last executing test programs: 7.418305627s ago: executing program 3 (id=2670): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "10e5fa184a006900f1a2c72926e483df47c76cc844863e50f4e9fe8d4b904c05"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 6.511597267s ago: executing program 3 (id=2684): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) r2 = socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) 6.037909305s ago: executing program 3 (id=2695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, 0xfffffffffffffffd, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x6, 0x3, 0x7, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x7, 0x7, 0x9}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x72}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x20}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r5, 0x200, 0x70bd2c, 0x7fffffff, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'batadv_slave_1\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x4c004) getpeername$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x138, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x60080) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) connect$rose(r9, &(0x7f00000007c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x4, [@default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000800), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0xff, 'hsr0\x00', 'gretap0\x00', {}, {}, 0x2f, 0x3, 0x11}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8f}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'nr0\x00', &(0x7f0000000c80)=@ethtool_modinfo={0x42, 0x0, 0x1}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r2, 0x124, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400d5}, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e40), r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x3c, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x3c}}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl0\x00', r4, 0x4, 0x1b, 0x9, 0x5, 0x17, @dev={0xfe, 0x80, '\x00', 0x2a}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x700, 0x9, 0x7}}) sendmsg$ETHTOOL_MSG_EEE_GET(r13, &(0x7f0000001180)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xf0, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001440)={'ipvlan0\x00', &(0x7f00000011c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x9, 0x1ff, 0x10, 0x4, 0x9, 0x4, 0x7, 0x0, 0x0, 0x80000001, 0x8, 0x2, 0xffffffff, 0x6, 0x237, 0x7, 0x8, 0x8, 0x9, 0x2, 0xfffeffff, 0x8, 0x592, 0x7, 0xfffffe01, 0x7, 0x8, 0x59e89aa6, 0xbd, 0x8, 0x6, 0xff, 0x1, 0x7, 0xd, 0x5, 0x40, 0x5, 0x6, 0x9, 0x7d, 0x40, 0x8, 0x8, 0x3, 0x6, 0x8, 0x1, 0x80, 0xa, 0xf55, 0x1, 0xa822, 0xb, 0xb, 0x7f, 0xfffffff8, 0x0, 0x80000001, 0xffff, 0x3, 0x1000, 0x10, 0xc8, 0x40000000, 0xed2, 0xff, 0x9, 0x9d2b, 0xd, 0xf, 0x3, 0x3, 0x5, 0x1ff, 0x5, 0x4, 0xffffffff, 0x0, 0x0, 0xb551, 0xfff, 0x401, 0x9c, 0x81, 0x4, 0x5, 0x5, 0x3, 0x5, 0x1, 0x7, 0x6, 0x9, 0xfffffffc, 0x3ff, 0x1, 0x4, 0x4, 0x40, 0x1, 0x3, 0x4, 0x81, 0x6, 0x4353, 0x4aa2, 0x8001, 0x6, 0xfffff800, 0x10, 0x2, 0x0, 0x6, 0x8, 0x6, 0x0, 0x9, 0x80000001, 0x8, 0x100, 0x1, 0x5, 0x0, 0xd59, 0x2, 0x7, 0x5], "250f803ff588760443113d332641dea625e345166b349ec878c0d16380189b40a58f1d9d1d798385dc629349b193f54dcd9dc679d2ef6418c39ee40e2e04007b2d6451dd5bf244a4a9286814e2ad2a30380548b43b62bc"}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002480)={{r15, 0x6, 0x0, 0xffffffff, 0x6, 0x9, 0x81, 0xc0, 0x1, 0x125, 0x8, 0x81, 0x1800, 0x3c49, 0x400}}) 5.857304928s ago: executing program 3 (id=2697): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r0, 0xfffe, 0x4}, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) sendmsg$inet(r1, 0x0, 0x80) 5.604800224s ago: executing program 3 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="923fde73", @ANYRES16=0x0, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x40010}, 0x80) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000480)) 5.50909844s ago: executing program 3 (id=2703): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x880) 3.652000512s ago: executing program 0 (id=2725): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/238, 0xee}], 0x2, &(0x7f0000000440)=""/180, 0xb4}, 0x2100) 3.200813681s ago: executing program 2 (id=2731): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xba, 0xa, 0x3, 0x9e8, 0x6}, &(0x7f0000000280)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={r1, 0x3, 0xf}, &(0x7f0000000440)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@remote, 0x4e24, 0xfff7, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x84}, {0x6, 0x6, 0xc6b9, 0x5, 0x6, 0x6, 0x8, 0xff}, {0x6b, 0xffffffffffff149d, 0x2, 0xab15}, 0x7, 0x6e6bb8, 0x0, 0x1, 0x1, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x4d5, 0x32}, 0xa, @in6=@mcast1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x1, 0x406}}, 0xe8) write$tun(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) sendto$inet6(r7, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r5, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={r11, 0x2, 0x1, 'L'}, 0x9) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x80) 2.713634365s ago: executing program 0 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@delsa={0x15c, 0x11, 0x200, 0x70bd2d, 0x25dfdbfc, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x4d6, 0x2, 0xff}, [@algo_crypt={0x134, 0x2, {{'ctr-aes-neonbs-sync\x00'}, 0x760, "8a1f4f3ced7f96f251fbd7fa8fd94ae19f0f38c9a9ac3171e11848fa09cfaa5860a94b4f6efaea267ca0e9bd6bdcea1bcc918c7345918dea3b92266ed0e970d49e1ec8e9c7ca22015029b2f9cdea5ab37f90d8dbbd55d3a17b98798b36c53a5b65aebce5278fe3b8e5b761ebc66ea97e4528ff9258208d9a07038e21618c49ef0fd15f6ed9cf79b22e5a7ba3b7faa708eb36df81fe28c1fbbe40d10e7ade0e9f6567f2ab4c8853168a9201d6c5307e3a9d3fce9f83df87d50c1b2fc948b5c1bc19ef6d1d5e6d4eb444e42621c30aebe62ee05fa630c12bc4c6d71d93b995e2cf83d66588200b297b55ab32ae"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4081}, 0x44000) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000000), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x101, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x488a5) 2.663274063s ago: executing program 4 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000000)="5088dc889b7e2541f33b80a2f3220863205cf5f265ad8471acdbb3de268b309482db85ca1373ec8ddd06f13768a307b4f3", 0x31) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRESDEC=r2, @ANYRES32=r4, @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x8844}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4, 0x41}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x12) 2.500362652s ago: executing program 0 (id=2737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000300)={'veth0_vlan\x00', @ifru_ivalue=0x58aa}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x44b, 0xfffffffe, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4083, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xa8}}}, @IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}]}, 0x44}}, 0x0) 2.454307043s ago: executing program 1 (id=2738): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1000, 0x800, 0x80000000, 0x3}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200)={'veth0_to_hsr', 0x32, 0x36}, 0xf) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="900000000514100027bd7000fedbdf25080001cae28100000000000800030001000000080001000200000008000300040000000800010000000000080003000300000008000100000000000800030004000000080001000000000008000300000000000800010002000000080003000200000008000100020000000800030000"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 2.30456833s ago: executing program 2 (id=2739): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r5) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$isdn(0x22, 0x2, 0x26) close(r9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r11, 0x114, 0x3f, &(0x7f0000000080), 0x4) (async) setsockopt$RDS_RECVERR(r11, 0x114, 0x3f, &(0x7f0000000080), 0x4) clock_gettime(0x0, &(0x7f0000000b40)) (async) clock_gettime(0x0, &(0x7f0000000b40)) recvmmsg(r9, &(0x7f0000000a80)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000580)=""/188, 0xbc}], 0x2, &(0x7f0000000680)=""/16, 0x10}, 0x3}, {{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000780)=""/47, 0x2f}], 0x1}, 0x8}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=""/174, 0xae}, 0x8}], 0x3, 0x20010000, &(0x7f0000000b80)={0x0, 0x3938700}) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008810}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002abd7000fedbdf251300000008000300", @ANYRES32=r4, @ANYBLOB="05001a000000000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="06000300000003000000"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@can_newroute={0x4c, 0x18, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "056f2f06f1d01de4"}, 0x3}}, @CGW_DST_IF={0x8, 0xa, r1}, @CGW_LIM_HOPS={0x5, 0xd, 0x51}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) (async) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@can_newroute={0x4c, 0x18, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffb, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "056f2f06f1d01de4"}, 0x3}}, @CGW_DST_IF={0x8, 0xa, r1}, @CGW_LIM_HOPS={0x5, 0xd, 0x51}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r2) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) (async) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r17], 0x1c}}, 0x0) 2.266771498s ago: executing program 1 (id=2740): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0xffffffffffffff08) (async, rerun: 64) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000080)={'veth0_to_bond\x00', @ifru_addrs=@l2tp={0x2, 0x0, @broadcast, 0x3}}) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x2d, 0xff, 0x36}, 0x2c) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004900000095000000000000004dd90abee6d40aeae03868e3e455a41e85d7b094c58586700988fd470a80a0e2449b82e96a95564fe0dbe0bc7ca6a783fe2d44ac274f0fb8994f79a9cc3c547f99dca5fb70d107492692c0ec3df87abd3ee5bc62416bb6bba0a8a3ea0476024b50f86c110da6cbae7f8e0ffa7565cf9165eeede9bc577f06ce"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x400c091) syz_emit_ethernet(0x7c, &(0x7f0000001700)=ANY=[@ANYBLOB="856b936529faaaaaaaaaaaaa86dd60381f3400462f00fe8000000000000000000000000000aaff02000000000000000000000000000104a08100f4ff882f010100000800000086dd"], 0x0) 2.131077576s ago: executing program 1 (id=2741): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) readv(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000140)=""/185, 0xb9}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x5) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001340), 0x8) sendmsg$NFT_BATCH(r1, 0xffffffffffffffff, 0x2) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000001380)={'netpci0\x00', 0x5, 0x8000}) socket$kcm(0x29, 0x8, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000001480)={0x0, 'vxcan1\x00', {0x4}, 0x7}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000002280)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002240)={&(0x7f0000001540)={0xcdc, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x21}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x260, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x20, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0xc}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x114, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0xe2, 0x2a, [@supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x2, 0x1}, {0x12, 0x1}, {0x1b}, {0x24}]}, @random_vendor={0xdd, 0xd5, "cf051d598f670359a4e14f237afef04043877dc7fcdeeed5c141a5a062031d9b488e75fe1831826da62b22843dd5641b0aa2050676b04d78f2241e0f6b0028b53075f9d9e9d45001a03f2e90c7f092443d38d0b749d7d8f64745d4117d0de49a7da802bc300aea2351b0afa9364520636cc254c06bda2da23988cd080045218dc368d6163cb7f9a0f4159fec4b8b416227c432a4ddcccdd4f78b9f32fc78b0d9523c26f5bf5c87d9edc902cce05502cb9a43e12bcb96ab3893f6a625f05a437de4c859b756a39c0c4d634e8f9691db11bfc9f1e2db"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x54acfa92d5c905c5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x120, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x101}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xd, 0xa, "bcfd23d7f35bd96af0"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xfa, 0xb, "2d62f21ffd156191f3b852003b2f61c9a104bfd8303ffdeed3ed2a97855c1b7f339d3c0f43d49c8d4364dc1c6d3250766c360b28951fd3d7665848feb134300093cab8fa3db0d67cc9e3670820ce951f4640bbeb270a0354275e04b8ce6295c1d8e5ecb69cd02d1247e51e2ad7d7b904f9bf69b8ec76391b5d0582b402c2dc31e27591993679f4a7e8916b87b671a3c01547e96ee311cbff14e184e862520a886d80c378945e90b17a2e04af3bbdb90dbcafd6d6b26605f2feb7e1654321dd6eb5e4cc089fe11f0abce1d1b930c377b86d58141ba1bd281e2cb912ddf97482e844018b5ab36332049d6d301816cb2970106c87b9d88b"}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xa5c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x930, 0x4, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1d8}, @NL80211_PKTPAT_MASK={0xdc, 0x1, "823dcb456c66412b7303131e20349b6d1b118d019640be6cfbf14ce080883605f89b3d2c66cd5ba2a29384547a92bbf83dc42e9e79a8d13dc961743682495e5634b680026d59e1725ffa841affad4907c03fd63488f833971dfbf5c96ffae71ee9627013043256845442f16cf9d307d6d76f49abf0bf6962cefb45b43d232b83ec8b1488301fcba8391302b3beb2a027e456b2511d545ba6e8c48bc20d01d1639a1a3c1c2fb6b0815958c1c9b941252e306313c3e888afa6b1bc62aab5e509ed6edee31dde8940eccac3764ec8990456f4f6445dd0331969"}, @NL80211_PKTPAT_MASK={0x6f, 0x1, "af049da1e59fac50f5f4fa429c276b15b297a306518952c370f96a0b97e7c63e84f88ea4dfb851a6458d2cb1d4551f0a2db3b6b91c5bdfc5faac53396fa31c2997bc744612a8e8f0dfc21524ba569d7eac0ef85375a81d1ccf4d9cc889b2b76cb1b90e9f562156cca90d6d"}, @NL80211_PKTPAT_PATTERN={0x26, 0x2, "8e9631a453f097f166ce7b79b8b73bbc8ddc5dcc19996515a0c96d7262ff7b227d3e"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0xd1, 0x1, "4486adec138e58c78a31641b8cf5f80e538ef0e03ce735d79a0acfd4da99ab693cf81268fa363b7f337ea2c8858176babddad3369a21b26ab344368aa43f4adb5ba8240bfc55540f6518557c78f29f54ecff39def8fe6371a33ed44be4cf8c1198b585a8bf8cd5e25527651a2eff3742616aa393e4568db53915d8b0520b371d5178c3100d6b247da1bce2c40440da5a26b5b7c30c7164843f01ae991857aa65e116e9beb9c90fdd10787ca9800fa3e26f485c9cbf01cf9ebe10aef93d2c2362e96e9fc9674f11ef2a8bf97d74"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1693}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x34342306}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xc62}, @NL80211_PKTPAT_MASK={0xee, 0x1, "35811a187ce8a0a4c7efd39b3dd9bc17f2aa0b09b44c65bc609691eba59b9dd5534e420a0ef24d95c8a737948fe9d487e2b22a7bce47f1f26ad29c2f746b377f6895a3204ae63acc7736bef535a283784620b3cbf2d0fcbcbfb6de605e0aba9b1e23407814c20f17ca0baab640880a966fb4f6ef68d6c613e77ccb19b227272fd09bdc7ca7bfc29a070f0f91d7a2699331664db58c87f9961acb2e5e1f8d7aea49c8c80598d4a195b2504e0277fd62b15b015ad85b468fece278891deacc0aecbfa87f112dfb490ff7c39801acd56453dfbb05efbf291c2ac00a5a3522e143b272d6bd670cf96cc14cef"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_PATTERN={0x1d, 0x2, "e7354c6ceb7197437a6d8d2405bc73148c9b25ef9029c9abb8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0xe9, 0x1, "74ae61e2e5862f75b20e47a00f446f8f8748e8e056070a9c09a1d66bb3a2e6d4605a215287fd7fef4338bad935458ba661b7055f558449e7427ceaffb3aa71b1305850aa44ef6515798b1a21b500acac0858620d01931bfa6de138a89eea8e75b0b242e17405ba53451c7be1b46f8d0e72c088dc4da580e383da977f193e35c802e391d30406568e234e5bcceec3f3b7df811ad364cf379fee3719cb412e201322a41152d7c530d971b2ffe19c703033c900cc9540a761c73dfa26211d0d998c742b186bd0468bf05635878ff5d51ee2ba1da28565b3c45693485b965aa5f4587abb711416"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1a2}, @NL80211_PKTPAT_MASK={0xb0, 0x1, "9da085189add6f588cd7f9c57adc05ae4f09e6e77cc9eefa9caf46ebbf1b14a8eb9a584da833f4b81c0ef8e6ab423828189cb25794c1a034bcfe5149fac51a76d01b2c1df5d1cbdf50955bad1cc2bfeb15348ddd19bf5302ed7cbf23a6e672eb27f9a4635fa204682b287a50495577d42f4a6ed919b711338eaec097ec0f59aac4b089e8a0f328d422580042bd449b0484e1418d95339d3c7faedcc5f2a99e10b10dceab59f23ca2bae31fb6"}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x4c, 0x1, "9bdc0a9cbae166ac59e6d5c2b0131c931202bee6bf50f962b00bd6bfe6ca74116ae5d59e2549ccae1d20948e68549739ebf72ff63d01ac8f68de3de2415f53475503250585760581"}, @NL80211_PKTPAT_PATTERN={0x6f, 0x2, "93dd78cad9707043531f342106d3c2675b4c4f4616f4e4f2313c28f556eb781e32ec06b9ccfb98024195cff2bf8a74de046bb804d63bbf0b2dff7c520f4de91e430658e4ae2a8c764fb7382e026b411cad1e9a7697fbf5304f4e282defd04b47b4f9b735e7622a21058c6c"}, @NL80211_PKTPAT_PATTERN={0x8, 0x2, "6fe774f7"}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xef, 0x1, "4545cc5af708ee09e1e9740cd99908e843c1d539b47b830f06a112c8e4ecc65d2c8d49dd0feeb0062d6f379903262b98e9cd0ef3e84fc33b81c349c1d5db08328abefc332a52ba4ffdc3dab1133a1bdf2cf5d0029f1130a6472c470830ef599a7d4a8d4fa0aed882b61dd1b574afb8dcc42085fddfae0f7757d4115fa07d2c195a2a9475751648a997c8dc463cb3fcacd64c2f4ea9fda2703dd993c795e844cee988795ae9d28b1ffd5d0283b3e6ad2000ad28c2249b86183b88a749944952d3cf755e11ac5c50f7311f43f1757ca47c74b853d9d995c86181ea6664d6cf8883dbf91d77274e91c0700d54"}, @NL80211_PKTPAT_MASK={0xcb, 0x1, "11a2f454e42d4dea3d1a34583cb927b01ff8270382f0991ca569c8751e23918006e50117f65a3703a703eadcf4c625de148cb48a4ad6302cc961fddd1979a476ece04bcb8badd3ad13e122c0fdcb8ff78cd1771e10c91384d73b1ef1204ae24c42cf30c1d912513b0c1c8576c4c3037f1f1da525f81273648cc84b8c1131e730b0e8cacf4e8a9d7560bce166817e6335b65c28b8c2cdc5be858ff2f9f1cf4178a3c6718012d12a104321c31cff6410c8695f320d8fbdf26aa0899f9d55cf0e42faf25f3087f7d5"}, @NL80211_PKTPAT_PATTERN={0x45, 0x2, "4e01b73a9920f21ad988c5cbf18587768bb12617ca6236b1e2c6fdb22b1d7c6f53100f51311eb349060cb4a01e886aaa91efdf2849648e1c3283f2ad35495263af"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_MASK={0xf8, 0x1, "e3b0982b1bd7fcfe3f42fbc61c22bbd7c30842d5865ecab04183d087bbe032ed4736e3d3fdaf034c853f07807af18fedae65c15970a315332db6cfd9398083849a05b7936673456fd1812d442434bd8f2a0b8f27199cc739afe2f43baf18f51f7ead06c55458d221a80719157655ad37536e5d74798ef7b87f55b70cacf9c0079219683144aa45777bfd4f89074765cd01245a0074d6f0c33a61ceedeaf435fd38de9005996cfe443e36041fb1a9b98ef6f04d59d04a930d080aaef3be60f0d2cf1e13223d3878ce0291315dd72a9103b38fe6dcbb8c40787f5b798fd9f868d1781b295d3fa0da1c56b944e54868b471af787a77"}]}, {0x4}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x11c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x977f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xd0, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @rann={0x7e, 0x15, {{0x0, 0x39}, 0x81, 0xb, @device_a, 0x2, 0x0, 0x8}}, @mesh_chsw={0x76, 0x6, {0x1, 0x80, 0x0, 0x800}}, @mesh_id={0x72, 0x6}, @random={0xd4, 