaa21a95649d9a3e6858161ed1ff780d256719d4a6ebe81db76c65a6ea3d380beed9702b7e8d63e2a61d0ceeec8ded90959dfa5d974a4ee06a510456c4d34d37541f6318296cfa898ee4621d47057ecda449622192a2738ddbd14d671127e250e96dcc0a697bec9100afcfc16188e324074871733c409096df3f760b3792e20602d812bdb1e0d91613900c447a34b9653e903c89e8884b837c4322170b", 0xef}, {&(0x7f00000002c0)="ad5289b98e42f722462d81e3d9267fcf7c5d76f27ca81a782a111ec1464fa2c2c222b5f281304b49f9577ae705db382f0e528ff9691283eda0f0c4af9b1f1b030546926c53b851da8a021082cd55504fad38fb3889a9ea082d", 0x59}], 0x2, &(0x7f0000000800)=[{0xe8, 0x10d, 0x7, "ab817d9cbc4661c26842eea4acfb201ed63a23df494a1fb3318fa12629f4a0b62386ef5efae9642ddc52526035071821c84656568663c282730f4e3edf657f42eba6715678a2787ebce1cf35faec10f9ee3a03a7ed9ec5049f8502bae57b989c55921f572ac0b487ec46a8eaf5fc7b79da8974572834995e18298476c8c72faed813cf851bbea442c5fe2d2e35314b5af69d550a1ab31f0223acb4d785b0fa12da6400f7efe2ef715b2886d5a29f2e95de9dad86672ff37e03f39412bee8d338ab617ac14852f8e3e3fad31d6b4a430dce77c5"}, {0x1010, 0x119, 0xffffffff, "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"}, {0x1010, 0x0, 0x1, "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"}, {0x80, 0x107, 0xf, "e5759a80cdd93301bcad307133343718270e9d5af642c3eafde8429e7a0c2a35c25bdbca155cd4500f6937b40af5405058d7cf076ad55dfe4821cd7e3bc56fb3db8739bfe59436c81c67b53adfbdedf47a66a0868b2de554b856531b30e2ca31251a0b1ad7715478b036"}, {0x70, 0x110, 0xed, "33a0177dfb794e23dcbf5927960d79f5510625f408c29e945af0fb18c1c1ec291af9941a78ef6e39ddc0109916e6b47186f1d86a9ed931abb5878c5a0c8c32ed699dfa2932cab3dde731f3d615829cd30cccb63df4c49a3b25384c51"}, {0xb8, 0x84, 0xc3, "10d80771b48878d5097220349ed4f10271a7ceb49ad751e365ba8ced5832838e82f05aa38ac9ec0a3ee37a4fef37c8ee825162c61368bf7f76df7633d3d2ad4eefa6b56b45d80aa1fb08a78cf90338d2f7a615bcaf45fef08ab531923c9dbbfbd9d765760eaf96d847ac0ed079565fbb0b2af6280d02d667562ab62763b17be5ef5b148a984e92b35aa9ab8f167e39d8d68e24b19b1c33527a7ac703f06c9618e526d6f32df6d82f"}, {0xb0, 0x0, 0x7, "df6db42594f591132fcd2e097e291cb70642f7c9323378ba772c6c38075750ab3c5c9654b7f68c2db2c6dffbfa98d8f8f3249fa6cd15c132f1cf69f8fac564726b419d0cd09324d3672f04a9c5dcbb507f182567707c7c5e55f4be82bdc022067ab26186efe8b0eddbea8536560f43a6f0fecdd0776e250613f68502f4d24eaa32ab1724064945768b4e90c046a3fa29e5c474d1ae583ea9e2d33d2f65"}], 0x2360}, 0x840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 342.584142ms ago: executing program 4 (id=3420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x8, 0x8000000000000001}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x191883, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) r5 = socket(0x2000000015, 0x80005, 0x40000) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0xc, 0x7, 0x101}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 117.50732ms ago: executing program 4 (id=3421): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x8, 0x0, 0x1, 0x5, 0x9, 0x2, 0x2, r1}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0x6000, 0x85, "5d1b8ae04703a75d0d46012f47d850a9f18a521d255d7a98069e38062df5a83e8c1dd5def361fecf04818b55148fb25e408fa4ff364ae976d2ee1c50c4f41a8a51bf13bd1ea2e8c6df874cb69f4962fee9ee26627bfe705d3e52871c442e49144440e047ed4431feb41f559c49087dd7dc95b5988e64af660e31f801f5dfbe5288853d483a"}, 0x8d) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x0, @remote, 0xd4}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x8, @private0, 0x100}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @private=0xa010100}], 0x88) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r1, 0xac, "cb4a8ea04aca6ac275e5c329e064f52bd1b8f9a83db64ed2e4e0b1f40e1c5320a2709567c58271319ddad3e80ac3e1fc4e7e010e4a00cfced0b57ee21fbe05104540e1d74f90cda33743f79cdc90670a6f20309631ba88c0c9f6836f00ffc039eae014519c5035e06c753fdbe7ba18702662aa29858b72c4f2f196776aee199802cfccdfe840327d5a11911d29f2ea880e6ab10f2d6464b3d65277ff77562c20967eaf3f066d3b07328ae9fb"}, &(0x7f0000000340)=0xb4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r2, 0x8}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.stat\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000400)="123da6a8a35f341e29cac6", 0xb, 0x2000c000, &(0x7f0000000440)={0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xddb}, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000480)=0x4, 0x4) r4 = accept4(r0, 0x0, &(0x7f00000004c0), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000500)={r3}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000540)) r5 = socket(0x2b, 0x80000, 0x8a) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000640)={r0}) r7 = socket(0x2b, 0x1, 0x710) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000680)=0x4, 0x4) connect$bt_l2cap(r3, &(0x7f00000006c0)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf40}, 0xe) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000700)='wg1\x00', 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000740)={r1, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000800)=0x84) r9 = accept4$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14, 0x180800) getsockname$packet(r9, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14) socket$inet(0x2, 0x5, 0x7) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000940)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7b6}, 0xe) r11 = accept(r4, 0x0, &(0x7f0000000980)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f00000009c0)=0x9, 0x4) close(r11) setsockopt(r6, 0x7fff, 0xb, &(0x7f0000000a00)="9faa1003ee1101a377a0c6ad6b22f3fe10d96af6f077f77d7836e2c9f568db91f6035532589bc367bd9851d1ccf26be7c7ccf34db60ebe31a293", 0x3a) 112.396246ms ago: executing program 3 (id=3422): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000008c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000200)={@random="5b1a03372511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x11, 0x0, @local, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x20, 0x700, 0xf, 0x2, {{0x14, 0x4, 0x1, 0x3, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x1c, 0xf2, 0x0, 0xa, [0x0, 0x2, 0x401, 0x161, 0x5, 0xa]}, @ssrr={0x89, 0xf, 0x8d, [@remote, @remote, @multicast1]}, @lsrr={0x83, 0xf, 0x29, [@loopback, @multicast2, @multicast1]}, @noop]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x76, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r10, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r10, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x7, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x4, 0xa, 0x2, 0xc, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @ldst={0x26f06b4e60e9d36, 0x2, 0x3, 0x3, 0x5, 0xffffffffffffffc0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0xbc, &(0x7f0000000100)=""/188, 0x41000, 0x44, '\x00', r7, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xd, 0x400, 0x7f}, 0x10, r8, r0, 0x4, &(0x7f0000000400), &(0x7f0000000440)=[{0x0, 0x4, 0xe, 0x8}, {0x4, 0x1, 0x3, 0xb}, {0x0, 0x3, 0x1, 0x5}, {0x2, 0x4, 0x4}], 0x10, 0x8, @void, @value}, 0x94) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) listen(r4, 0x5) 0s ago: executing program 0 (id=3423): socket$nl_route(0x10, 0x3, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) unshare(0x24020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x3b) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008054}, 0x4004080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf251400000008000300", @ANYRES32=r6, @ANYBLOB="05002900eb"], 0x24}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xdc, r4, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x17}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8b, 0xbe, "5cdb835a3f8f6967646a3eb0ba44218d4e0b34e0e5485b966cb5f4ff88de8fb24ce9c8b06a58ad34ee9098b46334585e85f17ab60e824efebbb514bbf7022b58b61265d9f0d16477f50c6df884f7dea7f3515beccd2810c65e080a692f5353156f808961229a82114119e1bb97c1ae264493f66b2e96465ba07928f49e33fec4df5bf749f92e2a"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xc}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004410}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.1.1857'. [ 270.600257][T12137] lowmem_reserve[]: 0 0 0 0 0 [ 270.617746][T12137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.653073][T12137] Node 0 DMA32: 756*4kB (UME) 1063*8kB (UM) 190*16kB (UM) 262*32kB (UM) 479*64kB (UM) 139*128kB (UM) 50*256kB (UME) 18*512kB (UME) 15*1024kB (UME) 6*2048kB (UME) 307*4096kB (M) = 1378536kB [ 270.676598][T12137] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 270.699748][T12137] Node 1 Normal: 203*4kB (UME) 69*8kB (UME) 52*16kB (UME) 115*32kB (UME) 35*64kB (UME) 8*128kB (UME) 5*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3904180kB [ 270.725418][T12137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.736635][T12137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.748181][T12137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.758803][T12137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.821897][T12137] 42482 total pagecache pages [ 270.826631][T12137] 0 pages in swap cache [ 270.844130][T12137] Free swap = 124996kB [ 270.853705][T12137] Total swap = 124996kB [ 270.865040][T12137] 2097051 pages RAM [ 270.872150][T12137] 0 pages HighMem/MovableOnly [ 270.876853][T12137] 424690 pages reserved [ 270.901466][T12137] 0 pages cma reserved [ 271.050642][T12203] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1866'. [ 271.067937][T12203] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1866'. [ 271.110136][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 271.124341][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1866'. [ 271.163875][T12217] C: renamed from lo (while UP) [ 271.185928][T12217] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.801592][T12257] netlink: 'syz.0.1878': attribute type 7 has an invalid length. [ 271.809931][T12257] netlink: 'syz.0.1878': attribute type 8 has an invalid length. [ 271.825226][T12257] gretap0: entered promiscuous mode [ 271.854262][T12257] gretap0: left promiscuous mode [ 272.378151][T12285] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 272.454002][T12287] tc_dump_action: action bad kind [ 272.607909][T12300] xt_ipcomp: unknown flags B [ 272.655220][T12302] netlink: 'syz.2.1892': attribute type 3 has an invalid length. [ 272.968992][T12326] netlink: 'syz.3.1901': attribute type 10 has an invalid length. [ 272.994263][T12327] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 273.006149][T12326] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 273.366109][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.531188][ C0] bridge0: port 2(syz_tun) entered forwarding state [ 273.809296][T12373] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 273.908348][T12373] bond3: entered promiscuous mode [ 273.939594][T12373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.961105][T12382] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 274.051978][T12383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 274.061569][T12383] bond3: (slave bond4): making interface the new active one [ 274.068973][T12383] bond4: entered promiscuous mode [ 274.075431][T12383] bond3: (slave bond4): Enslaving as an active interface with an up link [ 274.484614][T12407] syzkaller1: entered promiscuous mode [ 274.491038][T12407] syzkaller1: entered allmulticast mode [ 274.704321][T12423] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 274.899632][T12437] xt_TCPMSS: Only works on TCP SYN packets [ 275.112977][T12447] __nla_validate_parse: 17 callbacks suppressed [ 275.112999][T12447] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1936'. [ 275.133969][T12447] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1936'. [ 275.144639][T12447] netlink: set zone limit has 8 unknown bytes [ 275.237277][T12431] tunl0: left allmulticast mode [ 275.290696][T12431] netlink: 'syz.1.1930': attribute type 3 has an invalid length. [ 275.298996][T12431] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1930'. [ 275.331409][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 275.514706][T12464] sctp: [Deprecated]: syz.0.1938 (pid 12464) Use of int in maxseg socket option. [ 275.514706][T12464] Use struct sctp_assoc_value instead [ 275.607967][T12464] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20001 [ 275.682279][T12470] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.880962][T12474] sctp: [Deprecated]: syz.0.1944 (pid 12474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.880962][T12474] Use struct sctp_sack_info instead [ 275.933082][T12485] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1945'. [ 275.934483][T12480] sctp: [Deprecated]: syz.0.1944 (pid 12480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.934483][T12480] Use struct sctp_sack_info instead [ 276.029337][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 276.074781][T12477] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1945'. [ 276.083953][T12480] 8021q: VLANs not supported on vcan0 [ 276.424271][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1948'. [ 277.001859][T12532] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 277.091388][T12534] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1960'. [ 277.288928][T12544] pimreg: entered allmulticast mode [ 277.791282][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 278.074466][T12583] sctp: [Deprecated]: syz.3.1978 (pid 12583) Use of int in maxseg socket option. [ 278.074466][T12583] Use struct sctp_assoc_value instead [ 278.350513][T12598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.477986][T12606] netlink: 'syz.3.1987': attribute type 13 has an invalid length. [ 278.519529][T12602] netlink: 'syz.1.1986': attribute type 6 has an invalid length. [ 278.745272][T12622] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 278.815659][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.3.1990 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 278.815692][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.815704][T12622] Call Trace: [ 278.815713][T12622] [ 278.815722][T12622] dump_stack_lvl+0x189/0x250 [ 278.815759][T12622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.815790][T12622] ? __pfx__printk+0x10/0x10 [ 278.815812][T12622] ? __rcu_read_unlock+0x84/0xe0 [ 278.815833][T12622] ? kernfs_path_from_node+0x2c/0x260 [ 278.815857][T12622] ? kernfs_path_from_node+0x22c/0x260 [ 278.815877][T12622] ? kernfs_path_from_node+0x2c/0x260 [ 278.815901][T12622] sysfs_warn_dup+0x8e/0xa0 [ 278.815922][T12622] sysfs_do_create_link_sd+0xc0/0x110 [ 278.815947][T12622] device_add_class_symlinks+0x1cf/0x240 [ 278.815972][T12622] device_add+0x475/0xb50 [ 278.815996][T12622] wiphy_register+0x199a/0x26b0 [ 278.816036][T12622] ? __pfx_wiphy_register+0x10/0x10 [ 278.816055][T12622] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 278.816085][T12622] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 278.816109][T12622] ieee80211_register_hw+0x33e1/0x4120 [ 278.816144][T12622] ? ieee80211_register_hw+0x1481/0x4120 [ 278.816176][T12622] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 278.816204][T12622] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.816240][T12622] ? __hrtimer_setup+0x187/0x210 [ 278.816266][T12622] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 278.816309][T12622] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 278.816357][T12622] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 278.816374][T12622] ? trace_kmalloc+0x1f/0xd0 [ 278.816389][T12622] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 278.816406][T12622] ? kstrndup+0xbf/0x160 [ 278.816435][T12622] hwsim_new_radio_nl+0xea4/0x1b10 [ 278.816455][T12622] ? __pfx___nla_validate_parse+0x10/0x10 [ 278.816505][T12622] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.816545][T12622] ? __nla_parse+0x40/0x60 [ 278.816571][T12622] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 278.816603][T12622] genl_family_rcv_msg_doit+0x212/0x300 [ 278.816633][T12622] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 278.816669][T12622] ? bpf_lsm_capable+0x9/0x20 [ 278.816684][T12622] ? security_capable+0x7e/0x2e0 [ 278.816711][T12622] genl_rcv_msg+0x60e/0x790 [ 278.816742][T12622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.816767][T12622] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 278.816818][T12622] netlink_rcv_skb+0x205/0x470 [ 278.816841][T12622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 278.816868][T12622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.816903][T12622] ? down_read+0x1ad/0x2e0 [ 278.816924][T12622] genl_rcv+0x28/0x40 [ 278.816948][T12622] netlink_unicast+0x758/0x8d0 [ 278.816977][T12622] netlink_sendmsg+0x805/0xb30 [ 278.817011][T12622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.817036][T12622] ? aa_sock_msg_perm+0x94/0x160 [ 278.817061][T12622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.817083][T12622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.817104][T12622] __sock_sendmsg+0x219/0x270 [ 278.817137][T12622] ____sys_sendmsg+0x505/0x830 [ 278.817172][T12622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.817206][T12622] ? import_iovec+0x74/0xa0 [ 278.817226][T12622] ___sys_sendmsg+0x21f/0x2a0 [ 278.817250][T12622] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.817317][T12622] ? __fget_files+0x2a/0x420 [ 278.817334][T12622] ? __fget_files+0x3a0/0x420 [ 278.817374][T12622] __x64_sys_sendmsg+0x19b/0x260 [ 278.817398][T12622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.817431][T12622] ? rcu_is_watching+0x15/0xb0 [ 278.817465][T12622] ? do_syscall_64+0xbe/0x3b0 [ 278.817487][T12622] do_syscall_64+0xfa/0x3b0 [ 278.817503][T12622] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.817538][T12622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.817558][T12622] ? clear_bhb_loop+0x60/0xb0 [ 278.817582][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.817599][T12622] RIP: 0033:0x7ff0ab78e929 [ 278.817617][T12622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.817633][T12622] RSP: 002b:00007ff0ac58b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.817654][T12622] RAX: ffffffffffffffda RBX: 00007ff0ab9b5fa0 RCX: 00007ff0ab78e929 [ 278.817667][T12622] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 278.817679][T12622] RBP: 00007ff0ab810b39 R08: 0000000000000000 R09: 0000000000000000 [ 278.817691][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.817702][T12622] R13: 0000000000000000 R14: 00007ff0ab9b5fa0 R15: 00007ffd5cf597d8 [ 278.817734][T12622] [ 279.319461][T12628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 279.831957][T12654] netlink: 'syz.2.2000': attribute type 28 has an invalid length. [ 279.841317][T12654] netlink: 'syz.2.2000': attribute type 3 has an invalid length. [ 279.861213][T12657] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 280.051700][T12672] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 280.109484][T12672] bridge3: entered promiscuous mode [ 280.123615][T12672] bridge3: entered allmulticast mode [ 280.255983][T12682] __nla_validate_parse: 7 callbacks suppressed [ 280.256003][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'. [ 280.273080][T12684] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 280.414209][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2015'. [ 280.414778][T12695] netlink: 'syz.1.2016': attribute type 12 has an invalid length. [ 280.454420][T12695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2016'. [ 280.474094][T12693] lo: entered allmulticast mode [ 280.479745][T12695] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 280.508505][T12699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.533568][T12693] lo: left allmulticast mode [ 280.667199][T12704] netlink: 'syz.1.2020': attribute type 1 has an invalid length. [ 280.705606][T12704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2020'. [ 280.745966][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'. [ 280.924568][T12722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.964789][T12725] sctp: [Deprecated]: syz.3.2028 (pid 12725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.964789][T12725] Use struct sctp_sack_info instead [ 281.053828][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 281.076325][T12730] chnl_net:caif_netlink_parms(): no params data found [ 281.171124][T12737] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 281.288754][T12742] netlink: 'syz.0.2032': attribute type 13 has an invalid length. [ 281.309614][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2032'. [ 281.534082][T12754] bridge0: port 1(gretap0) entered blocking state [ 281.551060][T12754] bridge0: port 1(gretap0) entered disabled state [ 281.738129][T12764] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2041'. [ 281.903703][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2045'. [ 281.946367][T12777] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2044'. [ 282.296971][T12793] netlink: 'syz.3.2048': attribute type 10 has an invalid length. [ 282.433942][T12797] xt_hashlimit: invalid interval [ 283.150334][T12827] netlink: 'syz.0.2059': attribute type 13 has an invalid length. [ 283.188867][T12827] veth0_macvtap: left promiscuous mode [ 283.222835][T12827] macvtap0: entered allmulticast mode [ 283.251878][T12827] macvtap0: refused to change device tx_queue_len [ 283.689615][T12857] netlink: 'syz.0.2067': attribute type 2 has an invalid length. [ 283.906739][T12870] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 284.347011][T12901] delete_channel: no stack [ 284.798927][T12938] netlink: 'syz.4.2090': attribute type 23 has an invalid length. [ 285.379892][T12973] netlink: 'syz.4.2099': attribute type 25 has an invalid length. [ 285.414099][T12973] netlink: 'syz.4.2099': attribute type 7 has an invalid length. [ 285.427750][T12976] __nla_validate_parse: 5 callbacks suppressed [ 285.427768][T12976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2100'. [ 285.447583][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 285.479669][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2099'. [ 285.482453][T12982] netlink: 'syz.1.2104': attribute type 32 has an invalid length. [ 285.520259][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 285.549081][T12982] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 285.581362][T12994] netlink: 'syz.1.2104': attribute type 8 has an invalid length. [ 285.669282][T12982] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2104'. [ 286.383793][T13044] IPVS: Error connecting to the multicast addr [ 286.592384][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2123'. [ 286.657714][T13057] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.680353][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2123'. [ 286.689882][T13057] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.702060][T13048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 286.712042][T13057] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.727158][T13057] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.745868][T13057] geneve4: entered promiscuous mode [ 286.753158][T13057] geneve4: entered allmulticast mode [ 286.777259][T13057] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.789917][T13057] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.820081][T13057] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.848866][T13057] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.090732][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 287.427376][T13082] x_tables: duplicate underflow at hook 3 [ 287.492374][T13082] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2134'. [ 287.803488][T13103] bridge_slave_0: invalid flags given to default FDB implementation [ 288.137054][T13125] vxcan1: entered allmulticast mode [ 288.205750][T13126] vxcan1: left allmulticast mode [ 289.205486][T13154] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 289.478347][T13177] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.261543][T13197] netlink: 'syz.4.2167': attribute type 20 has an invalid length. [ 290.345558][T13201] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 290.430041][T13205] __nla_validate_parse: 4 callbacks suppressed [ 290.430060][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2169'. [ 290.470991][T13201] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2169'. [ 290.694453][T13211] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 290.761193][T13209] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 290.835084][T13213] bridge_slave_0: left allmulticast mode [ 290.875320][T13213] bridge_slave_0: left promiscuous mode [ 290.891641][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.937751][T13213] bridge_slave_1: left allmulticast mode [ 290.960268][T13213] bridge_slave_1: left promiscuous mode [ 290.966276][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.014093][T13213] bond0: (slave bond_slave_0): Releasing backup interface [ 291.035619][T13213] bond_slave_0: left allmulticast mode [ 291.227545][T13213] bond0: (slave bond_slave_1): Releasing backup interface [ 291.259064][T13213] bond_slave_1: left allmulticast mode [ 291.353581][T13213] team0: Port device team_slave_0 removed [ 291.402980][T13213] team0: Port device team_slave_1 removed [ 291.429182][T13213] team0: Port device geneve0 removed [ 291.449493][T13213] bond1: (slave gretap1): Releasing active interface [ 291.476731][T13213] bond2: (slave wireguard0): Releasing backup interface [ 291.486284][T13213] wireguard0: left promiscuous mode [ 291.663967][T13031] Set syz1 is full, maxelem 65536 reached [ 291.750490][T13233] netlink: 'syz.0.2176': attribute type 7 has an invalid length. [ 291.775466][T13237] x_tables: duplicate entry at hook 3 [ 291.810161][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 291.822944][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2178'. [ 292.176467][T13265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2187'. [ 292.254406][T13270] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.403684][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'. [ 293.019600][T13320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.056854][T13324] netlink: 'syz.4.2206': attribute type 9 has an invalid length. [ 293.065832][T13321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2205'. [ 293.258511][T13327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2208'. [ 293.276704][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'. [ 293.293624][T13330] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 293.352234][T13343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2208'. [ 293.418790][T13330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 293.431020][T13345] .: renamed from bond0 (while UP) [ 293.488212][T13330] netlink: 'syz.1.2210': attribute type 2 has an invalid length. [ 293.876787][T13372] netlink: 'syz.3.2218': attribute type 1 has an invalid length. [ 294.282062][T13405] netlink: 'syz.4.2227': attribute type 1 has an invalid length. [ 294.458595][T13405] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 294.507636][T13417] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 295.145147][T13468] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.161131][T13468] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.354919][T13478] netlink: 'syz.0.2247': attribute type 11 has an invalid length. [ 295.642973][T13492] __nla_validate_parse: 41 callbacks suppressed [ 295.642992][T13492] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2249'. [ 295.828719][T13503] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2255'. [ 296.034258][T13515] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.145591][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7fe400: rx timeout, send abort [ 297.653930][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c7fe400: abort rx timeout. Force session deactivation [ 297.702747][T13521] vlan2: entered allmulticast mode [ 297.707918][T13521] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 297.773792][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 297.924572][T13541] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.183410][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 298.222833][T13558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2272'. [ 298.260714][T13561] bond0: (slave macvlan2): Opening slave failed [ 298.519345][T13581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2280'. [ 298.519981][T13578] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 298.588953][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 298.665015][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'. [ 298.725482][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2283'. [ 299.011751][T13624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2288'. [ 299.256185][T13639] sit1: entered promiscuous mode [ 299.294138][T13639] sit1: entered allmulticast mode [ 299.353792][T13641] 0ªî{X¹¦: left allmulticast mode [ 299.387341][T13641] bridge0: port 2(syz_tun) entered disabled state [ 299.429088][T13641] dummy0: left promiscuous mode [ 299.444552][T13641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.751606][T13664] sctp: [Deprecated]: syz.4.2302 (pid 13664) Use of int in max_burst socket option deprecated. [ 299.751606][T13664] Use struct sctp_assoc_value instead [ 299.919842][T13662] bridge0: port 2(syz_tun) entered disabled state [ 299.948327][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.297311][T13698] netlink: 'syz.3.2314': attribute type 3 has an invalid length. [ 300.311319][T13697] veth0: entered promiscuous mode [ 300.339407][T13700] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 300.531341][T13711] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 300.543554][T13711] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 300.591014][T13711] netlink: 'syz.2.2317': attribute type 3 has an invalid length. [ 300.677823][T13719] __nla_validate_parse: 15 callbacks suppressed [ 300.677844][T13719] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2320'. [ 300.734479][T13719] 0ªî{X¹¦: entered promiscuous mode [ 300.757974][T13719] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2320'. [ 300.767645][T13719] 0ªX¹¦D: renamed from 30ªî{X¹¦ [ 300.777347][T13719] 0ªX¹¦D: left promiscuous mode [ 300.789034][T13719] 0ªX¹¦D: entered allmulticast mode [ 300.800962][T13719] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 301.047150][T13738] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2327'. [ 301.521928][T13770] netlink: 'syz.3.2335': attribute type 1 has an invalid length. [ 301.645455][T13773] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2336'. [ 301.664570][T13773] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 301.688663][T13773] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 301.721510][T13780] bridge0: port 1(batadv1) entered blocking state [ 301.729219][T13780] bridge0: port 1(batadv1) entered disabled state [ 301.736663][T13780] batadv1: entered allmulticast mode [ 301.744753][T13780] batadv1: entered promiscuous mode [ 301.890469][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 302.017665][T13795] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 302.029854][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 302.221044][T12198] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 302.230836][T12198] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 302.242638][T13809] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2351'. [ 302.267284][T13809] netlink: 'syz.0.2351': attribute type 9 has an invalid length. [ 302.933818][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2363'. [ 303.957484][T13918] FAULT_INJECTION: forcing a failure. [ 303.957484][T13918] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 303.984669][T13918] CPU: 1 UID: 0 PID: 13918 Comm: syz.0.2382 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 303.984697][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.984709][T13918] Call Trace: [ 303.984717][T13918] [ 303.984725][T13918] dump_stack_lvl+0x189/0x250 [ 303.984758][T13918] ? __pfx____ratelimit+0x10/0x10 [ 303.984787][T13918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.984816][T13918] ? __pfx__printk+0x10/0x10 [ 303.984836][T13918] ? __might_fault+0xb0/0x130 [ 303.984865][T13918] should_fail_ex+0x414/0x560 [ 303.984894][T13918] _copy_from_user+0x2d/0xb0 [ 303.984913][T13918] ___sys_sendmsg+0x158/0x2a0 [ 303.984946][T13918] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.985008][T13918] ? __fget_files+0x2a/0x420 [ 303.985028][T13918] ? __fget_files+0x3a0/0x420 [ 303.985068][T13918] __x64_sys_sendmsg+0x19b/0x260 [ 303.985110][T13918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.985144][T13918] ? __pfx_ksys_write+0x10/0x10 [ 303.985167][T13918] ? do_syscall_64+0xbe/0x3b0 [ 303.985189][T13918] do_syscall_64+0xfa/0x3b0 [ 303.985205][T13918] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.985233][T13918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.985251][T13918] ? clear_bhb_loop+0x60/0xb0 [ 303.985274][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.985291][T13918] RIP: 0033:0x7f0033b8e929 [ 303.985307][T13918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.985324][T13918] RSP: 002b:00007f0034928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.985343][T13918] RAX: ffffffffffffffda RBX: 00007f0033db6080 RCX: 00007f0033b8e929 [ 303.985357][T13918] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 303.985368][T13918] RBP: 00007f0034928090 R08: 0000000000000000 R09: 0000000000000000 [ 303.985379][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.985389][T13918] R13: 0000000000000001 R14: 00007f0033db6080 R15: 00007fffe4915db8 [ 303.985418][T13918] [ 304.662151][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2388'. [ 304.742728][T13945] netlink: 'syz.2.2391': attribute type 4 has an invalid length. [ 304.760353][T13945] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2391'. [ 304.803399][T13945] : renamed from bond0 (while UP) [ 304.835096][T13953] netlink: 'syz.3.2394': attribute type 33 has an invalid length. [ 304.862736][T13954] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 304.869922][T13954] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 304.941323][T13961] FAULT_INJECTION: forcing a failure. [ 304.941323][T13961] name failslab, interval 1, probability 0, space 0, times 1 [ 304.992366][T13961] CPU: 0 UID: 0 PID: 13961 Comm: syz.4.2395 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 304.992394][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.992406][T13961] Call Trace: [ 304.992414][T13961] [ 304.992422][T13961] dump_stack_lvl+0x189/0x250 [ 304.992454][T13961] ? __pfx____ratelimit+0x10/0x10 [ 304.992483][T13961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.992511][T13961] ? __pfx__printk+0x10/0x10 [ 304.992537][T13961] ? __pfx___might_resched+0x10/0x10 [ 304.992571][T13961] should_fail_ex+0x414/0x560 [ 304.992599][T13961] should_failslab+0xa8/0x100 [ 304.992621][T13961] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 304.992640][T13961] ? __alloc_skb+0x112/0x2d0 [ 304.992665][T13961] __alloc_skb+0x112/0x2d0 [ 304.992689][T13961] netlink_sendmsg+0x5c6/0xb30 [ 304.992721][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.992746][T13961] ? aa_sock_msg_perm+0x94/0x160 [ 304.992772][T13961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.992795][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.992818][T13961] __sock_sendmsg+0x219/0x270 [ 304.992850][T13961] ____sys_sendmsg+0x505/0x830 [ 304.992887][T13961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.992921][T13961] ? import_iovec+0x74/0xa0 [ 304.992943][T13961] ___sys_sendmsg+0x21f/0x2a0 [ 304.992969][T13961] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.993029][T13961] ? __fget_files+0x2a/0x420 [ 304.993048][T13961] ? __fget_files+0x3a0/0x420 [ 304.993078][T13961] __x64_sys_sendmsg+0x19b/0x260 [ 304.993105][T13961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.993139][T13961] ? __pfx_ksys_write+0x10/0x10 [ 304.993153][T13961] ? rcu_is_watching+0x15/0xb0 [ 304.993187][T13961] ? do_syscall_64+0xbe/0x3b0 [ 304.993207][T13961] do_syscall_64+0xfa/0x3b0 [ 304.993223][T13961] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.993250][T13961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.993268][T13961] ? clear_bhb_loop+0x60/0xb0 [ 304.993291][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.993308][T13961] RIP: 0033:0x7fc807b8e929 [ 304.993324][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.993340][T13961] RSP: 002b:00007fc808a81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.993371][T13961] RAX: ffffffffffffffda RBX: 00007fc807db5fa0 RCX: 00007fc807b8e929 [ 304.993383][T13961] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 304.993394][T13961] RBP: 00007fc808a81090 R08: 0000000000000000 R09: 0000000000000000 [ 304.993405][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.993415][T13961] R13: 0000000000000000 R14: 00007fc807db5fa0 R15: 00007ffdb7d92bb8 [ 304.993442][T13961] [ 305.899854][T14004] veth1: entered promiscuous mode [ 305.922286][T14004] veth1: entered allmulticast mode [ 305.984264][T14007] __nla_validate_parse: 2 callbacks suppressed [ 305.984283][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 306.035134][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2414'. [ 306.058927][T14013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 306.066246][T14016] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2412'. [ 306.104457][T14017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2415'. [ 307.168682][T14092] bridge0: entered allmulticast mode [ 307.174914][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 307.216559][T14092] bridge0 (unregistering): left allmulticast mode [ 307.240782][T14094] xt_hashlimit: size too large, truncated to 1048576 [ 307.301785][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 307.519968][T14105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2441'. [ 307.531201][T14105] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 307.615109][T14108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2442'. [ 307.632075][T14108] IPv6: syztnl2: Disabled Multicast RS [ 307.770562][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'. [ 308.082652][T14133] netlink: 'syz.1.2450': attribute type 6 has an invalid length. [ 308.156484][T14138] FAULT_INJECTION: forcing a failure. [ 308.156484][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 308.169620][T14138] CPU: 0 UID: 0 PID: 14138 Comm: syz.4.2452 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 308.169646][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.169657][T14138] Call Trace: [ 308.169665][T14138] [ 308.169673][T14138] dump_stack_lvl+0x189/0x250 [ 308.169707][T14138] ? __pfx____ratelimit+0x10/0x10 [ 308.169737][T14138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.169765][T14138] ? __pfx__printk+0x10/0x10 [ 308.169792][T14138] ? ref_tracker_alloc+0x318/0x460 [ 308.169831][T14138] should_fail_ex+0x414/0x560 [ 308.169861][T14138] should_failslab+0xa8/0x100 [ 308.169883][T14138] kmem_cache_alloc_noprof+0x73/0x3c0 [ 308.169912][T14138] ? skb_clone+0x212/0x3a0 [ 308.169941][T14138] skb_clone+0x212/0x3a0 [ 308.169970][T14138] __netlink_deliver_tap+0x404/0x850 [ 308.170010][T14138] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.170043][T14138] netlink_deliver_tap+0x19c/0x1b0 [ 308.170064][T14138] netlink_unicast+0x72f/0x8d0 [ 308.170111][T14138] netlink_sendmsg+0x805/0xb30 [ 308.170143][T14138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.170180][T14138] ? aa_sock_msg_perm+0x94/0x160 [ 308.170203][T14138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.170225][T14138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.170246][T14138] __sock_sendmsg+0x219/0x270 [ 308.170277][T14138] ____sys_sendmsg+0x505/0x830 [ 308.170304][T14138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.170336][T14138] ? import_iovec+0x74/0xa0 [ 308.170357][T14138] ___sys_sendmsg+0x21f/0x2a0 [ 308.170381][T14138] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.170440][T14138] ? __fget_files+0x2a/0x420 [ 308.170458][T14138] ? __fget_files+0x3a0/0x420 [ 308.170489][T14138] __x64_sys_sendmsg+0x19b/0x260 [ 308.170514][T14138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.170546][T14138] ? __pfx_ksys_write+0x10/0x10 [ 308.170560][T14138] ? rcu_is_watching+0x15/0xb0 [ 308.170593][T14138] ? do_syscall_64+0xbe/0x3b0 [ 308.170632][T14138] do_syscall_64+0xfa/0x3b0 [ 308.170648][T14138] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.170674][T14138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.170693][T14138] ? clear_bhb_loop+0x60/0xb0 [ 308.170716][T14138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.170734][T14138] RIP: 0033:0x7fc807b8e929 [ 308.170750][T14138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.170765][T14138] RSP: 002b:00007fc808a81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.170785][T14138] RAX: ffffffffffffffda RBX: 00007fc807db5fa0 RCX: 00007fc807b8e929 [ 308.170798][T14138] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 308.170810][T14138] RBP: 00007fc808a81090 R08: 0000000000000000 R09: 0000000000000000 [ 308.170827][T14138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.170838][T14138] R13: 0000000000000000 R14: 00007fc807db5fa0 R15: 00007ffdb7d92bb8 [ 308.170869][T14138] [ 308.492970][T14142] chnl_net:caif_netlink_parms(): no params data found [ 309.209603][T14188] Bluetooth: MGMT ver 1.23 [ 309.596786][T14205] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 310.124847][T14244] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 310.237586][T14249] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 310.419697][T14260] syzkaller1: entered promiscuous mode [ 310.450403][T14260] syzkaller1: entered allmulticast mode [ 310.917186][T14291] netlink: 'syz.2.2494': attribute type 9 has an invalid length. [ 311.075484][T14296] __nla_validate_parse: 13 callbacks suppressed [ 311.075503][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2495'. [ 311.170686][T14301] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2497'. [ 311.289076][T14302] IPVS: persistence engine module ip_vs_pe_À not found [ 311.323758][T14309] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2499'. [ 311.338633][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2499'. [ 311.348286][T14309] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2499'. [ 311.357508][T14309] netlink: 'syz.3.2499': attribute type 3 has an invalid length. [ 311.365554][T14309] netlink: 'syz.3.2499': attribute type 2 has an invalid length. [ 311.374850][T14309] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2499'. [ 311.386573][T14308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2499'. [ 311.398972][T14309] netlink: 'syz.3.2499': attribute type 10 has an invalid length. [ 311.407262][T14309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2499'. [ 311.428935][T14309] batadv0: entered promiscuous mode [ 311.439913][T14309] batadv0: entered allmulticast mode [ 311.462348][T14309] bridge0: port 2(batadv0) entered blocking state [ 311.483037][T14309] bridge0: port 2(batadv0) entered disabled state [ 311.555651][T12206] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 311.565215][T12206] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 311.579900][T14318] IPv6: sit2: Disabled Multicast RS [ 311.611813][T14318] sit2: entered allmulticast mode [ 311.720758][T14326] xt_HMARK: proto mask must be zero with L3 mode [ 311.788497][T14337] xt_policy: output policy not valid in PREROUTING and INPUT [ 312.101024][T14348] tipc: Enabling of bearer rejected, failed to enable media [ 312.119510][T14353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.131541][T14352] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 312.139630][T14352] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 312.269197][T14363] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2519'. [ 312.291980][T14363] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2519'. [ 312.638988][T14385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.668112][T14393] syzkaller0: entered promiscuous mode [ 312.690191][T14393] syzkaller0: entered allmulticast mode [ 312.762681][T14404] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.852265][T14404] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.874723][T14412] netlink: 'syz.1.2530': attribute type 1 has an invalid length. [ 312.882718][T14412] netlink: 'syz.1.2530': attribute type 2 has an invalid length. [ 312.901626][T14393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.098280][T14393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.225229][T14404] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.354521][T14404] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.402140][T14433] netlink: 'syz.3.2535': attribute type 39 has an invalid length. [ 313.725035][T14404] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.753217][T14404] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.788405][T14404] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.839964][T14404] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.216463][T14467] bridge0: port 1(gretap0) entered blocking state [ 314.234974][T14467] bridge0: port 1(gretap0) entered disabled state [ 314.260665][T14467] gretap0: entered allmulticast mode [ 314.280169][T14467] gretap0: entered promiscuous mode [ 314.306493][T14467] bridge0: port 1(gretap0) entered blocking state [ 314.313211][T14467] bridge0: port 1(gretap0) entered forwarding state [ 314.481711][T14474] FAULT_INJECTION: forcing a failure. [ 314.481711][T14474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.505339][T14474] CPU: 0 UID: 0 PID: 14474 Comm: syz.2.2550 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 314.505368][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.505380][T14474] Call Trace: [ 314.505387][T14474] [ 314.505395][T14474] dump_stack_lvl+0x189/0x250 [ 314.505429][T14474] ? __pfx____ratelimit+0x10/0x10 [ 314.505457][T14474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.505486][T14474] ? __pfx__printk+0x10/0x10 [ 314.505506][T14474] ? __might_fault+0xb0/0x130 [ 314.505535][T14474] should_fail_ex+0x414/0x560 [ 314.505563][T14474] _copy_from_user+0x2d/0xb0 [ 314.505582][T14474] ___sys_sendmsg+0x158/0x2a0 [ 314.505610][T14474] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.505671][T14474] ? __fget_files+0x2a/0x420 [ 314.505689][T14474] ? __fget_files+0x3a0/0x420 [ 314.505720][T14474] __sys_sendmmsg+0x227/0x430 [ 314.505749][T14474] ? __pfx___sys_sendmmsg+0x10/0x10 [ 314.505770][T14474] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 314.505814][T14474] ? ksys_write+0x22a/0x250 [ 314.505834][T14474] ? __pfx_ksys_write+0x10/0x10 [ 314.505848][T14474] ? rcu_is_watching+0x15/0xb0 [ 314.505884][T14474] __x64_sys_sendmmsg+0xa0/0xc0 [ 314.505911][T14474] do_syscall_64+0xfa/0x3b0 [ 314.505927][T14474] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.505954][T14474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.505973][T14474] ? clear_bhb_loop+0x60/0xb0 [ 314.505994][T14474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.506013][T14474] RIP: 0033:0x7f179bb8e929 [ 314.506029][T14474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.506044][T14474] RSP: 002b:00007f179c956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.506063][T14474] RAX: ffffffffffffffda RBX: 00007f179bdb5fa0 RCX: 00007f179bb8e929 [ 314.506076][T14474] RDX: 0000000000000001 RSI: 00002000000036c0 RDI: 0000000000000004 [ 314.506088][T14474] RBP: 00007f179c956090 R08: 0000000000000000 R09: 0000000000000000 [ 314.506099][T14474] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 314.506110][T14474] R13: 0000000000000000 R14: 00007f179bdb5fa0 R15: 00007fffd1bd0698 [ 314.506139][T14474] [ 315.143992][T14514] FAULT_INJECTION: forcing a failure. [ 315.143992][T14514] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 315.175418][T14514] CPU: 1 UID: 0 PID: 14514 Comm: syz.0.2560 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 315.175445][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.175456][T14514] Call Trace: [ 315.175464][T14514] [ 315.175472][T14514] dump_stack_lvl+0x189/0x250 [ 315.175505][T14514] ? __pfx____ratelimit+0x10/0x10 [ 315.175533][T14514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.175562][T14514] ? __pfx__printk+0x10/0x10 [ 315.175583][T14514] ? fs_reclaim_acquire+0x7d/0x100 [ 315.175616][T14514] should_fail_ex+0x414/0x560 [ 315.175645][T14514] prepare_alloc_pages+0x213/0x610 [ 315.175676][T14514] __alloc_frozen_pages_noprof+0x123/0x370 [ 315.175699][T14514] ? __lock_acquire+0xab9/0xd20 [ 315.175727][T14514] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 315.175761][T14514] ? policy_nodemask+0x27c/0x720 [ 315.175777][T14514] ? __lock_acquire+0xab9/0xd20 [ 315.175807][T14514] alloc_pages_mpol+0x232/0x4a0 [ 315.175833][T14514] vma_alloc_folio_noprof+0xe4/0x200 [ 315.175855][T14514] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 315.175888][T14514] folio_prealloc+0x30/0x180 [ 315.175909][T14514] __handle_mm_fault+0x2c88/0x5620 [ 315.175956][T14514] ? __pfx___handle_mm_fault+0x10/0x10 [ 315.176002][T14514] ? find_vma+0xe7/0x160 [ 315.176018][T14514] ? __pfx_find_vma+0x10/0x10 [ 315.176040][T14514] handle_mm_fault+0x40a/0x8e0 [ 315.176079][T14514] do_user_addr_fault+0x764/0x1390 [ 315.176119][T14514] exc_page_fault+0x76/0xf0 [ 315.176149][T14514] asm_exc_page_fault+0x26/0x30 [ 315.176175][T14514] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 315.176198][T14514] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 315.176214][T14514] RSP: 0018:ffffc9001b0efb28 EFLAGS: 00050202 [ 315.176230][T14514] RAX: ffffffff84c17e01 RBX: 0000000000000048 RCX: 0000000000000048 [ 315.176243][T14514] RDX: 0000000000000000 RSI: ffffc9001b0efba0 RDI: 0000200000005280 [ 315.176256][T14514] RBP: ffffc9001b0efc70 R08: ffffc9001b0efbe7 R09: 1ffff9200361df7c [ 315.176269][T14514] R10: dffffc0000000000 R11: fffff5200361df7d R12: 00002000000052c8 [ 315.176283][T14514] R13: 00007ffffffff000 R14: ffffc9001b0efba0 R15: 0000200000005280 [ 315.176304][T14514] ? _copy_from_user+0xa1/0xb0 [ 315.176331][T14514] _copy_to_user+0x8a/0xb0 [ 315.176352][T14514] pppol2tp_ioctl+0x5ae/0x870 [ 315.176381][T14514] ? __pfx_pppol2tp_ioctl+0x10/0x10 [ 315.176403][T14514] ? __local_bh_enable_ip+0x12d/0x1c0 [ 315.176437][T14514] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 315.176477][T14514] pppox_ioctl+0x1b9/0x300 [ 315.176503][T14514] sock_do_ioctl+0xd9/0x300 [ 315.176534][T14514] ? __pfx_sock_do_ioctl+0x10/0x10 [ 315.176559][T14514] ? __lock_acquire+0xab9/0xd20 [ 315.176601][T14514] sock_ioctl+0x576/0x790 [ 315.176631][T14514] ? __pfx_sock_ioctl+0x10/0x10 [ 315.176658][T14514] ? __fget_files+0x2a/0x420 [ 315.176688][T14514] ? __fget_files+0x3a0/0x420 [ 315.176706][T14514] ? __fget_files+0x2a/0x420 [ 315.176728][T14514] ? bpf_lsm_file_ioctl+0x9/0x20 [ 315.176753][T14514] ? __pfx_sock_ioctl+0x10/0x10 [ 315.176778][T14514] __se_sys_ioctl+0xfc/0x170 [ 315.176806][T14514] do_syscall_64+0xfa/0x3b0 [ 315.176821][T14514] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.176867][T14514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.176885][T14514] ? clear_bhb_loop+0x60/0xb0 [ 315.176909][T14514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.176929][T14514] RIP: 0033:0x7f0033b8e929 [ 315.176944][T14514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.176960][T14514] RSP: 002b:00007f0034949038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.176978][T14514] RAX: ffffffffffffffda RBX: 00007f0033db5fa0 RCX: 00007f0033b8e929 [ 315.176992][T14514] RDX: 0000200000005280 RSI: 0000000080487436 RDI: 0000000000000003 [ 315.177003][T14514] RBP: 00007f0034949090 R08: 0000000000000000 R09: 0000000000000000 [ 315.177015][T14514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.177025][T14514] R13: 0000000000000000 R14: 00007f0033db5fa0 R15: 00007fffe4915db8 [ 315.177056][T14514] [ 315.687712][T14528] openvswitch: netlink: Missing key (keys=40, expected=80) [ 315.690521][T14530] FAULT_INJECTION: forcing a failure. [ 315.690521][T14530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.763686][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.2.2565 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 315.763716][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.763728][T14530] Call Trace: [ 315.763736][T14530] [ 315.763745][T14530] dump_stack_lvl+0x189/0x250 [ 315.763780][T14530] ? __pfx____ratelimit+0x10/0x10 [ 315.763811][T14530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.763842][T14530] ? __pfx__printk+0x10/0x10 [ 315.763883][T14530] should_fail_ex+0x414/0x560 [ 315.763914][T14530] _copy_to_user+0x31/0xb0 [ 315.763937][T14530] simple_read_from_buffer+0xe1/0x170 [ 315.763973][T14530] proc_fail_nth_read+0x1df/0x250 [ 315.763999][T14530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.764024][T14530] ? rw_verify_area+0x258/0x650 [ 315.764051][T14530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.764074][T14530] vfs_read+0x1fd/0x980 [ 315.764108][T14530] ? __pfx___mutex_lock+0x10/0x10 [ 315.764127][T14530] ? __pfx_vfs_read+0x10/0x10 [ 315.764156][T14530] ? __fget_files+0x2a/0x420 [ 315.764182][T14530] ? __fget_files+0x3a0/0x420 [ 315.764201][T14530] ? __fget_files+0x2a/0x420 [ 315.764230][T14530] ksys_read+0x145/0x250 [ 315.764250][T14530] ? __pfx_ksys_read+0x10/0x10 [ 315.764275][T14530] ? rcu_is_watching+0x15/0xb0 [ 315.764308][T14530] ? do_syscall_64+0xbe/0x3b0 [ 315.764329][T14530] do_syscall_64+0xfa/0x3b0 [ 315.764344][T14530] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.764370][T14530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.764388][T14530] ? clear_bhb_loop+0x60/0xb0 [ 315.764410][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.764428][T14530] RIP: 0033:0x7f179bb8d33c [ 315.764445][T14530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.764460][T14530] RSP: 002b:00007f179c956030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.764480][T14530] RAX: ffffffffffffffda RBX: 00007f179bdb5fa0 RCX: 00007f179bb8d33c [ 315.764493][T14530] RDX: 000000000000000f RSI: 00007f179c9560a0 RDI: 0000000000000005 [ 315.764505][T14530] RBP: 00007f179c956090 R08: 0000000000000000 R09: 0000000000000000 [ 315.764516][T14530] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 315.764527][T14530] R13: 0000000000000000 R14: 00007f179bdb5fa0 R15: 00007fffd1bd0698 [ 315.764557][T14530] [ 316.315504][T14554] __nla_validate_parse: 13 callbacks suppressed [ 316.315524][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2575'. [ 316.346879][T14558] FAULT_INJECTION: forcing a failure. [ 316.346879][T14558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 316.384265][T14558] CPU: 1 UID: 0 PID: 14558 Comm: syz.0.2574 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 316.384294][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.384305][T14558] Call Trace: [ 316.384313][T14558] [ 316.384321][T14558] dump_stack_lvl+0x189/0x250 [ 316.384355][T14558] ? __pfx____ratelimit+0x10/0x10 [ 316.384384][T14558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.384412][T14558] ? __pfx__printk+0x10/0x10 [ 316.384435][T14558] ? fs_reclaim_acquire+0x7d/0x100 [ 316.384466][T14558] should_fail_ex+0x414/0x560 [ 316.384495][T14558] prepare_alloc_pages+0x213/0x610 [ 316.384526][T14558] __alloc_frozen_pages_noprof+0x123/0x370 [ 316.384549][T14558] ? __lock_acquire+0xab9/0xd20 [ 316.384576][T14558] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 316.384610][T14558] ? policy_nodemask+0x27c/0x720 [ 316.384626][T14558] ? __lock_acquire+0xab9/0xd20 [ 316.384656][T14558] alloc_pages_mpol+0x232/0x4a0 [ 316.384681][T14558] vma_alloc_folio_noprof+0xe4/0x200 [ 316.384704][T14558] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 316.384737][T14558] folio_prealloc+0x30/0x180 [ 316.384769][T14558] __handle_mm_fault+0x2c88/0x5620 [ 316.384821][T14558] ? __pfx___handle_mm_fault+0x10/0x10 [ 316.384865][T14558] ? find_vma+0xe7/0x160 [ 316.384880][T14558] ? __pfx_find_vma+0x10/0x10 [ 316.384901][T14558] handle_mm_fault+0x40a/0x8e0 [ 316.384937][T14558] do_user_addr_fault+0x764/0x1390 [ 316.384976][T14558] exc_page_fault+0x76/0xf0 [ 316.385004][T14558] asm_exc_page_fault+0x26/0x30 [ 316.385020][T14558] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 316.385047][T14558] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 316.385062][T14558] RSP: 0018:ffffc9000f01fb28 EFLAGS: 00050202 [ 316.385078][T14558] RAX: ffffffff84c17e01 RBX: 0000000000000048 RCX: 0000000000000048 [ 316.385090][T14558] RDX: 0000000000000000 RSI: ffffc9000f01fba0 RDI: 0000200000005280 [ 316.385102][T14558] RBP: ffffc9000f01fc70 R08: ffffc9000f01fbe7 R09: 1ffff92001e03f7c [ 316.385114][T14558] R10: dffffc0000000000 R11: fffff52001e03f7d R12: 00002000000052c8 [ 316.385127][T14558] R13: 00007ffffffff000 R14: ffffc9000f01fba0 R15: 0000200000005280 [ 316.385148][T14558] ? _copy_from_user+0xa1/0xb0 [ 316.385172][T14558] _copy_to_user+0x8a/0xb0 [ 316.385191][T14558] pppol2tp_ioctl+0x5ae/0x870 [ 316.385219][T14558] ? __pfx_pppol2tp_ioctl+0x10/0x10 [ 316.385239][T14558] ? __local_bh_enable_ip+0x12d/0x1c0 [ 316.385271][T14558] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 316.385307][T14558] pppox_ioctl+0x1b9/0x300 [ 316.385332][T14558] sock_do_ioctl+0xd9/0x300 [ 316.385361][T14558] ? __pfx_sock_do_ioctl+0x10/0x10 [ 316.385384][T14558] ? __lock_acquire+0xab9/0xd20 [ 316.385424][T14558] sock_ioctl+0x576/0x790 [ 316.385451][T14558] ? __pfx_sock_ioctl+0x10/0x10 [ 316.385476][T14558] ? __fget_files+0x2a/0x420 [ 316.385495][T14558] ? __fget_files+0x3a0/0x420 [ 316.385513][T14558] ? __fget_files+0x2a/0x420 [ 316.385535][T14558] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.385560][T14558] ? __pfx_sock_ioctl+0x10/0x10 [ 316.385584][T14558] __se_sys_ioctl+0xfc/0x170 [ 316.385612][T14558] do_syscall_64+0xfa/0x3b0 [ 316.385632][T14558] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.385658][T14558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.385674][T14558] ? clear_bhb_loop+0x60/0xb0 [ 316.385695][T14558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.385711][T14558] RIP: 0033:0x7f0033b8e929 [ 316.385726][T14558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.385740][T14558] RSP: 002b:00007f0034949038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.385757][T14558] RAX: ffffffffffffffda RBX: 00007f0033db5fa0 RCX: 00007f0033b8e929 [ 316.385769][T14558] RDX: 0000200000005280 RSI: 0000000080487436 RDI: 0000000000000003 [ 316.385780][T14558] RBP: 00007f0034949090 R08: 0000000000000000 R09: 0000000000000000 [ 316.385791][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.385801][T14558] R13: 0000000000000000 R14: 00007f0033db5fa0 R15: 00007fffe4915db8 [ 316.385847][T14558] [ 316.834974][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 316.881169][T14564] wg2: entered promiscuous mode [ 316.886115][T14564] wg2: entered allmulticast mode [ 316.894929][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2580'. [ 317.218048][T14587] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2584'. [ 317.231861][T14588] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2585'. [ 317.343282][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 317.404098][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 317.652683][T14614] bridge0: port 2(batadv0) entered disabled state [ 317.685418][T14620] netlink: 'syz.1.2593': attribute type 12 has an invalid length. [ 317.820670][T14628] netlink: 520 bytes leftover after parsing attributes in process `syz.4.2596'. [ 317.966640][T14638] sctp: [Deprecated]: syz.1.2600 (pid 14638) Use of int in max_burst socket option. [ 317.966640][T14638] Use struct sctp_assoc_value instead [ 317.995833][T14639] sctp: [Deprecated]: syz.1.2600 (pid 14639) Use of int in max_burst socket option. [ 317.995833][T14639] Use struct sctp_assoc_value instead [ 318.168969][T14650] netlink: 'syz.4.2603': attribute type 8 has an invalid length. [ 318.196729][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 318.220169][T14647] netlink: 'syz.3.2602': attribute type 1 has an invalid length. [ 318.228040][T14647] netlink: 'syz.3.2602': attribute type 2 has an invalid length. [ 318.502834][T14668] nbd: device at index 4 is going down [ 318.569291][T14668] dvmrp0: entered allmulticast mode [ 318.779128][T14688] netlink: 'syz.3.2617': attribute type 7 has an invalid length. [ 318.815962][T14688] : entered promiscuous mode [ 318.822401][T14689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2615'. [ 318.896741][T14689] 1ªX¹¦D: left allmulticast mode [ 318.969701][T14689] A link change request failed with some changes committed already. Interface . may have been left with an inconsistent configuration, please check. [ 319.022232][T14705] bond0: (slave macvlan2): Opening slave failed [ 319.282654][T14719] netlink: 'syz.4.2626': attribute type 30 has an invalid length. [ 319.298717][T14719] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.307663][T14719] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.316541][T14719] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.325312][T14719] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.335820][T14719] netlink: 'syz.4.2626': attribute type 30 has an invalid length. [ 319.715325][T14728] xt_policy: neither incoming nor outgoing policy selected [ 319.817546][T14732] dvmrp0: entered allmulticast mode [ 319.829461][T14732] dvmrp0: left allmulticast mode [ 320.002868][T14741] netlink: 'syz.0.2633': attribute type 6 has an invalid length. [ 320.062222][T14746] FAULT_INJECTION: forcing a failure. [ 320.062222][T14746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.087436][T14746] CPU: 1 UID: 0 PID: 14746 Comm: syz.3.2635 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 320.087462][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.087474][T14746] Call Trace: [ 320.087481][T14746] [ 320.087488][T14746] dump_stack_lvl+0x189/0x250 [ 320.087517][T14746] ? __pfx____ratelimit+0x10/0x10 [ 320.087544][T14746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.087590][T14746] ? __pfx__printk+0x10/0x10 [ 320.087610][T14746] ? __might_fault+0xb0/0x130 [ 320.087640][T14746] should_fail_ex+0x414/0x560 [ 320.087670][T14746] _copy_from_user+0x2d/0xb0 [ 320.087690][T14746] kstrtouint_from_user+0xc4/0x170 [ 320.087719][T14746] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 320.087772][T14746] proc_fail_nth_write+0x88/0x240 [ 320.087796][T14746] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.087824][T14746] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 320.087849][T14746] vfs_write+0x27b/0xa90 [ 320.087887][T14746] ? __pfx_vfs_write+0x10/0x10 [ 320.087918][T14746] ? __fget_files+0x2a/0x420 [ 320.087943][T14746] ? __fget_files+0x3a0/0x420 [ 320.087962][T14746] ? __fget_files+0x2a/0x420 [ 320.087992][T14746] ksys_write+0x145/0x250 [ 320.088012][T14746] ? __pfx_ksys_write+0x10/0x10 [ 320.088027][T14746] ? rcu_is_watching+0x15/0xb0 [ 320.088061][T14746] ? do_syscall_64+0xbe/0x3b0 [ 320.088083][T14746] do_syscall_64+0xfa/0x3b0 [ 320.088102][T14746] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.088129][T14746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.088147][T14746] ? clear_bhb_loop+0x60/0xb0 [ 320.088170][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.088188][T14746] RIP: 0033:0x7ff0ab78d3df [ 320.088204][T14746] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 320.088220][T14746] RSP: 002b:00007ff0ac58b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 320.088240][T14746] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff0ab78d3df [ 320.088252][T14746] RDX: 0000000000000001 RSI: 00007ff0ac58b0a0 RDI: 0000000000000004 [ 320.088263][T14746] RBP: 00007ff0ac58b090 R08: 0000000000000000 R09: 0000000000000000 [ 320.088273][T14746] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 320.088284][T14746] R13: 0000000000000000 R14: 00007ff0ab9b5fa0 R15: 00007ffd5cf597d8 [ 320.088314][T14746] [ 320.434618][T14751] netlink: 'syz.0.2638': attribute type 11 has an invalid length. [ 321.014969][T14790] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 321.030911][T14790] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.303952][T14802] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 321.520606][T14818] __nla_validate_parse: 7 callbacks suppressed [ 321.520627][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2651'. [ 321.609376][T14818] : left promiscuous mode [ 321.713843][T14832] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 321.732494][T14833] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 321.752683][T14835] x_tables: duplicate underflow at hook 3 [ 321.896841][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2657'. [ 321.939810][T14839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2657'. [ 322.081283][T14853] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2660'. [ 322.313991][T14861] xt_hashlimit: max too large, truncated to 1048576 [ 322.763143][T14878] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 323.098645][T14893] Cannot find del_set index 17 as target [ 323.428934][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.440487][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.451193][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.469146][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.483896][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.822142][T14919] netlink: 'syz.4.2681': attribute type 83 has an invalid length. [ 323.847371][T14903] chnl_net:caif_netlink_parms(): no params data found [ 324.123363][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.144860][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.161452][T14903] bridge_slave_0: entered allmulticast mode [ 324.175171][T14903] bridge_slave_0: entered promiscuous mode [ 324.199056][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.207224][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.214732][T14903] bridge_slave_1: entered allmulticast mode [ 324.256467][T14903] bridge_slave_1: entered promiscuous mode [ 324.364816][T14941] netlink: 'syz.4.2685': attribute type 21 has an invalid length. [ 324.391093][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.404166][T14941] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.420437][T14941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.427739][T14941] IPv6: NLM_F_CREATE should be set when creating new route [ 324.432384][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.435027][T14941] IPv6: NLM_F_CREATE should be set when creating new route [ 324.451280][T14941] IPv6: NLM_F_CREATE should be set when creating new route [ 324.505670][T14949] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 324.543351][T14903] team0: Port device team_slave_0 added [ 324.556711][T14903] team0: Port device team_slave_1 added [ 324.679526][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.691399][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.741639][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2690'. [ 324.760582][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 324.769612][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.797023][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.804241][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.832221][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.870841][T14963] xt_cgroup: invalid path, errno=-2 [ 325.051220][T14903] hsr_slave_0: entered promiscuous mode [ 325.071029][T14903] hsr_slave_1: entered promiscuous mode [ 325.086308][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.108514][T14903] Cannot create hsr debugfs directory [ 325.308254][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 325.331996][T14903] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.358107][T14986] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 325.373331][T14986] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2698'. [ 325.383494][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 325.441587][T14903] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.524543][T14903] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.540478][ T5851] Bluetooth: hci3: command tx timeout [ 325.574618][T14981] syz.1.2698 (14981) used greatest stack depth: 16184 bytes left [ 325.647603][T14903] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.972047][T14903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.984669][T14903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.999064][T14903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.021366][T14903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.037769][T15016] sctp: [Deprecated]: syz.4.2706 (pid 15016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.037769][T15016] Use struct sctp_sack_info instead [ 326.207596][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.271832][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.292298][T12206] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.299581][T12206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.356446][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.364477][T12206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.436714][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2712'. [ 326.861802][T15059] __nla_validate_parse: 1 callbacks suppressed [ 326.861822][T15059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2716'. [ 327.048439][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.074344][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 327.244038][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.316972][T14903] veth0_vlan: entered promiscuous mode [ 327.346353][T14903] veth1_vlan: entered promiscuous mode [ 327.405927][T14903] veth0_macvtap: entered promiscuous mode [ 327.417891][T15079] ip6gretap0: entered allmulticast mode [ 327.474175][T14903] veth1_macvtap: entered promiscuous mode [ 327.493186][T15079] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 327.499188][T15079] syzkaller0: linktype set to 768 [ 327.533866][T15083] tipc: Enabled bearer , priority 10 [ 327.561606][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.588400][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.612514][ T5851] Bluetooth: hci3: command tx timeout [ 327.626018][T14903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.657740][T14903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.674127][T14903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.683542][T14903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.758694][T15092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 327.895097][T12199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.926440][T12199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.938248][T15101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 328.023955][T12206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.035214][T12206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.056289][T15108] syzkaller0: entered promiscuous mode [ 328.062927][T15108] syzkaller0: entered allmulticast mode [ 328.228795][T15115] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2732'. [ 328.239495][T15115] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2732'. [ 328.249195][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 328.556835][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 328.566948][T15133] netlink: 'syz.0.2739': attribute type 10 has an invalid length. [ 328.733461][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2742'. [ 328.963164][T15151] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2747'. [ 329.098637][T12206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.401166][T15158] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2750'. [ 329.548551][T12206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.573349][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2752'. [ 329.649498][T15174] bond0: Master is either lo or non-ether device [ 329.789491][T12206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.839561][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.852593][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.870308][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.902714][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.926028][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.034692][T12206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.371409][T12206] bridge_slave_1: left allmulticast mode [ 330.377868][T12206] bridge_slave_1: left promiscuous mode [ 330.394288][T12206] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.407458][T12206] bridge_slave_0: left allmulticast mode [ 330.416018][T12206] bridge_slave_0: left promiscuous mode [ 330.422048][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.603253][T15218] x_tables: duplicate underflow at hook 3 [ 330.831190][T15232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.090830][T12206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.106480][T12206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.116946][T12206] bond0 (unregistering): Released all slaves [ 331.332946][T15247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.592853][T15253] xt_HMARK: proto mask must be zero with L3 mode [ 331.679383][T15183] chnl_net:caif_netlink_parms(): no params data found [ 331.695245][T15267] netlink: 'syz.1.2781': attribute type 6 has an invalid length. [ 331.834337][T12206] hsr_slave_0: left promiscuous mode [ 331.844195][T12206] hsr_slave_1: left promiscuous mode [ 331.855192][T12206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.875269][T12206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.894989][T12206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.905593][T12206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.020203][ T5851] Bluetooth: hci3: command tx timeout [ 332.029082][T12206] veth1_macvtap: left promiscuous mode [ 332.048535][T12206] veth0_macvtap: left promiscuous mode [ 332.054864][T12206] veth1_vlan: left promiscuous mode [ 332.065002][T12206] veth0_vlan: left promiscuous mode [ 332.763041][T12206] team0 (unregistering): Port device team_slave_1 removed [ 332.807801][T12206] team0 (unregistering): Port device team_slave_0 removed [ 333.142956][T15298] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 333.158573][T15298] __nla_validate_parse: 11 callbacks suppressed [ 333.158592][T15298] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2788'. [ 333.248164][T15281] bond0: entered promiscuous mode [ 333.253533][T15281] bond0: entered allmulticast mode [ 333.259217][T15281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.624532][T15316] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2794'. [ 333.625009][T15183] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.653368][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.664348][T15183] bridge_slave_0: entered allmulticast mode [ 333.674159][T15183] bridge_slave_0: entered promiscuous mode [ 333.704445][T15183] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.722307][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.734367][T15183] bridge_slave_1: entered allmulticast mode [ 333.742577][T15183] bridge_slave_1: entered promiscuous mode [ 333.918763][T15183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.941211][T15183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.043209][T15327] netlink: 'syz.0.2796': attribute type 1 has an invalid length. [ 334.103636][ T5851] Bluetooth: hci3: command tx timeout [ 334.127582][T15183] team0: Port device team_slave_0 added [ 334.162182][T15183] team0: Port device team_slave_1 added [ 334.210497][T15183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.218010][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.249296][T15183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.262511][T15183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.269553][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.297480][T15183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.448235][T15183] hsr_slave_0: entered promiscuous mode [ 334.475641][T15183] hsr_slave_1: entered promiscuous mode [ 334.495471][T15183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.530749][T15183] Cannot create hsr debugfs directory [ 334.904925][T15348] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2802'. [ 335.427599][T15374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2809'. [ 335.512908][T15377] tipc: Enabled bearer , priority 10 [ 335.520295][T15379] IPVS: length: 8 != 1152 [ 335.756258][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 335.821329][T15183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.863657][T15183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 335.904714][T15395] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 335.917572][T15183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 335.930831][ T5909] page_pool_release_retry() stalled pool shutdown: id 55, 1 inflight 60 sec [ 335.947582][T15183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.956066][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 335.967647][T15395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2815'. [ 335.976867][T15395] netlink: 'syz.1.2815': attribute type 