0x6f, "665203caeecfb9bdd22111f402bcc855418e8226c525388517e3719cd0a598c9d58c9dda09706afac03c5eaf233e92f657b29a91e7fd35cbbfde21fe419a19e297a57f0eaf9fc671513354c97f66f03a9cc850b7ecc92383d3f50789a22c0c524aa96bbcb09c15683588e493bc72ad"}, @dsss={0x3, 0x1, 0xa5}, @prep={0x83, 0x1f, {{}, 0x0, 0x62, @broadcast, 0x0, @void, 0xfffffff7, 0x3, @device_b, 0x6}}, @mesh_chsw={0x76, 0x6, {0x81, 0x49, 0x15, 0x6}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}]}, 0xcdc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000022c0)={0x4}, 0x4) (async) r4 = accept$inet(r1, &(0x7f0000002300)={0x2, 0x0, @initdev}, &(0x7f0000002340)=0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002380)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x7c, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfe8}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xce59}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040001) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000002500)=0xf, 0x4) (async) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002540)={{{@in=@empty}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002640)=0xe8) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002680)={'wlan0\x00'}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = accept4$bt_l2cap(r1, &(0x7f00000026c0), &(0x7f0000002700)=0xe, 0x80800) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000002740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000029c0)={0x0, 0xb7, 0x6}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000002dc0)={{r7}, r8, 0xc, @inherit={0x58, &(0x7f0000002940)={0x1, 0x2, 0xb67c, 0x0, {0x4, 0x6, 0x94d, 0x995, 0x7}, [0x3, 0x7ff]}}, @devid=r9}) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000003dc0)) (async) getpeername$packet(r1, &(0x7f0000004480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000044c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000004900)={'wg0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000004a00)=[{{&(0x7f0000003e00)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004400)=[{&(0x7f0000003e40)="ecf7d24b930763b36bcebc01952b93e66a5e4dee0942dc9a3b31a4e12ddbeb0cfb5c1f0edfa369054910c994951ce6363137e85870435db03031ee70e298d79f33e07a7024093f04bbada911546d576ee12644e7fb8859d2765410586ef6ef167765134f16ef04301515b080d6f28ecd606d99329a685513a4035e0140088e9c9fe59f560587228b587ea71ccdb07e654d56e5084d2e532cb71892797118ab1370f2022e5b4bf5b038cf69bd7f258b8691b76b66f668c1ee2bb30ab5791fc72452233a45815ff519844761b708131a1b352003ff0f92b50f1f42468029d996f03fc9ee30eea95ff10535469c3068236be5", 0xf1}, {&(0x7f0000003f40)="3f790276eaaed5ca46fad39530c26e5c54b7deb7899d2464f1e94a3492f984ba856c1641b72728481ec4ded613f8929cb85a6935009559f34fde0b374ee61676b752954e7d4843ab6f839a5d71f9c588991ca44e6ba35e26b47bdff5fcf412ee6e2c3be66cb94f5044027a6b9c0663110c44e19f1f313975b270d13135238846e12d6765701cf5c10bdb69d04df472f89ab985922a4af0b574709af3a488cd88cb92bb05df146ab874e1e3d1a4d36f41eecf4ebad317ff4e325c53c6b46c", 0xbe}, {&(0x7f0000004000)="d6e8a3188d0c83dc79df9e9d0eee4315ff828bb44eab677a4d72bac418401ba10b056bcb40da13c5a7508a6c08e5f835e9ae4068451b27dc8a1e8183c5cbae6d3a47bb96e548343c65a1dc85b433f351382855edafe0417ad3f646eadbf6868bdfbe255d8aba96a0a448dc0e1b0c1ce17d00998972963d022c1d6d7758cff16a85e67bc99a59d7148dbebf2e4c22e8b059a31e0be2abadc960a53e1cd44c59b26717d26b6c2a0cc57d", 0xa9}, {&(0x7f00000040c0)="cf40a6f6d2e0a6b528bae47bd7e8e4caeaf56d54e8de1dd0c31367519e7dcd8e543168e94a32b17639b18addf1119a08364de23bf86ab5c419bbd24e4b0fcdd41ef8f1920b9677b38825be26cb50c5f7e8ba6bca48a2c50ee4706d452272cb2bc8bccb1ead06fdb9c80de2766b463f0c374188ab6b12278e1250ec6f09ea12a0646e45a2c4965eea725da7c4430c9ee05110332789156659fabf8c3f889d8f7485f426f963eb7f8affa2c759c8ec3294f11b2a5c12275308f7645a6042f7496a252177e680f9426dbf41c3a9bac07efc121a1bae978d20dcd0f3bf17991d5c366589bd9ac977ecb00f378a3f", 0xec}, {&(0x7f00000041c0)="21610a6162b2cf8dcde1adf2a79df6d6008a30a010901fa0708fd01bf50fb1fec57189c6120c1497cdde71d9a95aaefcdc5c86aec8bd1edfb329b762465dd6ccb4a5cbe9bb7e99b0f9b9e5200e774f8294cdbfe6ffdf46d55922406f4d2d410bc2e70c671ecdf2023002d869c1a037edcb5bfac7aface8c1f7485923de1654a8efb40e9df98613771aae8919bddf3b94347e2fdb4231fd3d717fc7c45d09fc8e9a6dec", 0xa3}, {&(0x7f0000004280)="c97572542ad189a714b1715093ff027543e87d5848f2e8934f52fb29b49dfde107030d96827f413866894183343029df9ddba2b35fdfa8d2fcbc62aa40c283ecebc48347d2076afa442d86e10a50055dd8f565f8f7cf4a351ba1220213", 0x5d}, {&(0x7f0000004300)="840dd2f94374f0e1137f5854555b9a8a08bd3dae2227c69ee3e0b1f611bb80ceb67d2a2a2670c03eebc019d28d6b4313a69e0a641b7406c7c72555ab4df033af39e7790d01cbf0041c0418d68d7b425e9da492a466ae81b4b56b56e026724e16b2b241832e05edbaf92eda028d033aff73a82bebe75441aa8501d7c0c94eb08ec9b8850ab0aac15ce4e2fc201df7e82b3789b0cb39670bce7943cb81616bd3ace7c2562c5115106cd7d1ac935f7f466ed57cfe9813519dd96c0c992bbb5d47a43b52cdedc68e145b5e7a1ab7f4d34b04dfc1cc1b79f8ea877873c0820ce09c3b062c", 0xe2}], 0x7, &(0x7f0000004500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x98}}, {{&(0x7f00000045c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000048c0)=[{&(0x7f0000004600)="6ef83c7911233c6ceecf2b81bde8d234ee3c02d033836ffe23320d2323fe8adf69e8baaa9beaf7b1974102e9a73d652238f02e12eb6b8640960e4c778ab6f6878136026eb72342129f24149fb8bea064c8a00f4f9741869dc491aef0a6615e5e6e910cce6d7de23d6cf60797289887c809d87681dc314395ec48de5b500e108a68604b1a8240e4969c9f43527899b8b9fa7e4c3971057fd702d4f2d4c6386894f26b092f66329b2610a5a468044d2f2855ed5a5f7bfa6f553436d8261cacf2f05d4e129a7878abb5b7fdd8e4207f0b0d0cc841", 0xd3}, {&(0x7f0000004700)="2a61b2783e5f280975129617a71d04418a38166ecaa739c0b9dbb426ee62e76fa68ff402d5a366552ba5a4a8910b9c80c41480b056667a4af84595f1e5273e956b0f7358ca70ae43cadc85f399dac6997b66ce6d6828c545009ed662ca3fb86de43b25882316690091ba7ed27a36cf2919a8685cac30573cac08430105b9ece24e68825f63005fd2902dcf0cb4b6eda2a5a111ca587515fb0dac4fa24045b6e78ae4085dfa249c416e15434c3614266fd6aa446efc94c7a7ee36fcb777fe", 0xbe}, {&(0x7f00000047c0)="139b8a593c81539b46bc357dc0e19cf0672b447e77d69df931e2a2f9d3e8ec3c4bd1d201884a006e4c203e1992e82cc5a9bd40055169e72e545b31fbf95ccfa5fdcbc86aafb6cd126a8c523716cd8d573db35051ab6bc2353170debce270d12e50c62bc929225378adaf002bcd23b48b2088df8a4d1627d7378640e398388a7264e368433b039b1be8291b0b30fd74765aa6bed062952ddadf0e5f0e5d0cb5be009e26552cb8ec5c29ab30462d4ec4e2a5d8616436beda74106cec93584684ca222bd1", 0xc3}], 0x3, &(0x7f0000004940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb566}}], 0x98}}], 0x2, 0x4000080) (async) sendmsg$inet(r1, &(0x7f0000004c40)={&(0x7f0000004a80)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000004b40)=[{&(0x7f0000004ac0)="6650cb29a942d96a2a20d1c9782497bff6c32bc2b2f19c9b565f7a7296b5a74b7d3a4066429d0e1ae3486e870de9d98ba81b4c645911a52418e3d356289c7a0d22140bf73ff56a93ce76517ccd9b0a5fa6c7920ac0566006a6fa0917348698da5c10e4402962bb4d64ba0ea827b16a6c9a", 0x71}], 0x1, &(0x7f0000004b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffeabf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0xc0}, 0x10) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000004d00)={0x0, 0x4}, &(0x7f0000004d40)=0x8) 1.100858449s ago: executing program 4 (id=2742): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="68000000000000000105000001000000052c707008dd54e2849d9d30e19e56ff3e54c251444c077ecbdd6ccacb3d32d1c94c952826b7db02795acf0b9b84cf7eb06fac40da3c90e03bee516dc2430000eb71d0c69fb231ec3a01384060317097364d1a30bd000000"], 0x68}, 0xfc00) r10 = socket$kcm(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000000180)={0x0, 0x1, [0x4, 0xffffffffffff8001, 0x2, 0x3, 0xfffffffffffffff0, 0x2]}) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 1.030268801s ago: executing program 4 (id=2743): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @random="955375c9b013"}) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.019653357s ago: executing program 2 (id=2744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e401000000440004800500030005000000050003000100000005000300050000002000030001000000050003000500000055fe03000200000005000300000000000500030080ff000008000200020000000800010003"], 0x68}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000010480)={0x0, 0x0, &(0x7f0000010440)={&(0x7f00000102c0)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1406}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x88c0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@delneigh={0x88, 0x1d, 0x300, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, r5, 0x20, 0x20, 0x9}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_VNI={0x8, 0x7, 0x81}, @NDA_VLAN={0x6}, @NDA_LINK_NETNSID={0x8, 0xa, 0x6620}, @NDA_SRC_VNI={0x8, 0xb, 0x10}, @NDA_FDB_EXT_ATTRS={0x24, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xbd}]}, @NDA_FLAGS_EXT={0x8}, @NDA_IFINDEX={0x8}, @NDA_DST_MAC={0xa, 0x1, @random='T&Y8Ds'}]}, 0x88}}, 0x0) 920.861026ms ago: executing program 0 (id=2745): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @remote}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x90) 920.421025ms ago: executing program 1 (id=2746): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a2000000000047000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x62, 0x1}, 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24e200, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x0, 0x3, [0xea, 0x3, 0x6]}, &(0x7f0000000140)=0xe) 856.140519ms ago: executing program 2 (id=2747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x6, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r6, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) write$cgroup_pid(r6, &(0x7f0000000040)=r7, 0x12) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5ab3f19b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x97, 0x97, 0x3, [@func={0xb, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @enum={0x1, 0x5, 0x0, 0x6, 0x4, [{0x2, 0x3}, {0x9, 0x12}, {0x2, 0x36a}, {0x4, 0x2}, {0x7, 0x9}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @datasec={0xc, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2, 0x6}], "5b7b81"}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x51, 0x6}]}, {0x0, [0x30]}}, &(0x7f00000001c0)=""/233, 0xb3, 0xe9, 0x0, 0x80, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1d00000009000000b50100000200000008000400", @ANYRES32=r8, @ANYBLOB="f8ffffff00"/20, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="01000000050000000400"/28], 0x50) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x25, r1, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) 745.384762ms ago: executing program 1 (id=2748): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{0x3, 0x2, 0x7}]}]}}, 0x0, 0x32, 0x0, 0x40000, 0x3}, 0x28) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r5, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x3, 0x2}, 0x10) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x2800, 0x55005}, [@IFLA_NET_NS_FD={0x8, 0x1c, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4048090) 676.986008ms ago: executing program 4 (id=2749): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}]}, 0x34}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) 531.977371ms ago: executing program 2 (id=2750): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64807b0bf7e2934b5e2d6d4b000000070000000000000000000600000000000000578e85c4880000"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="0c489043b35647483f5e03f708eb1f071767f78fc457e4d1f24247d8bbebeddca8d443a053f497283b14825f9d2df625a0c22bcc93292ac5abbff7287e5843ed9c80e35d0f355a2c3148350ab644290fd7ff5859fffea836dfb7f465931abfd799542624a86ea1210d2928f1338dc70aba48f5b70d7f07af814182c08e6fc660ddbc6cda693f5cdd5337c341fb7b6352d8b290dcaf6c0343ae4d77bb8d56c6f41d40b7d7b8d1020454005454407c7cdc00a18e6af2e1a8472c37206646ee198991f3", @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8}]}, 0x58}}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1}]}, 0x50}, 0x1, 0x7}, 0x4008000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x803, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004005}, 0x4480) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x4, 0x1, @remote}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000580)=""/95, &(0x7f0000000740)=0x5f) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x800) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000002c0)={0x9, 0x94d}) 483.565919ms ago: executing program 0 (id=2751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x118, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xdeb, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0xfffffffffffffffd) 264.992757ms ago: executing program 1 (id=2752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x40800) 263.559492ms ago: executing program 0 (id=2753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r6, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) (async) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x0, 0x7, r5, 0x401}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 183.05207ms ago: executing program 4 (id=2754): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x140e, 0x0, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4000) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000011401002bbd7000fcdbdf25080001"], 0x18}}, 0x4000c884) 136.035241ms ago: executing program 2 (id=2755): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000300)=0xfffffffd, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a50a000008000b0000000000060001"], 0x34}}, 0x20) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) getsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) syz_emit_ethernet(0xff, &(0x7f0000000300)={@random="31e02b0eaf4e", @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000080", 0xc5, 0x3a, 0x1, @empty, @local, {[], @ni={0x8c, 0x0, 0x0, 0x1, 0x5, 0x4, "25ee0447e9b4446941b1927c5b3d9bc9bf3862d917458b5cacfeb3a171dcda086d3ced3dab54a90689dfc9a1345c3fed53d8ac28f79641c3970ba8fc6006a7f72f45c271e62d65b7e40ae44bbe0bc907449fd30031115ea6c53f1a38e92b43990b8aa24abce9f6c51a0951c731253b052558ebf6618837b5e27ebfe6ab78544a782477bb8aa36c1eaa67a3a63e927e1510408ba537218bd050a0565a15654737bab392d7aa48f900fd08428fb3ebee2a59a507ee12"}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, r7, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=2756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x20000000000001df, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x90) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000480)="0841b0447335e722709a393c478c82033a87d2613b940919d4d57bd060e742c84e9064a2db1402ad2d0d2fa336aabf6789506edf1dffb6c4d2b758955e23695abe2f5db03842ba96ba9c2d7c77d5deb8507f6e6b220c71660545979e6979e435b8dd02a1f8b9d20078b473e003322816e90e2fecfb671fe549483ef5fbfc0936390a1e45ed9ee073d9ac3c8c3baa01e0f832a30b50d98fa8279cbd145812b1f87c710cd43a02978b12121a07413f18aa1d0ab36e1ebe4bb56eec", 0xba}, {&(0x7f0000000540)="5e47a59f029fdc7349099a60bdf6e33c8ebe9bc3b1a6df0988476a915ab854c613f4bf932c65140fb89a2fd1eaab1206edefc0da50a0093b8682e42c444fe0baa2ae6667fa6ceb1499332d256813c4eaffce0938ce4e68e59bba434b91ade843a8be775eef8b6195099353dddfaec8de7a28f4e7e31039e0ad78a627c98c25f70a4c9f952ca9d3b76be05ca36174e68c74526190bbe52a38e8b2819413bc3f21d78c9cd7a60335649717e2e46c8c4ecb5ef9d92d277b7aa9bb8436d7276457f247dc1baea031e8ab987fd1f11252c404449ae53741043801ffc40d0be866267a4300be850175046926dbfd7ec71cc5c646203052c68077ecf099ae0c7cedfd", 0xff}, {&(0x7f0000000640)="ce03372528281379ad60aef2dfdcada0c09c9a7728c7be8fc3acdaa3f0f4af7e7685059c420c38d27021cda86a84b040c85a9880c8d80519894c437f9e87c992ec78ae613d22c7dbb4ee72c07df73fe5137a491ffc921c71ac4f8e032bb83117c2a755624b3a0f8d0f125e2e91ebd20ebb5317f2d10d4d20f3e3c591fe2e0d8abff3566efdee8e5e9749bcfc099aea3efcb015b5f8f152921c1dbd", 0x9b}, {&(0x7f0000000700)="1c2e5aa3400058601f0a231bce4f04cba4dac623aa083fc96eb1ebb8603dec350d26476991c9578fac69b24406cb9b02b2ae656c1c7f4ee7615c518849a8b1e76e9f581494f23c7abb957fa93864defc58fb503ef36d9811da8ce1421665853faa7bd80d54677830bff011637f5cf02ffed485dc3323218f47f8c2f69ea3eedbe6e4dacbbbe064c7a732686fe866df9af58f77a92910ed1c9ce1fa0cdee1007d35a9bd39676dbacb70902b9b664ac0de9f73b0f72c1d7ffb", 0xb8}, {&(0x7f0000000380)="a0fa3dbfdb3ee585161a2692469cb6d26a457140b976ccda744e346cd482791e6acab2f5a4df92a1e7b92c028aa77df1de8fd797eb1ecd650f9360a98471738adc989cb7ab4850a5f7", 0x49}, {&(0x7f00000007c0)="92257fb8853181777586266629f1a9e5f41b6256b5c9b793ac8a1c38b6af0b9d485cc28ecb66291b675e020d2b79cba9040853907bd12cc2a54e52449215f036bac7beffb3fd3035253acf2f14f9bf2a252c3c2a92667786b588f5d2f74128d22f28bd714ece6431e33884a8ff88cf1134b5f5c739c7d74f370c1982250e1bceb90f19e9d54863a73376cc1b1bcff3e1648bb53d50d60fe1229bb414781e2d7913f89960c129a4a8469d66fb83bade59ab641e9ca88964207f796e76e71c554592741bdef793d91a6d7c", 0xca}, {&(0x7f0000000140)="8d43ee51d55f62ac0e3666ef38ed52df119041a5a6f39aeb123436a6e5a7ed39", 0x20}, {&(0x7f00000008c0)="07a331c934", 0x5}, {&(0x7f0000000900)="617d0a461370d182715f2561fd9c1594f7915ccbef161994e604d2ce46885c3aa98c49cebc8c3de4f4812b75b4e35aa266bb456f50a88019eb6850a6535c645729f11df5639977ba3863a09c4d78dac7ade44b025a480ee1894de4dbbd4073", 0x5f}, {&(0x7f0000000980)="94727015521f4a2f5057f9e26a422a8f4f187d0080f240e11475d28bbb9a3f0980ed3ac9e05fbe9d673ace0463d902e672869fa55d02301661a2337efa4b16d2cfe0b00e0c6d9cfa0a5f76b5b40b3a1eecf207", 0x53}], 0xa}, 0x20040844) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x25, &(0x7f0000000040), 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a00110001", 0x13) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x200}}, 0x8, 0x0, 0x400, 0x0, 0x32, 0x5}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x80, @mcast2, 0x405}}, 0xfffffffe, 0x4, 0x0, 0x20, 0x8a, 0x3, 0x2}, 0x9c) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private0}, 0x1c) (async, rerun: 64) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x40080, &(0x7f0000000180)={0xa, 0x4e63, 0x8, @loopback}, 0x1c) (rerun: 64) shutdown(r4, 0x2) (async) socket$inet(0x2, 0xa, 0x400) (async) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c00000000001190780000000000004e200008907822547d34fdbcac7a2545036678e493e986f425e77169e5357be74bcc753082e7de851d9bd69df806d41265c1f246d7e378cd1eb217dd14e94edd0e288e1d20"], 0x0) (async) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500101d0002000000119078000000000000000000004e200f8290780400000007740000fdffffffffffffff9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)=""/27, 0x1b}, {&(0x7f0000000b00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/268, 0x10c}, {&(0x7f0000000e80)=""/13, 0xd}, {&(0x7f0000000d00)=""/141, 0x8d}], 0x5) kernel console output (not intermixed with test programs): ated]: syz.4.496 (pid 7870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.248753][ T7870] Use struct sctp_sack_info instead [ 159.296231][ T7868] tipc: Started in network mode [ 159.307416][ T7868] tipc: Node identity a298ea72dfa9, cluster identity 4711 [ 159.316544][ T7868] tipc: Enabled bearer , priority 0 [ 159.327740][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.496'. [ 159.355363][ T7868] syzkaller0: entered promiscuous mode [ 159.383307][ T7868] syzkaller0: entered allmulticast mode [ 159.448348][ T7868] tipc: Resetting bearer [ 159.484984][ T7866] tipc: Resetting bearer [ 159.535807][ T7884] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 159.547000][ T7866] tipc: Disabling bearer [ 159.699121][ T7892] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 159.736572][ T7892] team0: Port device dummy0 added [ 159.904922][ T7903] netlink: 112 bytes leftover after parsing attributes in process `syz.3.505'. [ 160.055558][ T7909] ieee802154 phy1 wpan1: encryption failed: -22 [ 160.069400][ T7909] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 160.304499][ T7921] netlink: 'syz.1.512': attribute type 11 has an invalid length. [ 160.309019][ T7918] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 160.442210][ T7926] Illegal XDP return value 4294967289 on prog (id 103) dev N/A, expect packet loss! [ 160.461801][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 160.560300][ T7938] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 160.646229][ T7933] gretap1: entered promiscuous mode [ 161.062298][ T7969] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 161.257560][ T7989] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 161.426917][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 161.669184][ T8001] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.705900][ T8009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.056463][ T8025] __nla_validate_parse: 2 callbacks suppressed [ 162.056485][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 162.120805][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 162.153257][ T8031] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 162.262271][ T8031] bond3: entered promiscuous mode [ 162.271573][ T8031] bond3: entered allmulticast mode [ 162.277993][ T8031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.357158][ T8031] macvlan2: entered promiscuous mode [ 162.363328][ T8031] macvlan2: entered allmulticast mode [ 162.373794][ T8031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.678066][ T8056] netlink: 'syz.4.548': attribute type 13 has an invalid length. [ 162.687609][ T8051] bond2: option resend_igmp: invalid value (32767) [ 162.694265][ T8051] bond2: option resend_igmp: allowed values 0 - 255 [ 162.703353][ T8051] bond2 (unregistering): Released all slaves [ 162.818702][ T8056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.045110][ T8078] netlink: 56 bytes leftover after parsing attributes in process `syz.4.555'. [ 163.062971][ T8073] bond4: option all_slaves_active: invalid value (222) [ 163.073935][ T8073] bond4 (unregistering): Released all slaves [ 163.200486][ T8076] bond3: option min_links: invalid value (18446744073709551614) [ 163.210403][ T8076] bond3: option min_links: allowed values 0 - 2147483647 [ 163.240141][ T8076] bond3 (unregistering): Released all slaves [ 163.763936][ T8119] netlink: 148 bytes leftover after parsing attributes in process `syz.2.563'. [ 163.854034][ T8124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.564'. [ 164.667147][ T8149] gre1: entered promiscuous mode [ 164.682934][ T8149] gre1: entered allmulticast mode [ 164.902574][ T8155] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 164.911882][ T8155] netlink: 'syz.1.573': attribute type 2 has an invalid length. [ 165.052586][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 165.350869][ T8168] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 165.381677][ T8173] netlink: 144 bytes leftover after parsing attributes in process `syz.4.580'. [ 165.426132][ T8173] netlink: 144 bytes leftover after parsing attributes in process `syz.4.580'. [ 165.451907][ T8168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.463112][ T8173] netlink: 144 bytes leftover after parsing attributes in process `syz.4.580'. [ 165.474084][ T8173] netlink: 144 bytes leftover after parsing attributes in process `syz.4.580'. [ 165.593258][ T8179] bond2: (slave veth3): Enslaving as an active interface with a down link [ 165.624135][ T8189] sctp: [Deprecated]: syz.4.583 (pid 8189) Use of int in maxseg socket option. [ 165.624135][ T8189] Use struct sctp_assoc_value instead [ 165.639124][ T8176] syzkaller0: entered promiscuous mode [ 165.644915][ T8176] syzkaller0: entered allmulticast mode [ 165.671667][ T8168] veth0_to_bond: left promiscuous mode [ 165.703038][ T8168] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 165.926108][ T8192] bond2: (slave veth5): Enslaving as an active interface with a down link [ 166.434189][ T6501] udevd[6501]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 166.494695][ T8227] ipvlan1: entered promiscuous mode [ 166.538873][ T8227] ipvlan1: entered allmulticast mode [ 166.545854][ T8228] xt_TCPMSS: Only works on TCP SYN packets [ 166.564242][ T8227] veth0_vlan: entered allmulticast mode [ 166.631413][ T8233] netlink: 'syz.4.591': attribute type 7 has an invalid length. [ 166.715377][ T6339] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.728031][ T8233] netlink: 'syz.4.591': attribute type 7 has an invalid length. [ 166.743234][ T6339] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.767183][ T6339] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.777695][ T6339] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.055955][ T8253] sctp: [Deprecated]: syz.3.598 (pid 8253) Use of int in maxseg socket option. [ 167.055955][ T8253] Use struct sctp_assoc_value instead [ 167.088475][ T8253] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 167.594119][ T8278] __nla_validate_parse: 35 callbacks suppressed [ 167.594138][ T8278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.607'. [ 167.640941][ T8278] tipc: Started in network mode [ 167.660417][ T8278] tipc: Node identity d652b4efa3c3, cluster identity 4711 [ 167.674782][ T8278] tipc: Enabled bearer , priority 0 [ 167.682697][ T8280] syzkaller0: entered promiscuous mode [ 167.689043][ T8280] syzkaller0: entered allmulticast mode [ 167.746367][ T8289] delete_channel: no stack [ 167.766537][ T8284] tipc: Resetting bearer [ 167.813640][ T8284] tipc: Disabling bearer [ 167.900680][ T8294] netlink: 'syz.1.612': attribute type 11 has an invalid length. [ 167.918656][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 167.931833][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 168.154749][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 168.377175][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.618'. [ 168.693256][ T8327] netlink: 156 bytes leftover after parsing attributes in process `syz.0.622'. [ 168.866622][ T8331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 169.222773][ T8351] tipc: Enabled bearer , priority 0 [ 169.259040][ T8351] tipc: Resetting bearer [ 169.390805][ T8350] tipc: Disabling bearer [ 169.582345][ T8366] xt_nat: multiple ranges no longer supported [ 169.594626][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'. [ 169.823870][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 169.966087][ T8390] netlink: 96 bytes leftover after parsing attributes in process `syz.2.640'. [ 170.001893][ T8380] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.047822][ T8381] netlink: 'syz.4.638': attribute type 5 has an invalid length. [ 170.232237][ T8399] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.643'. [ 170.333787][ T8400] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 170.679969][ T8424] tc_dump_action: action bad kind [ 170.785752][ T8425] bond4: option lp_interval: invalid value (0) [ 170.806297][ T8425] bond4: option lp_interval: allowed values 1 - 2147483647 [ 170.826769][ T8425] bond4 (unregistering): Released all slaves [ 171.025233][ T8442] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 171.064778][ T8442] netlink: 'syz.0.657': attribute type 2 has an invalid length. [ 171.142423][ T8442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.208652][ T8453] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 171.292516][ T8456] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 171.883698][ T8491] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 172.251172][ T8521] tipc: MTU too low for tipc bearer [ 172.432695][ T8530] lo: entered allmulticast mode [ 172.465867][ T8531] dvmrp6: entered allmulticast mode [ 172.532752][ T8536] bridge_slave_0: left allmulticast mode [ 172.545619][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.634370][ T8545] IPVS: set_ctl: invalid protocol: 255 172.20.20.53:20003 [ 172.700030][ T8547] bridge0: port 3(syz_tun) entered blocking state [ 172.706966][ T8547] bridge0: port 3(syz_tun) entered disabled state [ 172.714091][ T8547] syz_tun: entered allmulticast mode [ 172.721823][ T8547] syz_tun: entered promiscuous mode [ 172.729139][ T8547] bridge0: port 3(syz_tun) entered blocking state [ 172.735983][ T8547] bridge0: port 3(syz_tun) entered forwarding state [ 173.109489][ T8530] lo: left allmulticast mode [ 173.179829][ T8555] __nla_validate_parse: 7 callbacks suppressed [ 173.179851][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 173.207498][ T8557] netlink: 'syz.2.689': attribute type 39 has an invalid length. [ 173.236005][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.687'. [ 173.822774][ T8591] netlink: 96 bytes leftover after parsing attributes in process `syz.1.699'. [ 173.867013][ T8591] vlan2: entered allmulticast mode [ 173.899861][ T8591] gretap0: entered allmulticast mode [ 174.291323][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 174.632326][ T8640] netlink: 5 bytes leftover after parsing attributes in process `syz.3.715'. [ 174.666315][ T8640] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 174.669109][ T8641] netlink: 5 bytes leftover after parsing attributes in process `syz.3.715'. [ 174.728810][ T8641] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 174.826981][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 175.091426][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 175.104116][ T8663] block nbd0: Unsupported socket: should be TCP or UNIX. [ 175.369210][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 175.376464][ T8683] sctp: [Deprecated]: syz.2.730 (pid 8683) Use of int in maxseg socket option. [ 175.376464][ T8683] Use struct sctp_assoc_value instead [ 175.461772][ T8683] netlink: 'syz.2.730': attribute type 1 has an invalid length. [ 175.492892][ T8686] netlink: 'syz.0.731': attribute type 10 has an invalid length. [ 175.599124][ T8686] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 175.627170][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 175.666071][ T8696] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 176.034001][ T8714] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 176.151432][ T8717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.197117][ T8722] bond3: (slave gretap2): making interface the new active one [ 176.232571][ T8722] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 176.369152][ T8736] sctp: [Deprecated]: syz.2.744 (pid 8736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.369152][ T8736] Use struct sctp_sack_info instead [ 176.689376][ T8756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.986010][ T8770] netlink: 'syz.4.753': attribute type 13 has an invalid length. [ 177.029794][ T8770] veth0_macvtap: left promiscuous mode [ 177.044388][ T8770] macvtap0: entered allmulticast mode [ 177.083778][ T8770] macvtap0: refused to change device tx_queue_len [ 177.193405][ T8778] bond7 (unregistering): Released all slaves [ 178.799990][ T8803] bridge0: port 3(syz_tun) entered disabled state [ 178.807115][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.815747][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.029225][ T8809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.037937][ T8809] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.053930][ T8809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.206249][ T8822] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 179.228349][ T8814] __nla_validate_parse: 6 callbacks suppressed [ 179.228368][ T8814] netlink: 76 bytes leftover after parsing attributes in process `syz.1.768'. [ 179.248216][ T8822] netlink: 'syz.2.769': attribute type 3 has an invalid length. [ 179.256010][ T8822] netlink: 'syz.2.769': attribute type 7 has an invalid length. [ 179.307468][ T8822] netlink: 'syz.2.769': attribute type 8 has an invalid length. [ 179.337095][ T8822] netlink: 184 bytes leftover after parsing attributes in process `syz.2.769'. [ 179.367488][ T8814] TC_ACT_REPEAT abuse ? [ 179.372529][ T8822] NCSI netlink: No device for ifindex 131092 [ 180.486188][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.488268][ T8866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.780'. [ 180.495199][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.549526][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.780'. [ 180.573275][ T8860] bond0: (slave team0): Releasing backup interface [ 180.730263][ T8860] bridge_slave_0: left allmulticast mode [ 180.739946][ T8860] bridge_slave_0: left promiscuous mode [ 180.745971][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.773938][ T8860] bridge_slave_1: left allmulticast mode [ 180.783983][ T8860] bridge_slave_1: left promiscuous mode [ 180.794424][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.826274][ T8860] bond0: (slave bond_slave_0): Releasing backup interface [ 180.853285][ T8860] bond0: (slave bond_slave_1): Releasing backup interface [ 180.888419][ T8860] team0: Port device team_slave_0 removed [ 180.941150][ T8860] team0: Port device team_slave_1 removed [ 180.971120][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.007211][ T8860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.049528][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.061398][ T8860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.110098][ T8860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.351421][ T8897] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 181.383523][ T8897] netlink: 'syz.0.788': attribute type 2 has an invalid length. [ 181.410780][ T8897] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 181.439155][ T8897] netlink: 'syz.0.788': attribute type 2 has an invalid length. [ 181.495726][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 181.557012][ T8903] netlink: 56 bytes leftover after parsing attributes in process `syz.2.791'. [ 182.028805][ T8929] sctp: [Deprecated]: syz.2.798 (pid 8929) Use of int in maxseg socket option. [ 182.028805][ T8929] Use struct sctp_assoc_value instead [ 182.078242][ T8929] siw: device registration error -23 [ 182.232659][ T8935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.800'. [ 182.489161][ T8942] sch_fq: defrate 0 ignored. [ 182.833878][ T8951] sctp: [Deprecated]: syz.2.807 (pid 8951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.833878][ T8951] Use struct sctp_sack_info instead [ 183.042774][ T8962] tipc: New replicast peer: 255.255.255.255 [ 183.058112][ T8962] tipc: Enabled bearer , priority 10 [ 183.278709][ T8965] netlink: 388 bytes leftover after parsing attributes in process `syz.1.812'. [ 183.336793][ T8965] netlink: 388 bytes leftover after parsing attributes in process `syz.1.812'. [ 183.374023][ T8965] netlink: 388 bytes leftover after parsing attributes in process `syz.1.812'. [ 183.526963][ T8990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.183933][ T9] tipc: Node number set to 4226084460 [ 184.370165][ T9029] xt_time: unknown flags 0xf4 [ 184.376181][ T9026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.849470][ T9049] __nla_validate_parse: 35 callbacks suppressed [ 184.849490][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'. [ 185.023169][ T9049] syzkaller0: entered promiscuous mode [ 185.031697][ T9049] syzkaller0: entered allmulticast mode [ 186.658283][ T9092] netlink: 'syz.2.848': attribute type 30 has an invalid length. [ 186.784623][ T9092] bond4: option arp_missed_max: invalid value (0) [ 186.794306][ T9092] bond4: option arp_missed_max: allowed values 1 - 255 [ 186.807744][ T9092] bond4 (unregistering): Released all slaves [ 186.831918][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'. [ 186.863299][ T9106] tipc: Enabled bearer , priority 0 [ 186.883500][ T9107] syzkaller0: entered promiscuous mode [ 186.890541][ T9107] syzkaller0: entered allmulticast mode [ 186.899491][ T9109] syzkaller0: entered promiscuous mode [ 186.908411][ T9109] syzkaller0: entered allmulticast mode [ 186.996303][ T9114] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 187.051773][ T9114] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 187.070787][ T9120] netlink: 'syz.2.854': attribute type 30 has an invalid length. [ 187.326438][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'. [ 187.335969][ T9128] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 187.352424][ T9128] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 187.360864][ T9128] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 187.369599][ T9128] netlink: 68 bytes leftover after parsing attributes in process `syz.4.855'. [ 187.382641][ T9093] tipc: Resetting bearer [ 187.419823][ T9093] tipc: Disabling bearer [ 187.431426][ T9129] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.479875][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 187.517519][ T9133] netlink: 260 bytes leftover after parsing attributes in process `syz.2.858'. [ 187.756223][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 187.764907][ T9147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.231070][ T9164] netlink: 340 bytes leftover after parsing attributes in process `syz.4.864'. [ 188.245729][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 188.255551][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 188.442124][ T9174] 8021q: VLANs not supported on ip_vti0 [ 188.943904][ T9195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.951565][ T9195] IPv6: NLM_F_CREATE should be set when creating new route [ 188.994660][ T9199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.195060][ T9203] IPv6: sit1: Disabled Multicast RS [ 189.270633][ T9208] syzkaller0: entered promiscuous mode [ 189.282782][ T9212] netlink: 'syz.1.882': attribute type 32 has an invalid length. [ 189.293330][ T9208] syzkaller0: entered allmulticast mode [ 189.411561][ T9212] bond7: Setting coupled_control to off (0) [ 189.422116][ T9214] tipc: Enabled bearer , priority 0 [ 189.473578][ T9207] tipc: Resetting bearer [ 189.553860][ T9207] tipc: Disabling bearer [ 189.566631][ T9230] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 189.833934][ T9244] netlink: 'syz.3.891': attribute type 17 has an invalid length. [ 190.228994][ T9252] syzkaller0: entered promiscuous mode [ 190.253652][ T9264] xt_hashlimit: size too large, truncated to 1048576 [ 190.262666][ T9252] syzkaller0: entered allmulticast mode [ 190.384760][ T9260] erspan0: entered allmulticast mode [ 190.408711][ T9270] __nla_validate_parse: 7 callbacks suppressed [ 190.408732][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 190.806679][ T9282] can: request_module (can-proto-0) failed. [ 191.987555][ T9275] tipc: Enabled bearer , priority 0 [ 192.112824][ T9304] netlink: 212 bytes leftover after parsing attributes in process `syz.0.902'. [ 192.355772][ T9281] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.363539][ T9281] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.521066][ T9281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.566135][ T9281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.944003][ T9275] tipc: Disabling bearer [ 192.965049][ T6323] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.991465][ T6323] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.031612][ T6323] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.087693][ T9318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.128118][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 193.171740][ T6323] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.206234][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 193.664332][ T9352] sctp: [Deprecated]: syz.3.914 (pid 9352) Use of int in maxseg socket option. [ 193.664332][ T9352] Use struct sctp_assoc_value instead [ 193.772561][ T9358] netlink: 'syz.2.917': attribute type 11 has an invalid length. [ 193.909346][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 193.934871][ T9365] bridge: RTM_NEWNEIGH with invalid ether address [ 194.042269][ T9369] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 194.045397][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 194.069554][ T9370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.121699][ T9372] smc: net device gre0 applied user defined pnetid SYZ1 [ 194.284255][ T9384] netlink: 'syz.2.927': attribute type 30 has an invalid length. [ 194.351811][ T9384] bond4: option arp_missed_max: invalid value (0) [ 194.390161][ T9384] bond4: option arp_missed_max: allowed values 1 - 255 [ 194.401322][ T9384] bond4 (unregistering): Released all slaves [ 194.453402][ T9388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.928'. [ 194.467262][ T9388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.928'. [ 194.507863][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'. [ 194.679575][ T9406] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 194.696113][ T9402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.712037][ T9401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.872862][ T9406] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.904754][ T9406] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 194.939796][ T9406] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 195.031313][ T9411] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.066572][ T9411] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 195.458964][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.942'. [ 195.781353][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.950'. [ 196.088595][ T9487] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20003 [ 196.164028][ T9496] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 196.218366][ T9496] bridge_slave_1: left allmulticast mode [ 196.242523][ T9496] bridge_slave_1: left promiscuous mode [ 196.258322][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.290647][ T9496] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 196.375240][ T9512] netlink: 180 bytes leftover after parsing attributes in process `syz.1.958'. [ 196.433055][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.958'. [ 196.505621][ T9515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.961'. [ 196.584796][ T9521] netlink: 'syz.4.963': attribute type 21 has an invalid length. [ 196.596216][ T9521] netlink: 128 bytes leftover after parsing attributes in process `syz.4.963'. [ 196.639857][ T9525] netlink: 64 bytes leftover after parsing attributes in process `syz.4.963'. [ 196.659772][ T9521] netlink: 'syz.4.963': attribute type 5 has an invalid length. [ 196.674711][ T9521] netlink: 3 bytes leftover after parsing attributes in process `syz.4.963'. [ 196.911811][ T9531] bond0: entered promiscuous mode [ 196.917516][ T9531] bond_slave_0: entered promiscuous mode [ 196.923439][ T9531] bond_slave_1: entered promiscuous mode [ 196.948359][ T9531] batadv0: entered promiscuous mode [ 196.964589][ T9531] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 196.988435][ T9531] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 197.004985][ T9531] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 197.408452][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.976'. [ 197.599949][ T9572] netlink: 72 bytes leftover after parsing attributes in process `syz.3.978'. [ 197.990687][ T9596] tipc: Enabled bearer , priority 0 [ 198.086687][ T9601] syzkaller0: entered promiscuous mode [ 198.093878][ T9601] syzkaller0: entered allmulticast mode [ 198.143862][ T9594] tipc: Resetting bearer [ 198.192667][ T9594] tipc: Disabling bearer [ 198.397449][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 198.512574][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805716f000: rx timeout, send abort [ 199.014605][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805716fc00: rx timeout, send abort [ 199.023032][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805716f000: abort rx timeout. Force session deactivation [ 199.523651][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805716fc00: abort rx timeout. Force session deactivation [ 199.761751][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.252203][ T9635] syzkaller0: entered promiscuous mode [ 200.257874][ T9635] syzkaller0: entered allmulticast mode [ 200.587794][ T9682] syz1: rxe_newlink: already configured on ipvlan0 [ 200.656443][ T9675] bond4: option resend_igmp: invalid value (32767) [ 200.691558][ T9688] __nla_validate_parse: 9 callbacks suppressed [ 200.691581][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1012'. [ 200.694111][ T9675] bond4: option resend_igmp: allowed values 0 - 255 [ 200.750588][ T9675] bond4 (unregistering): Released all slaves [ 200.945424][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'. [ 200.989163][ T9706] syzkaller0: entered promiscuous mode [ 200.994809][ T9706] syzkaller0: entered allmulticast mode [ 201.135681][ T9709] team0 (unregistering): Port device team_slave_0 removed [ 201.144499][ T9709] team0 (unregistering): Port device team_slave_1 removed [ 201.155018][ T9709] team0 (unregistering): Port device dummy0 removed [ 201.465159][ T9686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.860867][ T9731] Cannot find del_set index 4 as target [ 201.887263][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 201.910636][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1021'. [ 201.925142][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 201.983347][ T9729] vxcan2: entered allmulticast mode [ 202.066088][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 202.203657][ T9749] netlink: 'syz.4.1024': attribute type 11 has an invalid length. [ 202.213846][ T9749] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1024'. [ 202.571169][ T9758] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 202.634520][ T9759] syzkaller0: entered promiscuous mode [ 202.640863][ T9759] syzkaller0: entered allmulticast mode [ 202.652797][ T9765] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 202.873127][ T9758] veth1_macvtap: left promiscuous mode [ 203.037579][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 203.178630][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1034'. [ 203.232259][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1034'. [ 203.330234][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 204.794339][ T9836] ip6gre2: entered promiscuous mode [ 204.817439][ T9836] ip6gre2: entered allmulticast mode [ 204.922947][ T9842] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 205.028576][ T9842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 205.142527][ T9851] gtp0: entered promiscuous mode [ 205.162344][ T9851] gtp0: entered allmulticast mode [ 205.193318][ T9852] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 205.699052][ T9886] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 205.793334][ T9891] __nla_validate_parse: 7 callbacks suppressed [ 205.793357][ T9891] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1063'. [ 205.825242][ T9897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 205.839337][ T9884] netlink: 'syz.2.1061': attribute type 29 has an invalid length. [ 205.896461][ T9884] netlink: 'syz.2.1061': attribute type 29 has an invalid length. [ 205.927732][ T9892] xt_bpf: check failed: parse error [ 206.049733][ T9889] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1061'. [ 206.741655][ T9919] netlink: 'syz.1.1072': attribute type 13 has an invalid length. [ 206.773132][ T9919] netlink: 'syz.1.1072': attribute type 27 has an invalid length. [ 206.848024][ T9925] syzkaller0: entered promiscuous mode [ 206.854804][ T9925] syzkaller0: entered allmulticast mode [ 206.867482][ T9923] tipc: Enabled bearer , priority 0 [ 206.971575][ T9931] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 207.014151][ T9928] tipc: Resetting bearer [ 207.095196][ T9928] tipc: Disabling bearer [ 207.128072][ T9942] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 207.156328][ T9942] netlink: 'syz.4.1078': attribute type 1 has an invalid length. [ 207.362799][ T9948] veth0_to_bridge: entered promiscuous mode [ 207.384305][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 207.445001][ T9957] xt_hashlimit: size too large, truncated to 1048576 [ 207.457944][ T9955] SET target dimension over the limit! [ 207.475343][ T9955] x_tables: unsorted entry at hook 1 [ 207.477058][ T9957] warn_alloc: 1 callbacks suppressed [ 207.477076][ T9957] syz.0.1083: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.510963][ T9946] veth0_to_bridge: left promiscuous mode [ 207.520278][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.0.1083 Not tainted syzkaller #0 PREEMPT(full) [ 207.520308][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.520320][ T9957] Call Trace: [ 207.520328][ T9957] [ 207.520337][ T9957] dump_stack_lvl+0x189/0x250 [ 207.520371][ T9957] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 207.520416][ T9957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.520444][ T9957] ? __pfx__printk+0x10/0x10 [ 207.520465][ T9957] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.520493][ T9957] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.520530][ T9957] warn_alloc+0x214/0x310 [ 207.520570][ T9957] ? __pfx_warn_alloc+0x10/0x10 [ 207.520612][ T9957] ? __get_vm_area_node+0x28f/0x300 [ 207.520642][ T9957] ? htable_create+0x101/0x7a0 [ 207.520675][ T9957] __vmalloc_node_range_noprof+0x690/0x12d0 [ 207.520733][ T9957] ? alloc_pages_mpol+0x3cd/0x4a0 [ 207.520756][ T9957] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.520789][ T9957] ? rcu_is_watching+0x15/0xb0 [ 207.520820][ T9957] ? htable_create+0x101/0x7a0 [ 207.520847][ T9957] __kvmalloc_node_noprof+0x674/0x910 [ 207.520880][ T9957] ? htable_create+0x101/0x7a0 [ 207.520904][ T9957] ? hashlimit_pernet+0x23/0x240 [ 207.520930][ T9957] ? hashlimit_pernet+0x23/0x240 [ 207.520954][ T9957] ? hashlimit_pernet+0x23/0x240 [ 207.520988][ T9957] htable_create+0x101/0x7a0 [ 207.521028][ T9957] hashlimit_mt_check_common+0x719/0xa10 [ 207.521067][ T9957] xt_check_match+0x3d1/0xab0 [ 207.521099][ T9957] ? __pfx_xt_check_match+0x10/0x10 [ 207.521128][ T9957] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 207.521187][ T9957] ? xt_find_match+0x1f7/0x250 [ 207.521220][ T9957] translate_table+0x1553/0x2040 [ 207.521279][ T9957] ? __pfx_translate_table+0x10/0x10 [ 207.521313][ T9957] ? __might_fault+0xb0/0x130 [ 207.521364][ T9957] ? _copy_from_user+0x94/0xb0 [ 207.521404][ T9957] do_ip6t_set_ctl+0x970/0xce0 [ 207.521440][ T9957] ? rcu_is_watching+0x15/0xb0 [ 207.521464][ T9957] ? trace_contention_end+0x39/0x120 [ 207.521490][ T9957] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 207.521546][ T9957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.521583][ T9957] ? file_init_path+0x3b/0x590 [ 207.521611][ T9957] ? __lock_acquire+0xab9/0xd20 [ 207.521636][ T9957] nf_setsockopt+0x26f/0x290 [ 207.521669][ T9957] rawv6_setsockopt+0x23b/0x5b0 [ 207.521694][ T9957] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 207.521715][ T9957] ? aa_sock_opt_perm+0xff/0x1b0 [ 207.521748][ T9957] ? sock_common_setsockopt+0x36/0xc0 [ 207.521778][ T9957] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 207.521809][ T9957] do_sock_setsockopt+0x17c/0x1b0 [ 207.521835][ T9957] __x64_sys_setsockopt+0x13f/0x1b0 [ 207.521863][ T9957] do_syscall_64+0xfa/0xfa0 [ 207.521891][ T9957] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.521919][ T9957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.521939][ T9957] ? clear_bhb_loop+0x60/0xb0 [ 207.521962][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.521982][ T9957] RIP: 0033:0x7fbca198f6c9 [ 207.522000][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.522016][ T9957] RSP: 002b:00007fbca2896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.522037][ T9957] RAX: ffffffffffffffda RBX: 00007fbca1be6090 RCX: 00007fbca198f6c9 [ 207.522052][ T9957] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 207.522063][ T9957] RBP: 00007fbca1a11f91 R08: 0000000000000528 R09: 0000000000000000 [ 207.522076][ T9957] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 207.522088][ T9957] R13: 00007fbca1be6128 R14: 00007fbca1be6090 R15: 00007ffce36db1d8 [ 207.522123][ T9957] [ 207.522215][ T9957] Mem-Info: [ 207.560275][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 207.649869][ T9957] active_anon:5848 inactive_anon:0 isolated_anon:0 [ 207.649869][ T9957] active_file:2629 inactive_file:39940 isolated_file:0 [ 207.649869][ T9957] unevictable:768 dirty:68 writeback:0 [ 207.649869][ T9957] slab_reclaimable:10745 slab_unreclaimable:111480 [ 207.649869][ T9957] mapped:29175 shmem:1370 pagetables:1129 [ 207.649869][ T9957] sec_pagetables:0 bounce:0 [ 207.649869][ T9957] kernel_misc_reclaimable:0 [ 207.649869][ T9957] free:1316705 free_pcp:14404 free_cma:0 [ 207.655471][ T9965] syzkaller0: entered promiscuous mode [ 207.678183][ T9957] Node 0 active_anon:23392kB inactive_anon:0kB active_file:10516kB inactive_file:159560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116700kB dirty:268kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14084kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.690107][ T9965] syzkaller0: entered allmulticast mode [ 207.716595][ T9957] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.043580][ T9957] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.074157][ T9957] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 208.082421][ T9957] Node 0 DMA32 free:1357012kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23392kB inactive_anon:0kB active_file:10516kB inactive_file:159560kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:39568kB local_pcp:19500kB free_cma:0kB [ 208.154315][ T9957] lowmem_reserve[]: 0 0 0 0 0 [ 208.159392][ T9957] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.192154][ T9957] lowmem_reserve[]: 0 0 0 0 0 [ 208.198302][ T9957] Node 1 Normal free:3894448kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16960kB local_pcp:8864kB free_cma:0kB [ 208.249338][ T9957] lowmem_reserve[]: 0 0 0 0 0 [ 208.254634][ T9957] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.268850][ T9957] Node 0 DMA32: 1428*4kB (UM) 549*8kB (UME) 162*16kB (UME) 430*32kB (UM) 72*64kB (UM) 23*128kB (M) 36*256kB (UME) 24*512kB (UME) 13*1024kB (UM) 1*2048kB (U) 314*4096kB (UM) = 1357016kB [ 208.297665][ T9957] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 208.337384][ T9957] Node 1 Normal: 198*4kB (UM) 57*8kB (UME) 37*16kB (UME) 110*32kB (UME) 33*64kB (UME) 7*128kB (UME) 6*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3894448kB [ 208.368241][ T9957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.421757][ T9957] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.447695][ T9957] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.476347][ T9957] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.507659][ T9957] 43935 total pagecache pages [ 208.512558][ T9957] 0 pages in swap cache [ 208.516747][ T9957] Free swap = 124996kB [ 208.589707][ T9957] Total swap = 124996kB [ 208.614376][ T9957] 2097051 pages RAM [ 208.628087][ T9992] veth0: entered promiscuous mode [ 208.647411][ T9957] 0 pages HighMem/MovableOnly [ 208.653659][ T9957] 424119 pages reserved [ 208.671876][ T9957] 0 pages cma reserved [ 208.768957][ T9987] veth0: left promiscuous mode [ 208.857126][T10006] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1101'. [ 208.878706][T10007] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1101'. [ 208.976935][T10016] vlan0: entered promiscuous mode [ 208.990486][T10016] vlan0: entered allmulticast mode [ 208.996134][T10016] veth0_vlan: entered allmulticast mode [ 209.000340][T10012] xt_TCPMSS: Only works on TCP SYN packets [ 209.413979][T10041] validate_nla: 14 callbacks suppressed [ 209.414001][T10041] netlink: 'syz.0.1115': attribute type 3 has an invalid length. [ 209.443238][T10038] netlink: 'syz.2.1112': attribute type 10 has an invalid length. [ 209.461945][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 209.738537][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 210.315598][T10064] tipc: Enabled bearer , priority 13 [ 210.403968][T10072] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 210.469672][T10078] C: Caught tx_queue_len zero misconfig [ 210.547823][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'. [ 210.622789][T10086] bond9: ARP target 1.0.0.0 is already present [ 210.629483][T10086] bond9: option arp_ip_target: invalid value (1) [ 