14 has an invalid length. [ 336.136615][T15409] netlink: 'syz.4.2818': attribute type 10 has an invalid length. [ 336.170276][ T5851] Bluetooth: hci3: command tx timeout [ 336.188877][T15409] netlink: 'syz.4.2818': attribute type 11 has an invalid length. [ 336.198432][T15183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.221692][T15183] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.246064][T12207] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.253314][T12207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.296440][T12207] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.303715][T12207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.453008][T15183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.742522][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'. [ 336.775283][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 336.804667][T15449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2828'. [ 337.064586][T15183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.119454][T15463] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 337.313857][T15183] veth0_vlan: entered promiscuous mode [ 337.341947][T15183] veth1_vlan: entered promiscuous mode [ 337.423522][T15183] veth0_macvtap: entered promiscuous mode [ 337.447007][T15183] veth1_macvtap: entered promiscuous mode [ 337.518292][T15183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.555295][T15183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.672376][T15183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.681484][T15183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.691010][T15183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.704003][T15183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.855058][T15502] netlink: 'syz.4.2847': attribute type 24 has an invalid length. [ 337.982416][T12207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.998769][T12207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.009918][T15508] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 338.118772][T12210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.150873][T12210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.260427][ T5851] Bluetooth: hci3: command tx timeout [ 338.417519][T15527] wg1: entered promiscuous mode [ 338.641738][T15548] xt_hashlimit: size too large, truncated to 1048576 [ 338.762776][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 339.223412][T15576] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 339.615407][T12206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.653440][T15600] xfrm1: entered allmulticast mode [ 339.893846][T15609] openvswitch: netlink: Actions may not be safe on all matching packets [ 340.121452][T15619] netlink: 'syz.4.2881': attribute type 10 has an invalid length. [ 340.132567][T12206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.144354][T15622] netlink: 'syz.0.2880': attribute type 4 has an invalid length. [ 340.166662][T15622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2880'. [ 340.183259][T15619] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 340.232723][T15619] .: (slave wlan1): Enslaving as an active interface with an up link [ 340.443586][T12206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.462177][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.480437][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.487460][T15639] netlink: 'syz.4.2885': attribute type 1 has an invalid length. [ 340.501099][T15639] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2885'. [ 340.510698][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.521025][T15638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2884'. [ 340.530457][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.538500][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.806097][T12206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.104470][T15662] netlink: 'syz.1.2890': attribute type 21 has an invalid length. [ 341.157265][T15662] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2890'. [ 341.239818][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 341.254910][T15669] netlink: 'syz.0.2892': attribute type 1 has an invalid length. [ 341.265388][T15662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2890'. [ 341.328952][T15669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.408691][T15670] bond4: (slave veth5): Enslaving as an active interface with a down link [ 341.561083][T12206] bridge_slave_1: left allmulticast mode [ 341.566891][T12206] bridge_slave_1: left promiscuous mode [ 341.599913][T12206] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.627441][T15690] netlink: 'syz.3.2897': attribute type 5 has an invalid length. [ 341.643337][T12206] bridge_slave_0: left allmulticast mode [ 341.649032][T12206] bridge_slave_0: left promiscuous mode [ 341.655107][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.678187][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 341.998380][T12206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.009426][T12206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.023092][T12206] bond0 (unregistering): Released all slaves [ 342.104643][T15632] chnl_net:caif_netlink_parms(): no params data found [ 342.251646][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 342.261079][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 342.499428][T15719] netlink: 'syz.1.2906': attribute type 12 has an invalid length. [ 342.511394][T15721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.660195][ T5851] Bluetooth: hci3: command tx timeout [ 342.765210][T15632] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.815505][T15632] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.848526][T15632] bridge_slave_0: entered allmulticast mode [ 342.868930][T15632] bridge_slave_0: entered promiscuous mode [ 342.889719][T15632] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.899183][T15632] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.938927][T15632] bridge_slave_1: entered allmulticast mode [ 342.950934][T15632] bridge_slave_1: entered promiscuous mode [ 343.021849][T15738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.087544][T15750] bridge_slave_0: default FDB implementation only supports local addresses [ 343.097225][T15758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.158758][T15632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.187489][T12206] hsr_slave_0: left promiscuous mode [ 343.203669][T12206] hsr_slave_1: left promiscuous mode [ 343.236152][T12206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.244012][T12206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.263740][T12206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.274186][T12206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.306430][T12206] veth1_macvtap: left promiscuous mode [ 343.312698][T12206] veth0_macvtap: left promiscuous mode [ 343.319276][T12206] veth1_vlan: left promiscuous mode [ 343.325349][T12206] veth0_vlan: left promiscuous mode [ 343.503021][T15770] openvswitch: netlink: Tunnel attr 18 out of range max 16 [ 343.779537][T12206] team0 (unregistering): Port device team_slave_1 removed [ 343.817842][T12206] team0 (unregistering): Port device team_slave_0 removed [ 344.217624][T15632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.297635][T15769] macvtap2: entered allmulticast mode [ 344.303234][T15769] veth0_macvtap: entered allmulticast mode [ 344.342747][T15632] team0: Port device team_slave_0 added [ 344.363453][T15632] team0: Port device team_slave_1 added [ 344.451820][T15781] openvswitch: netlink: IPv4 tunnel dst address is zero [ 344.461339][T15774] SET target dimension over the limit! [ 344.470159][T15776] veth5: entered allmulticast mode [ 344.527766][T15632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.552711][T15632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.588535][T15632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.610386][T15632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.617507][T15632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.661356][T15789] syz.3.2926: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 344.697479][T15789] CPU: 0 UID: 0 PID: 15789 Comm: syz.3.2926 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 344.697518][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.697529][T15789] Call Trace: [ 344.697537][T15789] [ 344.697544][T15789] dump_stack_lvl+0x189/0x250 [ 344.697582][T15789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.697611][T15789] ? __pfx__printk+0x10/0x10 [ 344.697632][T15789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 344.697654][T15789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 344.697677][T15789] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 344.697699][T15789] warn_alloc+0x214/0x310 [ 344.697727][T15789] ? __pfx_warn_alloc+0x10/0x10 [ 344.697759][T15789] ? __get_vm_area_node+0x28f/0x300 [ 344.697779][T15789] ? xskq_create+0xbf/0x170 [ 344.697809][T15789] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 344.697860][T15789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.697888][T15789] ? __kasan_kmalloc+0x93/0xb0 [ 344.697909][T15789] vmalloc_user_noprof+0xad/0xf0 [ 344.697929][T15789] ? xskq_create+0xbf/0x170 [ 344.697957][T15789] xskq_create+0xbf/0x170 [ 344.697987][T15789] xsk_init_queue+0xb0/0x110 [ 344.698016][T15789] xsk_setsockopt+0x4de/0x710 [ 344.698044][T15789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.698076][T15789] ? aa_sock_opt_perm+0x74/0x110 [ 344.698102][T15789] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 344.698126][T15789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.698152][T15789] do_sock_setsockopt+0x257/0x3e0 [ 344.698178][T15789] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 344.698206][T15789] ? __fget_files+0x2a/0x420 [ 344.698236][T15789] __x64_sys_setsockopt+0x18b/0x220 [ 344.698266][T15789] do_syscall_64+0xfa/0x3b0 [ 344.698281][T15789] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.698309][T15789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.698327][T15789] ? clear_bhb_loop+0x60/0xb0 [ 344.698351][T15789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.698369][T15789] RIP: 0033:0x7ff0ab78e929 [ 344.698385][T15789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.698401][T15789] RSP: 002b:00007ff0ac58b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.698420][T15789] RAX: ffffffffffffffda RBX: 00007ff0ab9b5fa0 RCX: 00007ff0ab78e929 [ 344.698433][T15789] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 344.698444][T15789] RBP: 00007ff0ab810b39 R08: 0000000000000004 R09: 0000000000000000 [ 344.698472][T15789] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 344.698485][T15789] R13: 0000000000000000 R14: 00007ff0ab9b5fa0 R15: 00007ffd5cf597d8 [ 344.698527][T15789] [ 344.699543][T15789] Mem-Info: [ 344.707832][T15632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.726363][T15789] active_anon:4633 inactive_anon:0 isolated_anon:0 [ 344.726363][T15789] active_file:1422 inactive_file:39922 isolated_file:0 [ 344.726363][T15789] unevictable:768 dirty:67 writeback:0 [ 344.726363][T15789] slab_reclaimable:11392 slab_unreclaimable:108711 [ 344.726363][T15789] mapped:29141 shmem:1364 pagetables:1009 [ 344.726363][T15789] sec_pagetables:0 bounce:0 [ 344.726363][T15789] kernel_misc_reclaimable:0 [ 344.726363][T15789] free:1317466 free_pcp:12764 free_cma:0 [ 344.790153][ T5851] Bluetooth: hci3: command tx timeout [ 344.796016][T15789] Node 0 active_anon:18572kB inactive_anon:0kB active_file:5688kB inactive_file:159484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116728kB dirty:260kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13636kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.073066][T15789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 345.108445][T15789] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.160881][T15789] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 345.166798][T15789] Node 0 DMA32 free:1348668kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18408kB inactive_anon:0kB active_file:5688kB inactive_file:157660kB unevictable:1536kB writepending:264kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:36152kB local_pcp:19148kB free_cma:0kB [ 345.178468][T15808] __nla_validate_parse: 6 callbacks suppressed [ 345.178488][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2931'. [ 345.201997][T15789] lowmem_reserve[]: 0 0 1 1 1 [ 345.243307][T15789] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 345.281770][T15789] lowmem_reserve[]: 0 0 0 0 0 [ 345.286769][T15789] Node 1 Normal free:3905760kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15520kB local_pcp:4800kB free_cma:0kB [ 345.294824][T15632] hsr_slave_0: entered promiscuous mode [ 345.320443][T15789] lowmem_reserve[]: 0 0 0 0 0 [ 345.328903][T15789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.338280][T15632] hsr_slave_1: entered promiscuous mode [ 345.351257][T15809] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2931'. [ 345.352543][T15632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.361902][T15809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 345.369743][T15632] Cannot create hsr debugfs directory [ 345.383297][T15809] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2931'. [ 345.390233][T15789] Node 0 DMA32: 1148*4kB (ME) 235*8kB (ME) 86*16kB (M) 33*32kB (ME) 341*64kB (UME) 163*128kB (UME) 70*256kB (UME) 23*512kB (UME) 18*1024kB (UM) 6*2048kB (UM) 302*4096kB (UM) = 1349000kB [ 345.396530][T15809] netlink: 'syz.1.2931': attribute type 2 has an invalid length. [ 345.415010][T15789] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 345.436388][T15809] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2931'. [ 345.457132][T15789] Node 1 Normal: 202*4kB (UME) 69*8kB (UME) 53*16kB (UME) 152*32kB (UME) 41*64kB (UME) 8*128kB (UME) 5*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3905760kB [ 345.488812][T15789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.498698][T15789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.527966][T15789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.541372][T15789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.583790][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 345.585006][T15789] 42707 total pagecache pages [ 345.600056][T15789] 0 pages in swap cache [ 345.604254][T15789] Free swap = 124996kB [ 345.608488][T15789] Total swap = 124996kB [ 345.613056][T15789] 2097051 pages RAM [ 345.616937][T15789] 0 pages HighMem/MovableOnly [ 345.637634][T15789] 424690 pages reserved [ 345.649426][T15789] 0 pages cma reserved [ 346.076582][T15817] batadv_slave_1: entered promiscuous mode [ 346.084823][T15828] netlink: 'syz.0.2937': attribute type 1 has an invalid length. [ 346.088513][T15816] batadv_slave_1: left promiscuous mode [ 346.297409][T15632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 346.345121][T15632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 346.381868][T15632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 346.425965][T15632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 346.450882][T15856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'. [ 346.547040][T15848] x_tables: unsorted underflow at hook 1 [ 346.589605][T15848] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2944'. [ 346.677680][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 