210.801230][T10086] bond9 (unregistering): Released all slaves [ 211.228962][T10104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.395685][T10106] netlink: 'syz.4.1134': attribute type 11 has an invalid length. [ 211.420846][T10106] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 211.429997][ T7362] tipc: Node number set to 2100423282 [ 212.081664][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 212.081674][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 212.090187][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 213.125176][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1149'. [ 213.348418][ T6323] smc: removing ib device syz1 [ 213.489751][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805735b000: rx timeout, send abort [ 213.498413][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057359800: rx timeout, send abort [ 213.507106][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805735b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 213.522792][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057359800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 213.634309][T10175] netlink: 'syz.0.1152': attribute type 6 has an invalid length. [ 213.688371][T10176] netlink: 'syz.0.1152': attribute type 6 has an invalid length. [ 213.886002][T10184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1154'. [ 213.920832][T10185] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 4, id = 0 [ 214.126624][T10189] syzkaller0: entered promiscuous mode [ 214.137199][T10189] syzkaller0: entered allmulticast mode [ 214.463535][T10208] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1160'. [ 214.644379][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 214.655408][T10219] netlink: 'syz.0.1164': attribute type 20 has an invalid length. [ 214.671279][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 214.725917][T10219] netlink: 'syz.0.1164': attribute type 20 has an invalid length. [ 214.806224][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 214.998753][T10231] tipc: Enabled bearer , priority 0 [ 215.006514][T10231] syzkaller0: entered promiscuous mode [ 215.020285][T10231] syzkaller0: entered allmulticast mode [ 215.068309][T10231] tipc: Resetting bearer [ 215.107721][T10228] tipc: Resetting bearer [ 215.465329][T10228] tipc: Disabling bearer [ 215.960280][T10258] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 215.976926][T10258] bond9 (unregistering): Released all slaves [ 216.188363][T10273] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 216.222292][T10272] team_slave_0: entered promiscuous mode [ 216.228402][T10272] team_slave_1: entered promiscuous mode [ 216.249908][T10272] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 216.257846][T10272] team0: Device macvtap1 is already an upper device of the team interface [ 216.273811][T10272] team_slave_0: left promiscuous mode [ 216.279415][T10272] team_slave_1: left promiscuous mode [ 216.351119][T10271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.445439][ T30] audit: type=1107 audit(1762678834.543:2): pid=10289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 216.696372][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 216.842937][T10309] syzkaller0: entered promiscuous mode [ 216.849424][T10309] syzkaller0: entered allmulticast mode [ 216.858311][T10309] 0: reclassify loop, rule prio 0, protocol 800 [ 216.920247][T10316] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.244140][T10343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1198'. [ 217.245078][T10344] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1198'. [ 217.495125][T10356] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 217.990095][T10334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.164897][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 218.326212][T10371] bond9: Invalid ad_actor_system MAC address. [ 218.350621][T10371] bond9: option ad_actor_system: invalid value (1) [ 218.420324][T10371] bond9 (unregistering): Released all slaves [ 218.598455][T10403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1206'. [ 219.262797][T10434] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1216'. [ 219.306685][T10434] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1216'. [ 219.650155][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1220'. [ 219.729512][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'. [ 219.755834][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 220.254734][T10488] netlink: 'syz.2.1226': attribute type 11 has an invalid length. [ 220.269880][T10488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1226'. [ 220.757898][T10503] dvmrp0: entered allmulticast mode [ 220.758266][T10507] xt_time: unknown flags 0xf4 [ 220.823162][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 220.870795][T10516] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 220.875104][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 221.108830][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.688602][T10574] syzkaller0: entered promiscuous mode [ 221.694643][T10574] syzkaller0: entered allmulticast mode [ 221.956873][T10587] Cannot find add_set index 0 as target [ 222.377055][T10605] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 222.685172][T10618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.742823][T10617] bond5: (slave bridge1): making interface the new active one [ 222.773785][T10617] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 222.816100][T10625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.841837][T10625] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.869062][T10625] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 223.273530][T10665] syz.0.1262 uses old SIOCAX25GETINFO [ 223.464298][T10673] x_tables: unsorted entry at hook 3 [ 223.846951][T10695] __nla_validate_parse: 3 callbacks suppressed [ 223.846971][T10695] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1268'. [ 223.905041][T10695] vlan3: entered promiscuous mode [ 224.740334][T10743] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1280'. [ 224.880888][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 224.917634][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 224.951811][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 224.979055][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 224.989988][T10758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.216438][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1288'. [ 225.243780][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 225.294759][T10781] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1289'. [ 225.310292][T10775] pim6reg: entered allmulticast mode [ 225.352911][T10783] bond0: Device is already in use. [ 225.504120][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 225.646638][T10800] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 226.219893][T10834] pim6reg: entered allmulticast mode [ 226.418104][T10851] pimreg: entered allmulticast mode [ 226.663472][T10858] tipc: Enabling of bearer rejected, media not registered [ 226.870881][ T7362] IPVS: starting estimator thread 0... [ 226.958522][T10879] IPVS: using max 25 ests per chain, 60000 per kthread [ 227.679262][T10923] netlink: 'syz.4.1331': attribute type 17 has an invalid length. [ 227.710646][T10919] syzkaller0: entered allmulticast mode [ 227.955490][T10937] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 228.028308][T10939] netlink: 'syz.3.1335': attribute type 12 has an invalid length. [ 228.177035][T10954] raw_sendmsg: syz.2.1338 forgot to set AF_INET. Fix it! [ 228.366363][T10963] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 228.516134][T10977] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 228.528349][ T7357] IPVS: starting estimator thread 0... [ 228.637801][T10978] IPVS: using max 28 ests per chain, 67200 per kthread [ 228.831892][T10987] dvmrp6: entered allmulticast mode [ 229.302794][T11005] syz.3.1347 (11005) used greatest stack depth: 17832 bytes left [ 229.539075][T11034] __nla_validate_parse: 10 callbacks suppressed [ 229.539096][T11034] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1356'. [ 229.782292][T11047] openvswitch: netlink: Missing valid actions attribute. [ 229.807784][T11047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.007085][ T6323] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.021892][ T6323] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.068065][ T6323] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.110375][ T6323] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.157564][ T6343] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.166555][ T6343] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.255404][T11077] : entered promiscuous mode [ 231.261063][T11083] openvswitch: netlink: Message has 536 unknown bytes. [ 231.279094][ T6343] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.288220][T11083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.310417][ T6343] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.342561][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 231.378193][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1362'. [ 231.446472][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 231.468628][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1362'. [ 231.479405][T11081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1362'. [ 231.501967][T11084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.526772][T11084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.058901][ T6323] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.073245][T11124] syzkaller0: entered promiscuous mode [ 232.080828][T11124] syzkaller0: entered allmulticast mode [ 232.096317][ T6323] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.191205][ T6323] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.221882][ T6323] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.289624][T11136] tipc: Enabled bearer , priority 0 [ 232.301441][T11124] tipc: Enabling of bearer rejected, already enabled [ 232.352565][T11140] netlink: 'syz.0.1374': attribute type 21 has an invalid length. [ 232.380966][T11140] netlink: 'syz.0.1374': attribute type 22 has an invalid length. [ 232.391307][T11124] tipc: Resetting bearer [ 232.417405][T11140] netlink: 'syz.0.1374': attribute type 23 has an invalid length. [ 232.442245][T11140] netlink: 'syz.0.1374': attribute type 25 has an invalid length. [ 232.458923][T11140] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1374'. [ 232.519226][T11124] tipc: Disabling bearer [ 232.741649][T11162] wg2: entered promiscuous mode [ 232.746602][T11162] wg2: entered allmulticast mode [ 232.949217][T11175] netlink: 'syz.1.1384': attribute type 16 has an invalid length. [ 232.957122][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1384'. [ 233.229275][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1388'. [ 233.295678][T11204] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 233.343139][T11196] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1388'. [ 233.453603][T11155] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 234.919676][T11274] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20002 [ 235.182444][T11290] netlink: 'syz.3.1407': attribute type 1 has an invalid length. [ 235.300571][T11297] __nla_validate_parse: 1 callbacks suppressed [ 235.300593][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1411'. [ 235.317633][T11290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.357920][T11300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1412'. [ 235.369154][T11294] vti0: entered allmulticast mode [ 235.408720][T11304] Bluetooth: MGMT ver 1.23 [ 235.475660][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1413'. [ 235.583962][T11297] syzkaller0: entered promiscuous mode [ 235.587938][T11314] netlink: 528 bytes leftover after parsing attributes in process `syz.1.1415'. [ 235.602486][T11297] syzkaller0: entered allmulticast mode [ 235.612087][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 235.665103][T11321] xt_TCPMSS: Only works on TCP SYN packets [ 235.814549][T11330] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1418'. [ 237.206779][T11350] veth9: entered allmulticast mode [ 237.410366][T11376] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1426'. [ 237.795167][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 237.811794][T11393] netlink: 'syz.1.1431': attribute type 3 has an invalid length. [ 238.551185][T11431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.615304][T11438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.771034][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 240.290719][T11451] : entered promiscuous mode [ 240.307459][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1445'. [ 240.378768][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 240.413792][T11467] syzkaller1: entered promiscuous mode [ 240.439382][T11467] syzkaller1: entered allmulticast mode [ 240.611228][T11496] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1452'. [ 240.637139][T11475] syzkaller0: entered promiscuous mode [ 240.644751][T11475] syzkaller0: entered allmulticast mode [ 241.136414][T11529] netlink: 'syz.4.1450': attribute type 1 has an invalid length. [ 242.065778][T11487] tipc: Invalid UDP bearer configuration [ 242.065834][T11487] tipc: Enabling of bearer rejected, failed to enable media [ 242.104365][T11507] syzkaller0: entered promiscuous mode [ 242.110216][T11507] syzkaller0: entered allmulticast mode [ 242.249904][T11534] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 242.485249][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1461'. [ 242.627575][T11554] bond4 (unregistering): Released all slaves [ 242.673278][T11568] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1465'. [ 242.826894][T11557] syzkaller0: entered promiscuous mode [ 242.867012][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1468'. [ 242.876209][T11557] syzkaller0: entered allmulticast mode [ 242.886255][T11557] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 242.943227][T11557] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1463'. [ 242.959410][T11557] ksmbd: Unknown IPC event: 3, ignore. [ 243.095208][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 243.349759][T11610] openvswitch: netlink: EtherType 0 is less than min 600 [ 243.423303][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 243.438891][T11615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1480'. [ 243.478942][T11623] tipc: Cannot configure node identity twice [ 243.844684][T11642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.932334][T11646] dvmrp16: entered allmulticast mode [ 244.190959][ T30] audit: type=1800 audit(1762678862.293:3): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1493" name="memory.events" dev="tmpfs" ino=1397 res=0 errno=0 [ 244.635173][T11693] syzkaller0: entered promiscuous mode [ 244.644857][T11693] syzkaller0: entered allmulticast mode [ 244.740039][T11697] netlink: 'syz.3.1502': attribute type 64 has an invalid length. [ 245.285174][T11717] geneve2: entered promiscuous mode [ 245.299434][T11717] geneve2: entered allmulticast mode [ 245.306738][ T6327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 245.361477][ T6327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 245.386909][ T6327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 245.423408][ T6327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 245.447255][T11721] __nla_validate_parse: 72 callbacks suppressed [ 245.455271][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 245.475676][ T6321] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 245.504465][T11724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.517208][T11724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 245.539464][T11725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.609927][T11724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.623266][T11724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 245.733882][T11736] tipc: Enabled bearer , priority 0 [ 245.749575][T11736] syzkaller0: entered promiscuous mode [ 245.764089][T11736] syzkaller0: entered allmulticast mode [ 245.791656][T11724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.802902][T11724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 245.852537][T11736] tipc: Resetting bearer [ 245.865296][T11735] tipc: Resetting bearer [ 245.894998][T11735] tipc: Disabling bearer [ 245.931284][T11724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.943867][T11724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 245.971063][T11748] tc_dump_action: action bad kind [ 246.070849][T11753] netlink: 'syz.0.1518': attribute type 75 has an invalid length. [ 246.138766][ T6321] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.147014][ T6321] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 246.174111][T11753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1518'. [ 246.201101][T11759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1515'. [ 246.236478][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 246.370633][ T6339] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.385816][ T6339] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 246.427620][T11767] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1521'. [ 246.456802][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'. [ 246.539291][ T6339] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.567512][ T6339] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 246.635716][ T6339] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.655143][ T6339] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 246.850314][T11782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1526'. [ 246.883071][T11785] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1527'. [ 246.911723][T11785] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1527'. [ 247.108462][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1532'. [ 247.138374][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.309386][T11807] syzkaller0: entered promiscuous mode [ 247.315295][T11807] syzkaller0: entered allmulticast mode [ 247.395702][T11817] tipc: Enabled bearer , priority 0 [ 247.405504][T11816] syzkaller0: entered promiscuous mode [ 247.411630][T11816] syzkaller0: entered allmulticast mode [ 247.454262][T11817] tipc: Resetting bearer [ 247.464127][T11815] tipc: Resetting bearer [ 247.500231][T11815] tipc: Disabling bearer [ 247.549073][T11822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.636158][T11828] netlink: del zone limit has 4 unknown bytes [ 248.243360][ T6321] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 248.293631][T11876] : renamed from hsr0 [ 249.107914][T11907] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 249.380330][T11923] netlink: 'syz.4.1567': attribute type 33 has an invalid length. [ 249.801389][T11947] nbd: must specify a device to reconfigure [ 250.272192][T11980] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 250.622359][T11999] __nla_validate_parse: 13 callbacks suppressed [ 250.622385][T11999] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1594'. [ 251.054199][T12028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1600'. [ 251.068556][T12027] netlink: zone id is out of range [ 251.081663][T12027] netlink: zone id is out of range [ 251.093930][T12027] netlink: zone id is out of range [ 251.106363][T12027] netlink: zone id is out of range [ 251.125481][T12027] netlink: zone id is out of range [ 251.146589][T12031] netlink: 'syz.4.1602': attribute type 10 has an invalid length. [ 251.191121][T12027] netlink: zone id is out of range [ 251.215510][T12031] bridge0: port 4(team0) entered blocking state [ 251.223663][T12027] netlink: zone id is out of range [ 251.225010][T12031] bridge0: port 4(team0) entered disabled state [ 251.236028][T12031] team0: entered allmulticast mode [ 251.245638][T12027] netlink: zone id is out of range [ 251.254286][T12031] team_slave_1: entered allmulticast mode [ 251.261378][T12027] netlink: zone id is out of range [ 251.272473][T12031] team0: entered promiscuous mode [ 251.278673][T12031] team_slave_1: entered promiscuous mode [ 251.391961][T12044] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1605'. [ 251.632247][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 251.843356][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'. [ 251.948336][T12082] netlink: 'syz.1.1617': attribute type 178 has an invalid length. [ 252.026809][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1617'. [ 252.051041][T12087] netlink: 'syz.1.1617': attribute type 7 has an invalid length. [ 252.077135][T12089] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1619'. [ 252.083105][T12087] netlink: 'syz.1.1617': attribute type 8 has an invalid length. [ 252.098978][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1619'. [ 252.099589][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 252.112139][T12085] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 252.190280][T12097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1620'. [ 253.049773][T12133] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 253.108794][T12133] veth1_macvtap: left promiscuous mode [ 253.725257][T12194] netlink: 'syz.3.1642': attribute type 8 has an invalid length. [ 253.798130][T12184] tap0: tun_chr_ioctl cmd 1074025677 [ 253.817136][T12184] tap0: linktype set to 65534 [ 254.433248][T12228] sctp: [Deprecated]: syz.2.1657 (pid 12228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.433248][T12228] Use struct sctp_sack_info instead [ 254.762902][T12250] macsec0: entered promiscuous mode [ 254.768412][T12250] macsec0: entered allmulticast mode [ 254.798371][T12251] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 254.844089][T12254] syzkaller1: entered promiscuous mode [ 254.851377][T12254] syzkaller1: entered allmulticast mode [ 254.962655][T12260] netlink: 'syz.3.1669': attribute type 21 has an invalid length. [ 255.281576][T12277] net_ratelimit: 21 callbacks suppressed [ 255.281599][T12277] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.291580][T12269] syzkaller0: entered promiscuous mode [ 255.303077][T12269] syzkaller0: entered allmulticast mode [ 255.323022][T12279] syzkaller0: entered promiscuous mode [ 255.332480][T12279] syzkaller0: entered allmulticast mode [ 255.705261][T12296] __nla_validate_parse: 10 callbacks suppressed [ 255.705279][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 256.585866][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 256.691820][T12286] syzkaller0: entered promiscuous mode [ 256.699121][T12286] syzkaller0: entered allmulticast mode [ 256.711977][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1678'. [ 256.772714][T12301] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1678'. [ 257.887727][T12296] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 257.934635][T12299] tipc: Enabled bearer , priority 0 [ 258.070407][T12302] tipc: Disabling bearer [ 258.135750][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 258.303548][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1681'. [ 258.314391][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1681'. [ 258.376846][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 258.383342][T12328] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1683'. [ 258.441866][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 258.696495][T12347] tunl0: entered promiscuous mode [ 258.704563][T12347] netlink: 'syz.4.1690': attribute type 3 has an invalid length. [ 258.908752][T12356] tipc: Enabled bearer , priority 0 [ 259.018792][T12356] tipc: Disabling bearer [ 259.063749][T12370] syzkaller0: entered promiscuous mode [ 259.071016][T12370] syzkaller0: entered allmulticast mode [ 259.262760][T12379] netlink: 'syz.4.1698': attribute type 12 has an invalid length. [ 259.298473][T12379] netlink: 'syz.4.1698': attribute type 11 has an invalid length. [ 259.330213][T12379] netlink: 'syz.4.1698': attribute type 1 has an invalid length. [ 259.396339][T12384] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.453404][T12384] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 260.481558][T12393] ip6erspan0: entered promiscuous mode [ 260.487210][T12393] ip6erspan0: entered allmulticast mode [ 260.677142][T12413] openvswitch: netlink: Message has 1 unknown bytes. [ 260.695892][T12413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.729395][T12421] __nla_validate_parse: 9 callbacks suppressed [ 260.729414][T12421] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1714'. [ 260.768781][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'. [ 260.812564][T12421] macsec0: entered promiscuous mode [ 260.827565][T12421] macsec0: entered allmulticast mode [ 260.835895][T12421] bridge0: entered allmulticast mode [ 260.858361][T12421] bridge0: port 2(macsec0) entered blocking state [ 260.887624][T12421] bridge0: port 2(macsec0) entered disabled state [ 260.927218][T12421] bridge0: left allmulticast mode [ 260.972203][T12428] tipc: Enabling of bearer rejected, failed to enable media [ 260.989343][T12425] syzkaller1: entered promiscuous mode [ 260.994932][T12425] syzkaller1: entered allmulticast mode [ 261.101424][T12435] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1717'. [ 261.171197][T12446] netlink: 'syz.0.1721': attribute type 12 has an invalid length. [ 261.202834][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.235297][T12446] bond6: option primary_reselect: invalid value (255) [ 261.250329][T12446] bond6 (unregistering): Released all slaves [ 261.487242][T12464] netlink: 'syz.3.1725': attribute type 2 has an invalid length. [ 261.556274][T12464] 9: entered promiscuous mode [ 261.615987][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 261.709060][T12462] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 262.606648][T12542] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 262.718478][T12545] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 262.796818][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1748'. [ 262.882916][ T24] IPVS: starting estimator thread 0... [ 262.975687][T12560] tipc: Enabled bearer , priority 0 [ 262.984941][T12560] tipc: Enabling of bearer rejected, already enabled [ 262.993563][T12554] IPVS: using max 29 ests per chain, 69600 per kthread [ 263.004550][T12560] syzkaller0: entered promiscuous mode [ 263.010747][T12560] syzkaller0: entered allmulticast mode [ 263.023471][T12560] tipc: Resetting bearer [ 263.037516][T12559] tipc: Resetting bearer [ 263.052638][T12559] tipc: Disabling bearer [ 263.421229][T12587] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1759'. [ 263.765309][T12604] vlan1: entered promiscuous mode [ 263.771019][T12604] bridge0: entered promiscuous mode [ 263.782532][T12606] netlink: 'syz.1.1764': attribute type 9 has an invalid length. [ 263.790660][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 263.801350][T12606] netlink: 'syz.1.1764': attribute type 9 has an invalid length. [ 263.812508][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 263.972219][T12613] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 264.274755][T12630] netlink: 'syz.2.1771': attribute type 9 has an invalid length. [ 264.337825][T12634] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1773'. [ 264.574991][T12653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1778'. [ 264.592049][T12652] xt_bpf: check failed: parse error [ 264.934067][T12664] 8021q: VLANs not supported on ip6tnl0 [ 264.956313][T12670] dvmrp16: left allmulticast mode [ 265.282599][T12688] netlink: 'syz.0.1788': attribute type 10 has an invalid length. [ 265.295068][T12688] bond0: (slave netdevsim0): Releasing backup interface [ 265.629467][T12719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.636813][T12719] IPv6: NLM_F_CREATE should be set when creating new route [ 265.644266][T12719] IPv6: NLM_F_CREATE should be set when creating new route [ 265.651578][T12719] IPv6: NLM_F_CREATE should be set when creating new route [ 265.661956][T12719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.738843][T12713] bond5: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 266.402491][T12762] __nla_validate_parse: 3 callbacks suppressed [ 266.402513][T12762] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1806'. [ 266.421379][T12759] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 266.502832][T12759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.538801][T12767] bond4: (slave geneve3): making interface the new active one [ 266.564917][T12767] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 266.982106][T12779] IPVS: set_ctl: invalid protocol: 2470 158.221.52.24:28963 [ 267.066805][T12778] bond9: option miimon: invalid value (18446744073709551585) [ 267.082226][T12778] bond9: option miimon: allowed values 0 - 2147483647 [ 267.103580][T12778] bond9 (unregistering): Released all slaves [ 267.155026][T12796] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1820'. [ 267.842478][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 267.916487][T12845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.961097][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1833'. [ 268.008749][T12847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1833'. [ 268.099859][T12866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'. [ 268.112229][T12863] erspan0: entered allmulticast mode [ 268.583075][T12899] vlan0: entered promiscuous mode [ 268.589365][T12899] vlan0: entered allmulticast mode [ 268.605622][T12899] hsr_slave_1: entered allmulticast mode [ 268.649318][T12903] syzkaller0: entered promiscuous mode [ 268.656154][T12903] syzkaller0: entered allmulticast mode [ 268.822715][T12913] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1850'. [ 268.971635][T12923] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 269.290762][T12934] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1855'. [ 269.544024][T12943] netlink: 'syz.0.1858': attribute type 11 has an invalid length. [ 269.572860][T12943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1858'. [ 269.585995][T12947] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.609688][T12950] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1858'. [ 269.879490][T12962] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 269.888145][T12962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.270007][T12979] can: request_module (can-proto-0) failed. [ 270.547144][T13003] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.873550][T13016] tipc: Started in network mode [ 270.879029][T13016] tipc: Node identity 8676227da961, cluster identity 4711 [ 270.886543][T13016] tipc: Enabled bearer , priority 0 [ 270.976687][T13016] syzkaller0: entered promiscuous mode [ 270.982629][T13016] syzkaller0: entered allmulticast mode [ 270.989496][T13016] tipc: Resetting bearer [ 271.003219][T13014] tipc: Resetting bearer [ 271.722993][T13036] __nla_validate_parse: 2 callbacks suppressed [ 271.723014][T13036] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1891'. [ 272.019893][ T7353] tipc: Node number set to 790045309 [ 272.412777][T13014] tipc: Disabling bearer [ 272.512692][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1893'. [ 272.606418][T13048] xt_cgroup: xt_cgroup: no path or classid specified [ 272.678050][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1895'. [ 272.748049][T13051] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1895'. [ 272.971542][T13071] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1903'. [ 273.377677][T13097] netlink: 'syz.3.1908': attribute type 13 has an invalid length. [ 273.386439][T13097] netlink: 'syz.3.1908': attribute type 58 has an invalid length. [ 273.396679][T13097] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1908'. [ 273.424051][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 273.452234][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1908'. [ 273.640270][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 273.828890][T13109] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.906993][T13113] vlan1: entered allmulticast mode [ 273.987415][T13113] bond4: entered allmulticast mode [ 274.335957][T13145] openvswitch: netlink: Message has 592 unknown bytes. [ 274.407990][T13145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.553444][T13147] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 274.803625][T13159] bridge0: port 2(batadv0) entered blocking state [ 274.810692][T13159] bridge0: port 2(batadv0) entered disabled state [ 274.826702][T13159] batadv0: entered allmulticast mode [ 274.833416][T13165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 274.876621][T13159] batadv0: entered promiscuous mode [ 274.895654][T13161] bridge0: port 4(batadv1) entered blocking state [ 274.905797][T13161] bridge0: port 4(batadv1) entered disabled state [ 274.918795][T13161] batadv1: entered allmulticast mode [ 274.929497][T13161] batadv1: entered promiscuous mode [ 274.951130][T13157] netlink: 'syz.3.1925': attribute type 4 has an invalid length. [ 275.033315][ T6323] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 275.071390][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b85000: rx timeout, send abort [ 275.298287][ T6327] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 275.308086][ T6327] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 275.389116][ T6343] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 275.399229][ T6343] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 275.571516][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b86400: rx timeout, send abort [ 275.580024][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b85000: abort rx timeout. Force session deactivation [ 276.079891][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057b86400: abort rx timeout. Force session deactivation [ 277.008758][T13281] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 277.058227][T13281] hsr0: mtu greater than device maximum [ 277.229617][T13289] netlink: 'syz.4.1959': attribute type 2 has an invalid length. [ 277.257469][T13289] netlink: 'syz.4.1959': attribute type 1 has an invalid length. [ 277.442437][T13299] netlink: 'syz.0.1962': attribute type 11 has an invalid length. [ 277.451728][T13299] netlink: 'syz.0.1962': attribute type 11 has an invalid length. [ 277.500171][T13299] __nla_validate_parse: 12 callbacks suppressed [ 277.500191][T13299] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1962'. [ 277.840750][T13315] netlink: 'syz.0.1965': attribute type 5 has an invalid length. [ 277.962253][T13322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1968'. [ 277.989057][T13326] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1969'. [ 278.009382][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'. [ 278.152300][T13334] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1972'. [ 278.214879][T13331] tap0: tun_chr_ioctl cmd 1074025677 [ 278.224420][T13331] tap0: linktype set to 65534 [ 278.280567][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1973'. [ 278.361724][T13348] xt_hashlimit: size too large, truncated to 1048576 [ 278.380034][T13346] tipc: Enabled bearer , priority 0 [ 278.398895][T13346] syzkaller0: entered promiscuous mode [ 278.405215][T13346] syzkaller0: entered allmulticast mode [ 278.451540][T13346] syz.2.1976 (13346) used obsolete PPPIOCDETACH ioctl [ 278.470523][T13346] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 278.573323][T13354] tipc: Resetting bearer [ 278.691261][T13344] tipc: Resetting bearer [ 278.712627][T13344] tipc: Disabling bearer [ 278.831000][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 278.852913][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 278.869090][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 278.893058][T13372] IPVS: Unknown mcast interface: netpci0 [ 279.128528][T13385] syzkaller0: entered promiscuous mode [ 279.134226][T13385] syzkaller0: entered allmulticast mode [ 279.181375][T13389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1991'. [ 279.265327][ T30] audit: type=1800 audit(1762678897.363:4): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1992" name=4996ADFBDFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2317 res=0 errno=0 [ 279.802867][T13426] Unsupported ieee802154 address type: 0 [ 280.069556][T13441] tipc: New replicast peer: 255.255.255.255 [ 280.080111][T13441] tipc: Enabled bearer , priority 10 [ 280.263518][T13459] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 280.525251][T13473] dvmrp6: entered allmulticast mode [ 281.024146][T13497] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 281.172843][T13506] netlink: 'syz.3.2026': attribute type 1 has an invalid length. [ 281.197521][ T24] tipc: Node number set to 1972483311 [ 281.754213][T13542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.910424][T13552] netlink: 'syz.1.2039': attribute type 4 has an invalid length. [ 282.391806][T13590] GUP no longer grows the stack in syz.2.2052 (13590): 200000003000-20000000a000 (200000001000) [ 282.419385][T13590] CPU: 0 UID: 0 PID: 13590 Comm: syz.2.2052 Not tainted syzkaller #0 PREEMPT(full) [ 282.419415][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.419443][T13590] Call Trace: [ 282.419452][T13590] [ 282.419461][T13590] dump_stack_lvl+0x189/0x250 [ 282.419500][T13590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.419529][T13590] ? __pfx__printk+0x10/0x10 [ 282.419547][T13590] ? find_vma+0xe7/0x160 [ 282.419590][T13590] __get_user_pages+0x2470/0x2a00 [ 282.419622][T13590] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 282.419676][T13590] ? rcu_is_watching+0x15/0xb0 [ 282.419706][T13590] __gup_longterm_locked+0xde4/0x1660 [ 282.419741][T13590] ? try_grab_folio_fast+0x1bf/0x6a0 [ 282.419808][T13590] ? gup_fast_fallback+0x1b86/0x22d0 [ 282.419841][T13590] gup_fast_fallback+0x1d65/0x22d0 [ 282.419907][T13590] ? __pfx_gup_fast_fallback+0x10/0x10 [ 282.419931][T13590] ? __mutex_lock+0x335/0x1350 [ 282.419971][T13590] ? is_valid_gup_args+0x11f/0x200 [ 282.420001][T13590] ? get_user_pages_fast+0x4d/0xb0 [ 282.420041][T13590] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 282.420076][T13590] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 282.420098][T13590] ? wait_for_space+0x248/0x2d0 [ 282.420121][T13590] iov_iter_get_pages2+0x5e/0xa0 [ 282.420150][T13590] __se_sys_vmsplice+0x548/0x10d0 [ 282.420180][T13590] ? futex_private_hash_put+0x4b/0x280 [ 282.420215][T13590] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 282.420237][T13590] ? __pfx_futex_wake+0x10/0x10 [ 282.420260][T13590] ? restore_signal_shadow_stack+0x3b7/0x480 [ 282.420293][T13590] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 282.420382][T13590] ? do_syscall_64+0xbe/0xfa0 [ 282.420416][T13590] do_syscall_64+0xfa/0xfa0 [ 282.420444][T13590] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.420472][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420492][T13590] ? clear_bhb_loop+0x60/0xb0 [ 282.420517][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.420539][T13590] RIP: 0033:0x7fcc9bd8f6c9 [ 282.420559][T13590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.420576][T13590] RSP: 002b:00007fcc9cbdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 282.420601][T13590] RAX: ffffffffffffffda RBX: 00007fcc9bfe5fa0 RCX: 00007fcc9bd8f6c9 [ 282.420616][T13590] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 282.420630][T13590] RBP: 00007fcc9be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 282.420644][T13590] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 282.420657][T13590] R13: 00007fcc9bfe6038 R14: 00007fcc9bfe5fa0 R15: 00007ffca4a8a9f8 [ 282.420693][T13590] [ 282.790717][T13602] erspan0: left allmulticast mode [ 283.319192][T13629] delete_channel: no stack [ 283.330907][T13632] net veth1_virt_wifi .: renamed from virt_wifi0 [ 283.582031][T13651] bridge: RTM_NEWNEIGH with invalid ether address [ 283.811674][T13653] team0 (unregistering): left allmulticast mode [ 283.818145][T13653] team_slave_1: left allmulticast mode [ 283.823678][T13653] team0 (unregistering): left promiscuous mode [ 283.830066][T13653] team_slave_1: left promiscuous mode [ 283.835755][T13653] bridge0: port 4(team0) entered disabled state [ 283.854703][T13653] team0 (unregistering): Port device team_slave_1 removed [ 283.887222][T13660] netlink: 'syz.2.2076': attribute type 25 has an invalid length. [ 283.898189][T13660] __nla_validate_parse: 11 callbacks suppressed [ 283.898207][T13660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2076'. [ 284.143639][T13678] netlink: 'syz.1.2080': attribute type 83 has an invalid length. [ 284.152795][T13678] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2080'. [ 284.184531][T13677] netlink: 'syz.4.2081': attribute type 7 has an invalid length. [ 284.220233][T13680] tipc: Enabled bearer , priority 0 [ 284.229328][T13680] syzkaller0: entered promiscuous mode [ 284.234906][T13680] syzkaller0: entered allmulticast mode [ 284.262750][T13682] veth0_to_team: entered promiscuous mode [ 284.290889][T13680] tipc: Resetting bearer [ 284.300025][T13679] tipc: Resetting bearer [ 284.335687][T13679] tipc: Disabling bearer [ 284.382839][T13682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2083'. [ 284.821599][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 285.082088][T13713] : renamed from hsr0 [ 285.140673][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 285.280827][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 285.462676][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'. [ 285.852667][T13750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2101'. [ 286.225921][T13777] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 286.470765][T13793] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 286.479566][T13796] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 286.482284][T13785] bond5: entered promiscuous mode [ 286.495348][T13785] macvlan2: entered promiscuous mode [ 286.500995][T13785] macvlan2: entered allmulticast mode [ 286.506549][T13785] bond5: entered allmulticast mode [ 286.513040][T13785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.522398][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 286.543554][T13785] bond5: left promiscuous mode [ 286.609019][T13793] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 286.613211][T13796] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 286.639186][T13798] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2111'. [ 286.801010][T13818] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 288.043953][T13874] netlink: 'syz.3.2127': attribute type 4 has an invalid length. [ 288.116858][T13874] syzkaller0: entered promiscuous mode [ 288.134297][T13874] syzkaller0: entered allmulticast mode [ 288.518699][T13904] netlink: 'syz.0.2138': attribute type 1 has an invalid length. [ 288.646657][T13912] netlink: 'syz.4.2141': attribute type 14 has an invalid length. [ 288.789493][T13919] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 288.789737][T13917] netem: unknown loss type 0 [ 288.825342][T13917] netem: change failed [ 288.836925][T13923] gretap0: entered promiscuous mode [ 288.856323][T13923] 0{X: renamed from gretap0 [ 288.885719][T13923] 0{X: left promiscuous mode [ 288.911025][T13923] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 288.932782][T13935] netlink: 'syz.0.2144': attribute type 3 has an invalid length. [ 289.169171][T13939] __nla_validate_parse: 12 callbacks suppressed [ 289.169193][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 289.173405][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 289.354644][T13951] netlink: 'syz.1.2154': attribute type 12 has an invalid length. [ 289.498842][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 289.572734][T13960] syzkaller0: entered promiscuous mode [ 289.579012][T13960] syzkaller0: entered allmulticast mode [ 289.681391][T13968] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2159'. [ 289.721732][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2159'. [ 289.834054][T13974] ksmbd: Unknown IPC event: 3, ignore. [ 290.098137][T13988] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2165'. [ 290.138850][T13988] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2165'. [ 290.261469][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 290.374518][T14007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.389128][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 290.413675][T14007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2167'. [ 290.566634][T13998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.858890][T14033] bond8: (slave bridge6): making interface the new active one [ 290.867801][T14033] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 292.252593][T14077] ipvlan2: entered promiscuous mode [ 292.890691][T14119] validate_nla: 5 callbacks suppressed [ 292.890711][T14119] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 292.926644][T14122] Cannot find add_set index 65532 as target [ 292.942042][T14124] netlink: 'syz.4.2204': attribute type 6 has an invalid length. [ 292.945599][T14119] netlink: 'syz.0.2201': attribute type 2 has an invalid length. [ 294.337815][T14198] __nla_validate_parse: 11 callbacks suppressed [ 294.337835][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'. [ 294.359981][T14198] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 294.379640][T14198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2213'. [ 294.506592][T14210] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2218'. [ 294.654217][T14218] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2221'. [ 294.728870][T14212] wg2: entered promiscuous mode [ 294.733808][T14212] wg2: entered allmulticast mode [ 294.834271][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2224'. [ 294.899912][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2224'. [ 294.934280][T14234] netlink: 'syz.0.2227': attribute type 8 has an invalid length. [ 295.170040][T14242] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2230'. [ 295.308504][T14257] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2233'. [ 295.343455][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 295.407034][T14262] veth0_to_bridge: entered promiscuous mode [ 295.434814][T14259] veth0_to_bridge: left promiscuous mode [ 295.659224][T14271] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 295.803030][T14271] 8021q: adding VLAN 0 to HW filter on device bond10 [ 295.850906][T14282] bond0: (slave bridge_slave_1): Releasing backup interface [ 295.888122][T14282] bridge_slave_1: left promiscuous mode [ 295.926185][T14282] bond2: (slave veth0_to_bond): Releasing active interface [ 295.965600][T14282] bond0: (slave bond_slave_0): Releasing backup interface [ 295.983870][T14282] bond0: (slave bond_slave_1): Releasing backup interface [ 296.010431][T14282] team0: Port device team_slave_0 removed [ 296.022000][T14282] team0: Port device team_slave_1 removed [ 296.029691][T14282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 296.135449][T14288] bond8: option all_slaves_active: invalid value (222) [ 296.146852][T14288] bond8 (unregistering): Released all slaves [ 296.186471][T14302] netlink: 'syz.4.2246': attribute type 1 has an invalid length. [ 296.196734][T14302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2246'. [ 296.297073][T14308] netlink: 'syz.3.2248': attribute type 10 has an invalid length. [ 296.351628][T14306] netlink: 'syz.3.2248': attribute type 29 has an invalid length. [ 296.383920][T14306] netlink: 'syz.3.2248': attribute type 29 has an invalid length. [ 296.986657][T14353] v: renamed from vlan0 [ 297.294110][T14360] syzkaller0: entered promiscuous mode [ 297.308298][T14360] syzkaller0: entered allmulticast mode [ 297.317695][T14372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.336339][T14374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.460455][T14380] netlink: 'syz.0.2268': attribute type 32 has an invalid length. [ 298.731737][T14380] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 299.045266][T14406] tipc: Enabled bearer , priority 0 [ 299.139932][T14405] tipc: Disabling bearer [ 299.303332][T14427] netlink: 'syz.1.2283': attribute type 21 has an invalid length. [ 299.335118][T14427] netlink: 'syz.1.2283': attribute type 6 has an invalid length. [ 299.945031][T14462] tipc: Enabling of bearer rejected, failed to enable media [ 299.960440][T14462] openvswitch: netlink: IP tunnel dst address not specified [ 300.207062][T14468] __nla_validate_parse: 16 callbacks suppressed [ 300.207085][T14468] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2295'. [ 300.490795][T14483] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2298'. [ 300.790433][ T30] audit: type=1804 audit(1762678918.893:5): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2303" name="/newroot/457/cgroup.controllers" dev="tmpfs" ino=2351 res=1 errno=0 [ 300.843752][ T30] audit: type=1800 audit(1762678918.923:6): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2303" name="cgroup.controllers" dev="tmpfs" ino=2351 res=0 errno=0 [ 300.899753][T14505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2305'. [ 301.093620][T14512] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 301.256385][T14512] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.284611][T14523] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 301.495219][T14531] tipc: Enabling of bearer rejected, failed to enable media [ 301.512500][T14532] tipc: Enabling of bearer rejected, failed to enable media [ 301.664292][T14543] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2314'. [ 301.685483][T14543] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 301.753391][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 302.060874][T14562] netlink: 'syz.0.2323': attribute type 8 has an invalid length. [ 302.382903][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2328'. [ 302.476412][T14587] netlink: 'syz.3.2330': attribute type 13 has an invalid length. [ 302.484721][T14587] netlink: 'syz.3.2330': attribute type 58 has an invalid length. [ 302.494263][T14587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2330'. [ 302.503515][T14585] netlink: 'syz.4.2329': attribute type 21 has an invalid length. [ 302.503554][T14585] netlink: 'syz.4.2329': attribute type 22 has an invalid length. [ 302.503569][T14585] netlink: 'syz.4.2329': attribute type 23 has an invalid length. [ 302.503584][T14585] netlink: 'syz.4.2329': attribute type 25 has an invalid length. [ 302.503598][T14585] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2329'. [ 302.717585][T14593] netlink: 'syz.2.2332': attribute type 21 has an invalid length. [ 302.725843][T14593] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2332'. [ 302.736780][T14596] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.750947][T14596] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 302.836994][T14596] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.850420][T14596] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 302.884726][T14600] x_tables: duplicate entry at hook 3 [ 302.981742][T14596] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.007886][T14596] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 303.044206][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'. [ 303.134046][T14596] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.158719][T14596] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 303.410124][ T6334] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.431509][ T6334] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.542155][ T6327] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.568299][ T6327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.598806][ T6327] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.607048][ T6327] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 303.712070][ T6327] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.737505][ T6327] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 304.183838][T14656] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 304.328889][T14668] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.368609][T14668] veth5: entered promiscuous mode [ 304.375836][T14667] --map-set only usable from mangle table [ 304.442814][T14677] syzkaller0: entered promiscuous mode [ 304.467707][T14677] syzkaller0: entered allmulticast mode [ 304.550632][T14683] validate_nla: 1 callbacks suppressed [ 304.550651][T14683] netlink: 'syz.2.2356': attribute type 6 has an invalid length. [ 304.576540][ T6321] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.576678][T14683] netlink: 'syz.2.2356': attribute type 6 has an invalid length. [ 304.587503][ T6321] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.603067][ T6321] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.613683][ T6321] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.775259][T14694] netlink: 'syz.2.2360': attribute type 1 has an invalid length. [ 304.824707][T14694] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.037173][T14707] netlink: 'syz.1.2362': attribute type 24 has an invalid length. [ 305.073760][T14702] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 305.297055][T14713] __nla_validate_parse: 75 callbacks suppressed [ 305.297075][T14713] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2365'. [ 305.348442][T14713] netlink: 528 bytes leftover after parsing attributes in process `syz.1.2365'. [ 305.371558][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 305.580894][T14730] sctp: [Deprecated]: syz.0.2370 (pid 14730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.580894][T14730] Use struct sctp_sack_info instead [ 305.602750][T14729] sctp: [Deprecated]: syz.0.2370 (pid 14729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.602750][T14729] Use struct sctp_sack_info instead [ 305.724775][T14736] netlink: 'syz.0.2372': attribute type 4 has an invalid length. [ 305.832618][T14741] netlink: 'syz.1.2374': attribute type 63 has an invalid length. [ 305.846788][T14741] netlink: 'syz.1.2374': attribute type 63 has an invalid length. [ 305.891050][T14743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2375'. [ 306.269643][T14752] bond7: entered allmulticast mode [ 306.285586][T14752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.783375][T14799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2385'. [ 306.811915][T14752] bond7 (unregistering): Released all slaves [ 307.064920][T14804] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2387'. [ 307.099169][T14804] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 307.143196][T14805] netlink: 'syz.2.2386': attribute type 142 has an invalid length. [ 307.604043][T14835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.178546][T14870] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2403'. [ 308.208144][T14870] 0{X: renamed from gretap0 (while UP) [ 308.284124][T14870] 0{X: left promiscuous mode [ 308.297398][T14870] 0{X: entered allmulticast mode [ 308.303382][T14870] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 308.417687][T14882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2405'. [ 308.741273][T14899] syzkaller0: entered promiscuous mode [ 308.769573][T14899] syzkaller0: entered allmulticast mode [ 309.318497][T14927] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2415'. [ 309.506587][T14920] tipc: Enabled bearer , priority 0 [ 309.561119][T14938] openvswitch: netlink: Message has 592 unknown bytes. [ 309.587764][T14938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.632483][T14935] syzkaller1: entered promiscuous mode [ 309.638242][T14935] syzkaller1: entered allmulticast mode [ 309.767416][T14932] syzkaller0: entered promiscuous