346.746333][T15632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.810873][ T5851] Bluetooth: hci3: command tx timeout [ 346.824952][T15632] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.838231][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.845454][T12199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.889005][T15875] bridge0: port 1(gretap0) entered blocking state [ 346.895867][T15875] bridge0: port 1(gretap0) entered disabled state [ 346.905742][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 346.926355][T15882] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 346.996073][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.003316][T12206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.096659][T15888] pim6reg527: entered allmulticast mode [ 347.921166][T15922] netlink: 'syz.4.2961': attribute type 2 has an invalid length. [ 347.935960][T15632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.036248][T15632] veth0_vlan: entered promiscuous mode [ 348.066243][T15632] veth1_vlan: entered promiscuous mode [ 348.104303][T15632] veth0_macvtap: entered promiscuous mode [ 348.104897][T15931] netlink: zone id is out of range [ 348.118033][T15931] netlink: zone id is out of range [ 348.124336][T15632] veth1_macvtap: entered promiscuous mode [ 348.130900][T15931] netlink: zone id is out of range [ 348.137626][T15931] netlink: zone id is out of range [ 348.148693][T15931] netlink: zone id is out of range [ 348.186101][T15632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.207482][T15632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.236752][T15632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.258279][T15632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.282727][T15632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.300070][T15632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.585824][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.611572][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.712116][T12210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.766944][T12210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.890365][ T5851] Bluetooth: hci3: command tx timeout [ 348.895971][T15963] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 349.448216][T15993] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 349.472378][T15993] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002 [ 349.739519][T12209] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.794036][T16008] tipc: Bearer : already 2 bearers with priority 10 [ 349.812391][T16008] tipc: Bearer : trying with adjusted priority [ 349.828436][T16008] tipc: New replicast peer: 255.255.255.255 [ 349.854146][T16008] tipc: Enabled bearer , priority 9 [ 349.965780][T12209] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.188590][T12209] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.515850][T16016] netlink: 'syz.0.2988': attribute type 7 has an invalid length. [ 350.566484][T12209] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.570574][T16019] __nla_validate_parse: 5 callbacks suppressed [ 350.570594][T16019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2988'. [ 350.608719][T16011] netlink: 'syz.1.2989': attribute type 3 has an invalid length. [ 350.672321][T16016] : entered promiscuous mode [ 350.733097][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 350.926829][T12209] bridge_slave_1: left allmulticast mode [ 350.945774][T12209] bridge_slave_1: left promiscuous mode [ 350.961956][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.981126][T16034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 351.016348][T12209] bridge_slave_0: left allmulticast mode [ 351.023895][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.035067][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.042774][T12209] bridge_slave_0: left promiscuous mode [ 351.048703][ T5158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.065905][ T5158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.067806][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.086758][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.519743][T12209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.533129][T12209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.544824][T12209] bond0 (unregistering): Released all slaves [ 351.807273][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3000'. [ 351.816265][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3000'. [ 351.816287][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 351.816314][T16060] netlink: 'syz.4.3000': attribute type 5 has an invalid length. [ 351.894620][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 351.933957][T16061] netlink: 'syz.4.3000': attribute type 5 has an invalid length. [ 352.106518][T12209] hsr_slave_0: left promiscuous mode [ 352.116178][T12209] hsr_slave_1: left promiscuous mode [ 352.124382][T12209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.133869][T12209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.154110][T12209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.162178][T12209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.196972][T12209] veth1_macvtap: left promiscuous mode [ 352.208321][T12209] veth0_macvtap: left promiscuous mode [ 352.214833][T12209] veth1_vlan: left promiscuous mode [ 352.220490][T12209] veth0_vlan: left promiscuous mode [ 352.706459][T12209] team0 (unregistering): Port device team_slave_1 removed [ 352.742023][T12209] team0 (unregistering): Port device team_slave_0 removed [ 353.132312][ T5158] Bluetooth: hci3: command tx timeout [ 353.396528][T16095] netlink: 'syz.0.3009': attribute type 21 has an invalid length. [ 353.404936][T16095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3009'. [ 353.406661][T16035] chnl_net:caif_netlink_parms(): no params data found [ 353.455538][T16095] netlink: 'syz.0.3009': attribute type 4 has an invalid length. [ 353.483097][T16095] netlink: 'syz.0.3009': attribute type 5 has an invalid length. [ 353.502053][T16095] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3009'. [ 353.562991][T16114] netlink: 'syz.0.3009': attribute type 10 has an invalid length. [ 353.587411][T16114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3009'. [ 353.707211][T16119] netlink: 'syz.1.3012': attribute type 2 has an invalid length. [ 353.728404][T16114] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 353.807315][T16129] netlink: 'syz.4.3015': attribute type 13 has an invalid length. [ 353.816926][T16104] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 353.829309][T16104] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 353.839957][T16104] gretap1: entered promiscuous mode [ 353.845289][T16104] gretap1: entered allmulticast mode [ 353.885647][T16129] lo: entered promiscuous mode [ 353.906049][T16129] lo: entered allmulticast mode [ 353.928109][T16129] tunl0: entered promiscuous mode [ 353.935478][T16133] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 353.948580][T16129] tunl0: entered allmulticast mode [ 353.969302][T16129] gre0: entered promiscuous mode [ 353.990780][T16129] gre0: entered allmulticast mode [ 353.998406][T16129] 1ªX¹¦D: entered promiscuous mode [ 354.023891][T16129] 1ªX¹¦D: entered allmulticast mode [ 354.029525][T16129] 1ªX¹¦D: refused to change device tx_queue_len [ 354.051088][T16129] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 354.125855][T16035] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.144504][T16035] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.161778][T16035] bridge_slave_0: entered allmulticast mode [ 354.173889][T16035] bridge_slave_0: entered promiscuous mode [ 354.196521][T16143] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 354.207867][T16035] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.258817][T16035] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.267220][T16035] bridge_slave_1: entered allmulticast mode [ 354.275736][T16035] bridge_slave_1: entered promiscuous mode [ 354.425026][T16035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.454318][T16035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.680210][T16035] team0: Port device team_slave_0 added [ 354.704734][T16035] team0: Port device team_slave_1 added [ 354.843427][T16035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.860960][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.888967][T16035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.944142][T16035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.962903][T16035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.021127][T16035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.197742][T16035] hsr_slave_0: entered promiscuous mode [ 355.220021][ T5158] Bluetooth: hci3: command tx timeout [ 355.226849][T16035] hsr_slave_1: entered promiscuous mode [ 355.241761][T16035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.260028][T16035] Cannot create hsr debugfs directory [ 355.435447][T16211] sch_fq: defrate 0 ignored. [ 355.451999][T16215] IPVS: length: 16 != 8 [ 355.501007][T16218] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 355.502869][T16219] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 355.562509][T16218] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 355.585468][T16219] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 355.617655][T16226] netlink: 'syz.0.3042': attribute type 4 has an invalid length. [ 355.776520][T16235] xt_hashlimit: size too large, truncated to 1048576 [ 355.859291][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 356.324507][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3053'. [ 356.344250][T16256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 356.401265][T16256] vlan3: entered allmulticast mode [ 356.532043][T16035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.581952][T16035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.645673][T16035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.693120][T16035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.714643][T16277] netlink: 'syz.4.3058': attribute type 10 has an invalid length. [ 356.996900][T16035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.107112][T16035] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.134186][T16296] sctp: [Deprecated]: syz.1.3063 (pid 16296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.134186][T16296] Use struct sctp_sack_info instead [ 357.155412][T12206] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.162602][T12206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.176167][T12206] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.183385][T12206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.290433][ T5158] Bluetooth: hci3: command tx timeout [ 357.425279][T16314] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3068'. [ 357.453997][T16314] : renamed from veth0_vlan (while UP) [ 357.724795][T16035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.861865][T16035] veth0_vlan: entered promiscuous mode [ 357.906686][T16035] veth1_vlan: entered promiscuous mode [ 358.012828][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.025057][T16035] veth0_macvtap: entered promiscuous mode [ 358.060179][T16035] veth1_macvtap: entered promiscuous mode [ 358.148472][T16035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.182450][T16035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.213736][T16035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.224516][T16035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.247545][T16035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.260044][T16035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.462391][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.472895][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.603638][T12207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.607623][T16353] Cannot find add_set index 4 as target [ 358.620430][T12207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.680943][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'. [ 358.700904][T16362] netlink: 'syz.1.3080': attribute type 30 has an invalid length. [ 358.728388][T16362] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.737512][T16362] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.746283][T16362] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.754619][T16362] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.934984][T16378] netlink: set zone limit has 8 unknown bytes [ 358.949770][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'. [ 359.163515][T16389] nbd: must specify a size in bytes for the device [ 359.295600][T16402] netlink: 'syz.4.3095': attribute type 21 has an invalid length. [ 359.306833][T16402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.370247][ T5851] Bluetooth: hci3: command tx timeout [ 359.548362][T16409] netlink: 'syz.3.3098': attribute type 18 has an invalid length. [ 359.582385][T16409] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.592860][T16409] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.601169][T16409] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.610219][T16409] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.646419][T16413] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 359.884543][T16426] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 360.137301][T16436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3108'. [ 360.239000][T16446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3111'. [ 360.286197][T16449] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3112'. [ 360.387188][T16454] : renamed from hsr0 (while UP) [ 360.504778][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3114'. [ 361.100221][T16498] xt_NFQUEUE: number of total queues is 0 [ 361.133383][T16501] netlink: 'syz.0.3126': attribute type 1 has an invalid length. [ 361.145464][T16501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.167370][T16501] netlink: 'syz.0.3126': attribute type 1 has an invalid length. [ 361.286392][T16507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.298919][T16507] bond5: (slave bond6): making interface the new active one [ 361.309326][T16507] bond5: (slave bond6): Enslaving as an active interface with an up link [ 361.422891][T16523] netlink: 'syz.0.3132': attribute type 13 has an invalid length. [ 361.432830][T16523] netlink: 'syz.0.3132': attribute type 17 has an invalid length. [ 361.462400][T16523] ip6gretap0: left allmulticast mode [ 361.486273][T16523] bridge0: left allmulticast mode [ 361.497291][T16523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.645332][T16533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3136'. [ 361.743717][T16539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3138'. [ 361.756914][T16539] xt_socket: unknown flags 0x3c [ 361.843246][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 361.999856][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3141'. [ 362.012101][T16549] netlink: 'syz.3.3141': attribute type 1 has an invalid length. [ 362.020773][T16549] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3141'. [ 362.204856][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 362.366045][T16562] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.374326][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3146'. [ 362.842814][T16599] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3156'. [ 362.866490][T16599] openvswitch: netlink: Actions may not be safe on all matching packets [ 363.177660][T16613] net veth1_virt_wifi .: renamed from virt_wifi0 [ 363.196317][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 363.232559][T16615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 363.379592][T16626] netlink: 'syz.0.3164': attribute type 10 has an invalid length. [ 363.410387][T16626] bridge0: port 1(batadv_slave_0) entered disabled state [ 363.716976][T16645] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 363.768257][T16648] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 364.020772][ T6057] page_pool_release_retry() stalled pool shutdown: id 60, 1 inflight 60 sec [ 364.063182][T16670] netlink: 'syz.3.3179': attribute type 1 has an invalid length. [ 364.074228][T16668] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 364.080679][T16668] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.134979][T16670] 8021q: adding VLAN 0 to HW filter on device bond7 [ 364.149245][T16668] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 364.161191][T16671] ip6erspan0: entered promiscuous mode [ 364.174307][T16671] bond7: (slave ip6erspan0): making interface the new active one [ 364.189645][T16671] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 365.156413][T16737] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 365.190437][T16740] netlink: 'syz.4.3196': attribute type 10 has an invalid length. [ 365.213941][T16737] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.252321][T16745] netlink: 'syz.4.3196': attribute type 10 has an invalid length. [ 365.293217][T16737] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.303084][T16737] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 365.316164][T16737] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 365.386896][T16748] vlan2: entered allmulticast mode [ 365.394570][T16748] bond10: entered allmulticast mode [ 366.589725][T16813] xt_l2tp: invalid flags combination: 4 [ 366.817454][T16821] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 366.828540][T16821] netlink: 'syz.4.3220': attribute type 2 has an invalid length. [ 366.839274][T16821] netlink: 'syz.4.3220': attribute type 1 has an invalid length. [ 366.848018][T16821] __nla_validate_parse: 12 callbacks suppressed [ 366.848033][T16821] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.3220'. [ 366.986077][T16834] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 367.067756][T16834] bond7: entered promiscuous mode [ 367.075043][T16834] bond7: entered allmulticast mode [ 367.091419][T16834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.201532][T16847] xt_hashlimit: overflow, try lower: 4294967295/0 [ 367.341782][T16853] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 367.374478][T16853] lo: left promiscuous mode [ 367.379589][T16853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.417279][T16858] Cannot find del_set index 4 as target [ 367.500105][T16863] netlink: 'syz.0.3231': attribute type 1 has an invalid length. [ 367.507899][T16863] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3231'. [ 367.562191][T16865] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 367.637882][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 367.829011][T16884] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 367.838527][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 367.866422][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 367.893393][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 367.914168][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 367.923562][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 367.934111][T16886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3238'. [ 368.052962][T16865] infiniband syz0: set active [ 368.057916][T16865] infiniband syz0: added bond_slave_0 [ 368.155118][T16865] RDS/IB: syz0: added [ 368.159780][T16865] smc: adding ib device syz0 with port count 1 [ 368.166247][T16865] smc: ib device syz0 port 1 has pnetid [ 368.267876][T16901] bridge: RTM_NEWNEIGH with invalid ether address [ 368.476219][T16908] IPVS: length: 187 != 24 [ 368.485872][T16908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.067813][T16959] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 370.200905][T16967] validate_nla: 65 callbacks suppressed [ 370.200928][T16967] netlink: 'syz.0.3260': attribute type 5 has an invalid length. [ 370.222455][T16967] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 370.230785][T16967] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 370.238978][T16967] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 370.247260][T16967] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 370.272189][T16967] geneve3: entered promiscuous mode [ 370.277545][T16967] geneve3: entered allmulticast mode [ 370.692099][T16988] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 371.517376][T17026] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 372.277766][T17073] sctp: [Deprecated]: syz.4.3292 (pid 17073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.277766][T17073] Use struct sctp_sack_info instead [ 372.386891][T17081] __nla_validate_parse: 67 callbacks suppressed [ 372.386909][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3294'. [ 372.418281][T17083] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3295'. [ 372.438099][T17083] ip6t_REJECT: ECHOREPLY is not supported [ 372.520308][T17086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3295'. [ 372.550463][T17088] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3297'. [ 372.559488][T17088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.667254][T17095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3299'. [ 373.092724][T17115] netlink: 'syz.0.3305': attribute type 2 has an invalid length. [ 373.153637][T17117] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 373.213724][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3307'. [ 373.613652][T17145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3315'. [ 373.656302][T17146] veth0: entered promiscuous mode [ 373.687155][T17142] veth0: left promiscuous mode [ 373.702983][T17142] x_tables: duplicate underflow at hook 2 [ 373.714036][T17142] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3314'. [ 373.725206][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 373.919249][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 376.028667][T17264] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 376.410241][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 376.861559][T17310] netlink: 'syz.3.3366': attribute type 10 has an invalid length. [ 377.097286][T17330] xt_l2tp: v2 tid > 0xffff: 150994944 [ 377.311151][T17350] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 377.396639][T17350] veth7: entered promiscuous mode [ 377.424944][T17354] siw: device registration error -23 [ 377.446172][T17353] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 377.483765][T17353] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 377.573625][T17362] __nla_validate_parse: 10 callbacks suppressed [ 377.573645][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3384'. [ 377.662574][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3385'. [ 377.817971][T17377] netlink: 'syz.3.3387': attribute type 10 has an invalid length. [ 377.917660][T17383] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3391'. [ 378.298528][T17408] xt_TCPMSS: Only works on TCP SYN packets [ 378.313908][T17410] xt_TCPMSS: Only works on TCP SYN packets [ 378.518339][T17418] sctp: [Deprecated]: syz.4.3398 (pid 17418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.518339][T17418] Use struct sctp_sack_info instead [ 378.563571][T17418] sctp: [Deprecated]: syz.4.3398 (pid 17418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.563571][T17418] Use struct sctp_sack_info instead [ 378.810835][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3400'. [ 378.904539][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3403'. [ 379.015356][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3402'. [ 379.191032][T17451] !€ÿ: renamed from bond_slave_0 (while UP) [ 379.952689][T12207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.962350][T12207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.061619][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 380.071496][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 380.100485][T17486] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3413'. [ 380.123688][T17486] netem: invalid attributes len -24 [ 380.129050][T17486] netem: change failed [ 380.156975][T17490] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3415'. [ 380.298880][T17494] netlink: 'syz.0.3417': attribute type 4 has an invalid length. [ 380.361897][T17496] delete_channel: no stack [ 380.438488][T17500] netlink: 'syz.3.3419': attribute type 1 has an invalid length. [ 380.447377][T17494] syzkaller0: entered promiscuous mode [ 380.456493][T17494] syzkaller0: entered allmulticast mode [ 380.724358][T17509] veth0: entered promiscuous mode [ 380.756857][T17509] veth0 (unregistering): left promiscuous mode [ 380.825185][T17509] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 380.837129][T17509] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 380.846684][T17509] CPU: 1 UID: 0 PID: 17509 Comm: syz.3.3422 Not tainted 6.16.0-rc2-syzkaller-00164-g95b6759a8183 #0 PREEMPT(full) [ 380.858750][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.868808][T17509] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 380.874459][T17509] Code: ff ff ff e8 09 ef 41 01 89 c5 31 ff 89 c6 e8 2e e4 9b f7 85 ed 74 45 e8 e5 df 9b f7 eb 05 e8 de df 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e8 5d ff f7 49 8b 2c 24 49 8d 7c [ 380.894102][T17509] RSP: 0018:ffffc9000c52eca0 EFLAGS: 00010206 [ 380.900190][T17509] RAX: 000000001fffe000 RBX: 1ffff1100b6e1182 RCX: ffff8880602cbc00 [ 380.908199][T17509] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 380.916176][T17509] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 380.924169][T17509] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: 00000000ffff0000 [ 380.932146][T17509] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805b708c10 [ 380.940121][T17509] FS: 00007ff0ac58b6c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 380.949056][T17509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.955645][T17509] CR2: 00007f0033daee80 CR3: 000000007d2d0000 CR4: 00000000003526f0 [ 380.963627][T17509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.971597][T17509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.979573][T17509] Call Trace: [ 380.982857][T17509] [ 380.985795][T17509] mld_clear_delrec+0x105/0x5d0 [ 380.990663][T17509] ipv6_mc_destroy_dev+0x45/0x5a0 [ 380.995704][T17509] ? addrconf_ifdown+0x1396/0x1880 [ 381.000836][T17509] addrconf_ifdown+0x139e/0x1880 [ 381.005781][T17509] ? tls_dev_event+0x717/0xec0 [ 381.010548][T17509] ? __pfx_addrconf_ifdown+0x10/0x10 [ 381.015871][T17509] addrconf_notify+0x1bc/0x1010 [ 381.020736][T17509] notifier_call_chain+0x1b3/0x3e0 [ 381.025871][T17509] unregister_netdevice_many_notify+0x15d8/0x2320 [ 381.032304][T17509] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 381.039073][T17509] ? unregister_netdevice_queue+0x1b3/0x380 [ 381.044987][T17509] ? __pfx_veth_dellink+0x10/0x10 [ 381.050043][T17509] rtnl_dellink+0x488/0x710 [ 381.054557][T17509] ? __free_frozen_pages+0x76a/0xe70 [ 381.059847][T17509] ? __pfx_rtnl_dellink+0x10/0x10 [ 381.064899][T17509] ? __lock_acquire+0xab9/0xd20 [ 381.069795][T17509] ? __pfx_rtnl_dellink+0x10/0x10 [ 381.074825][T17509] rtnetlink_rcv_msg+0x7cf/0xb70 [ 381.079785][T17509] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 381.084905][T17509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.090377][T17509] netlink_rcv_skb+0x205/0x470 [ 381.095156][T17509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.100621][T17509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.105921][T17509] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.111129][T17509] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.116345][T17509] netlink_unicast+0x758/0x8d0 [ 381.121123][T17509] netlink_sendmsg+0x805/0xb30 [ 381.125898][T17509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.131187][T17509] ? aa_sock_msg_perm+0x94/0x160 [ 381.136137][T17509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.141439][T17509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.146735][T17509] __sock_sendmsg+0x219/0x270 [ 381.151423][T17509] ____sys_sendmsg+0x505/0x830 [ 381.156194][T17509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.161495][T17509] ? import_iovec+0x74/0xa0 [ 381.166004][T17509] ___sys_sendmsg+0x21f/0x2a0 [ 381.170696][T17509] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.175930][T17509] ? __fget_files+0x2a/0x420 [ 381.180527][T17509] ? __fget_files+0x3a0/0x420 [ 381.185222][T17509] __x64_sys_sendmsg+0x19b/0x260 [ 381.190167][T17509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.195654][T17509] ? rcu_is_watching+0x15/0xb0 [ 381.200441][T17509] ? do_syscall_64+0xbe/0x3b0 [ 381.205136][T17509] do_syscall_64+0xfa/0x3b0 [ 381.209655][T17509] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.214864][T17509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.220944][T17509] ? clear_bhb_loop+0x60/0xb0 [ 381.225621][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.231511][T17509] RIP: 0033:0x7ff0ab78e929 [ 381.235931][T17509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.255535][T17509] RSP: 002b:00007ff0ac58b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.263954][T17509] RAX: ffffffffffffffda RBX: 00007ff0ab9b5fa0 RCX: 00007ff0ab78e929 [ 381.271941][T17509] RDX: 0000000020048054 RSI: 0000200000000200 RDI: 0000000000000005 [ 381.279928][T17509] RBP: 00007ff0ab810b39 R08: 0000000000000000 R09: 0000000000000000 [ 381.287915][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.295895][T17509] R13: 0000000000000000 R14: 00007ff0ab9b5fa0 R15: 00007ffd5cf597d8 [ 381.303879][T17509] [ 381.306897][T17509] Modules linked in: [ 381.313355][T17509] ---[ end trace 0000000000000000 ]--- [ 381.334691][T17509] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 381.344341][T17509] Code: ff ff ff e8 09 ef 41 01 89 c5 31 ff 89 c6 e8 2e e4 9b f7 85 ed 74 45 e8 e5 df 9b f7 eb 05 e8 de df 9b f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e8 5d ff f7 49 8b 2c 24 49 8d 7c [ 381.365193][T17509] RSP: 0018:ffffc9000c52eca0 EFLAGS: 00010206 [ 381.371746][T17509] RAX: 000000001fffe000 RBX: 1ffff1100b6e1182 RCX: ffff8880602cbc00 [ 381.379905][T17509] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 381.388646][T17509] RBP: 0000000000000001 R08: ffffffff8fa110f7 R09: 1ffffffff1f4221e [ 381.397405][T17509] R10: dffffc0000000000 R11: fffffbfff1f4221f R12: 00000000ffff0000 [ 381.405502][T17509] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88805b708c10 [ 381.413619][T17509] FS: 00007ff0ac58b6c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 381.424129][T17509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.432312][T17509] CR2: 00007f00319f6d58 CR3: 000000007d2d0000 CR4: 00000000003526f0 [ 381.440444][T17509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.448425][T17509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.458663][T17509] Kernel panic - not syncing: Fatal exception [ 381.464877][T17509] Kernel Offset: disabled [ 381.469205][T17509] Rebooting in 86400 seconds..