mode [ 309.773274][T14932] syzkaller0: entered allmulticast mode [ 309.798276][T14914] tipc: Resetting bearer [ 309.878817][T14914] tipc: Disabling bearer [ 309.968825][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'. [ 310.022197][T14961] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 310.054821][T14958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.589835][T14991] __nla_validate_parse: 2 callbacks suppressed [ 310.589855][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2430'. [ 310.648336][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 310.901934][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2432'. [ 310.938062][T15001] bridge0: port 4(ipvlan2) entered blocking state [ 310.952610][T15001] bridge0: port 4(ipvlan2) entered disabled state [ 310.980234][T15001] ipvlan2: entered allmulticast mode [ 310.985621][T15001] bridge0: entered allmulticast mode [ 310.992904][T15012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.102976][T15001] ipvlan2: left allmulticast mode [ 311.126693][T15001] bridge0: left allmulticast mode [ 311.291867][T15024] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 312.150741][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.195207][T15074] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2447'. [ 312.275947][T15075] sctp: [Deprecated]: syz.4.2448 (pid 15075) Use of int in maxseg socket option. [ 312.275947][T15075] Use struct sctp_assoc_value instead [ 312.304886][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2450'. [ 312.322451][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2450'. [ 312.377854][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 312.433493][T15085] geneve2: entered promiscuous mode [ 312.436796][T15088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2452'. [ 312.558686][T15097] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 312.707679][T15098] gretap1: entered promiscuous mode [ 312.723340][T15098] bond9: (slave gretap1): making interface the new active one [ 312.761865][T15098] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 312.825186][T15104] bond9: entered promiscuous mode [ 312.831831][T15104] macvlan4: entered promiscuous mode [ 312.848899][T15104] macvlan4: entered allmulticast mode [ 312.859670][T15104] bond9: entered allmulticast mode [ 312.865690][T15104] gretap1: entered allmulticast mode [ 312.879644][T15104] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 312.889641][T15104] bond9: left promiscuous mode [ 312.963880][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 313.067204][T15115] : renamed from bridge_slave_0 [ 313.127169][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2458'. [ 313.265319][T15133] netlink: 'syz.2.2459': attribute type 21 has an invalid length. [ 313.279389][T15139] sctp: [Deprecated]: syz.3.2461 (pid 15139) Use of int in maxseg socket option. [ 313.279389][T15139] Use struct sctp_assoc_value instead [ 313.296469][T15141] netlink: 'syz.2.2459': attribute type 21 has an invalid length. [ 313.314667][T15143] xt_l2tp: missing protocol rule (udp|l2tpip) [ 313.344120][T15133] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 313.361198][T15133] bond9 (unregistering): Released all slaves [ 313.529488][T15141] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 313.555693][T15141] bond9 (unregistering): Released all slaves [ 313.735621][T15163] netlink: 'syz.4.2464': attribute type 29 has an invalid length. [ 313.829254][T15170] netlink: 'syz.0.2466': attribute type 12 has an invalid length. [ 313.844277][T15170] netlink: 'syz.0.2466': attribute type 29 has an invalid length. [ 313.853640][T15170] netlink: 'syz.0.2466': attribute type 2 has an invalid length. [ 313.863051][T15170] netlink: 'syz.0.2466': attribute type 3 has an invalid length. [ 314.301236][T15191] netlink: 'syz.0.2473': attribute type 32 has an invalid length. [ 314.392803][T15191] bond6: option coupled_control: invalid value (128) [ 314.406743][T15191] bond6 (unregistering): Released all slaves [ 314.441354][T15203] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 315.272920][T15246] syzkaller0: entered promiscuous mode [ 315.299734][T15246] syzkaller0: entered allmulticast mode [ 315.834483][T15281] SET target dimension over the limit! [ 316.408477][T15317] __nla_validate_parse: 11 callbacks suppressed [ 316.408498][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2501'. [ 316.426044][T15317] netlink: 'syz.3.2501': attribute type 30 has an invalid length. [ 316.463843][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'. [ 316.960523][T15340] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 317.114751][T15340] bond10: entered promiscuous mode [ 317.134707][T15340] macvlan4: entered promiscuous mode [ 317.140717][T15340] macvlan4: entered allmulticast mode [ 317.146233][T15340] bond10: entered allmulticast mode [ 317.152655][T15340] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 317.165011][T15340] bond10: left promiscuous mode [ 317.220403][T15352] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2509'. [ 317.268969][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 317.289601][T15350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2509'. [ 317.349152][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2511'. [ 317.576280][T15367] ipvlan0: entered promiscuous mode [ 318.352722][T15414] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2526'. [ 318.543004][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2530'. [ 318.936787][T15441] bond12: option lp_interval: invalid value (0) [ 318.972123][T15447] netlink: 'syz.0.2536': attribute type 83 has an invalid length. [ 318.986223][T15441] bond12: option lp_interval: allowed values 1 - 2147483647 [ 319.082128][T15441] bond12 (unregistering): Released all slaves [ 319.180954][T15460] netlink: 'syz.0.2538': attribute type 2 has an invalid length. [ 319.199607][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2539'. [ 319.245527][T15459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2539'. [ 320.617282][T15540] sctp: [Deprecated]: syz.1.2558 (pid 15540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.617282][T15540] Use struct sctp_sack_info instead [ 320.738846][T15552] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 320.981774][T15552] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.251068][T15580] netlink: 'syz.2.2567': attribute type 83 has an invalid length. [ 321.296729][T15583] tipc: Enabling of bearer rejected, failed to enable media [ 321.331386][T15583] tipc: Enabling of bearer rejected, failed to enable media [ 321.514323][T15599] __nla_validate_parse: 10 callbacks suppressed [ 321.514342][T15599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2570'. [ 321.561639][T15597] netlink: 'syz.2.2570': attribute type 1 has an invalid length. [ 321.582203][T15602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2572'. [ 321.611589][ T5834] Bluetooth: hci4: link tx timeout [ 321.618145][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.646503][ T5839] Bluetooth: hci4: link tx timeout [ 321.652428][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.822067][T15597] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.884094][T15600] bond10: (slave ip6gretap2): making interface the new active one [ 321.914305][T15600] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 321.969193][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'. [ 322.038883][T15626] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2579'. [ 322.095382][T15626] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 322.174947][ T5839] Bluetooth: hci4: link tx timeout [ 322.181132][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.201385][ T5839] Bluetooth: hci4: link tx timeout [ 322.208120][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.367682][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 322.563333][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 322.575775][T15659] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 322.619483][T15648] netlink: 'syz.0.2584': attribute type 10 has an invalid length. [ 322.641944][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.657818][T15648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2584'. [ 322.729860][ T5839] Bluetooth: hci4: link tx timeout [ 322.735295][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.774414][T15648] team0: Port device geneve0 added [ 322.820795][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 322.835147][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 322.838247][ T6327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.865087][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 322.878530][ T5839] Bluetooth: hci4: link tx timeout [ 322.883779][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 322.897344][ T6327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.944936][T15675] netlink: 'syz.1.2591': attribute type 1 has an invalid length. [ 323.015699][T15672] bond11: option min_links: invalid value (18446744073709551614) [ 323.044680][T15672] bond11: option min_links: allowed values 0 - 2147483647 [ 323.073059][T15672] bond11 (unregistering): Released all slaves [ 323.223613][T15675] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.233679][ T6327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.244978][ T6327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.300659][T15680] bond12: (slave veth7): Enslaving as an active interface with a down link [ 323.323896][T15687] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 323.538911][T15703] netlink: 'syz.1.2594': attribute type 83 has an invalid length. [ 323.623011][ T5839] Bluetooth: hci4: link tx timeout [ 323.628303][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 323.680102][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 324.094163][T15725] tipc: Enabling of bearer rejected, failed to enable media [ 324.735202][T15757] smc: net device vcan0 applied user defined pnetid SYZ1 [ 324.781664][T15752] tipc: Enabling of bearer rejected, failed to enable media [ 324.975032][T15773] ipt_REJECT: TCP_RESET invalid for non-tcp [ 324.998100][T15773] tipc: Enabling of bearer rejected, failed to enable media [ 325.252134][T15795] netlink: 'syz.3.2614': attribute type 3 has an invalid length. [ 325.309672][T15795] netlink: 'syz.3.2614': attribute type 6 has an invalid length. [ 325.319120][T15795] netlink: 'syz.3.2614': attribute type 6 has an invalid length. [ 325.439260][T15805] sctp: [Deprecated]: syz.1.2618 (pid 15805) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.439260][T15805] Use struct sctp_sack_info instead [ 325.470538][T15811] syzkaller0: entered promiscuous mode [ 325.486915][T15811] syzkaller0: entered allmulticast mode [ 325.694539][T15820] netlink: 'syz.4.2624': attribute type 11 has an invalid length. [ 325.743278][T15826] ip6t_REJECT: ECHOREPLY is not supported [ 325.998567][T15842] netlink: 'syz.0.2628': attribute type 11 has an invalid length. [ 326.032017][T15842] netlink: 'syz.0.2628': attribute type 11 has an invalid length. [ 326.152132][T15852] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 326.175570][T15852] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 326.268309][T15859] TCP: TCP_TX_DELAY enabled [ 326.535965][T15866] __nla_validate_parse: 24 callbacks suppressed [ 326.535986][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 326.635316][T15885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'. [ 326.921743][T15896] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2642'. [ 327.003092][T15900] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 327.217448][T15917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2645'. [ 327.549445][T15932] bond13 (unregistering): Released all slaves [ 327.664638][T15942] veth1_to_hsr: default FDB implementation only supports local addresses [ 327.839915][T15956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2654'. [ 327.941653][T15963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2658'. [ 328.032718][T15957] syzkaller0: entered promiscuous mode [ 328.038551][T15957] syzkaller0: entered allmulticast mode [ 328.061150][T15967] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2659'. [ 329.515721][T15988] ipvlan1: entered promiscuous mode [ 329.750253][T16004] IPv6: Can't replace route, no match found [ 329.813472][T16007] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 329.824887][T16007] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 329.909267][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'. [ 330.119101][T16022] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2675'. [ 330.129313][T16022] block nbd0: not configured, cannot reconfigure [ 330.290658][T16026] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2677'. [ 330.319574][T16026] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 330.333374][T16026] bond13 (unregistering): Released all slaves [ 331.043440][T16064] netlink: 'syz.0.2689': attribute type 19 has an invalid length. [ 331.898338][T16114] netlink: 'syz.4.2706': attribute type 10 has an invalid length. [ 331.909820][T16114] __nla_validate_parse: 1 callbacks suppressed [ 331.909841][T16114] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2706'. [ 332.193815][T16124] netlink: 'syz.2.2709': attribute type 13 has an invalid length. [ 332.235514][T16124] netlink: 'syz.2.2709': attribute type 17 has an invalid length. [ 332.264171][T16128] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2713'. [ 332.591666][T16124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.109328][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.119734][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.128498][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.138736][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.148551][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.343368][T16165] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2722'. [ 333.400811][T16165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2722'. [ 333.523011][ T6349] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.548687][ T6349] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.685364][T16175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2725'. [ 333.719531][ T6349] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.737278][ T6349] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.826601][ T6349] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.843271][ T6349] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 333.972921][ T6349] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.999591][ T6349] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 334.225261][T16206] sctp: [Deprecated]: syz.2.2731 (pid 16206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.225261][T16206] Use struct sctp_sack_info instead [ 334.415929][T16159] chnl_net:caif_netlink_parms(): no params data found [ 334.504370][T16221] IPv6: sit4: Disabled Multicast RS [ 334.647153][T16227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2735'. [ 334.805207][T16235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'. [ 334.933523][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 335.045156][T16243] delete_channel: no stack [ 335.200376][ T5834] Bluetooth: hci1: command tx timeout [ 335.670406][ T6349] bond0 (unregistering): Released all slaves [ 335.685626][ T6349] bond1 (unregistering): Released all slaves [ 335.775451][ T6349] bond2 (unregistering): (slave veth3): Releasing active interface [ 335.785940][ T6349] bond2 (unregistering): (slave veth5): Releasing active interface [ 335.796189][ T6349] bond2 (unregistering): Released all slaves [ 335.882719][ T6349] bond3 (unregistering): Released all slaves [ 335.980035][ T6349] bond4 (unregistering): Released all slaves [ 335.994256][ T6349] bond5 (unregistering): Released all slaves [ 336.008901][ T6349] bond6 (unregistering): Released all slaves [ 336.133959][T16252] 8021q: VLANs not supported on vxcan1 [ 336.205669][T16261] netlink: 'syz.2.2744': attribute type 3 has an invalid length. [ 336.360866][ T6349] 9: left promiscuous mode [ 336.403402][T16159] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.421797][T16159] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.439229][T16159] bridge_slave_0: entered allmulticast mode [ 336.462017][T16159] bridge_slave_0: entered promiscuous mode [ 336.485309][T16159] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.505261][T16159] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.531746][T16159] bridge_slave_1: entered allmulticast mode [ 336.553926][T16159] bridge_slave_1: entered promiscuous mode [ 336.580851][T16273] netlink: 'syz.0.2745': attribute type 4 has an invalid length. [ 336.617383][ T6349] tipc: Disabling bearer [ 336.693453][ T6349] tipc: Left network mode [ 336.931653][T16296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2750'. [ 336.950840][T16159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.989668][T16159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.197976][ T7364] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 337.209947][ T7364] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 337.218394][ T7364] CPU: 1 UID: 0 PID: 7364 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 337.227903][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.237998][ T7364] Workqueue: events l2cap_info_timeout [ 337.243488][ T7364] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 337.249395][ T7364] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 9e 23 09 cc 66 66 66 66 66 66 2e [ 337.269025][ T7364] RSP: 0018:ffffc9000b9c7788 EFLAGS: 00010202 [ 337.275110][ T7364] RAX: dffffc0000000000 RBX: ffffffff891f0898 RCX: 7a3866eecf297900 [ 337.283286][ T7364] RDX: 0000000000000000 RSI: ffffffff891f0898 RDI: 000000000000004c [ 337.291268][ T7364] RBP: ffffffff8a4ff9c5 R08: 0000000000000001 R09: 0000000000000000 [ 337.299247][ T7364] R10: dffffc0000000000 R11: ffffffff8a4ff980 R12: 0000000000000000 [ 337.307230][ T7364] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 337.315301][ T7364] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 337.324242][ T7364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.330837][ T7364] CR2: 00007f1175327368 CR3: 0000000068882000 CR4: 00000000003526f0 [ 337.338822][ T7364] Call Trace: [ 337.342112][ T7364] [ 337.345050][ T7364] __kasan_check_byte+0x12/0x40 [ 337.349920][ T7364] lock_acquire+0x8d/0x360 [ 337.354345][ T7364] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.359579][ T7364] ? __cancel_work+0x254/0x2e0 [ 337.364492][ T7364] lock_sock_nested+0x48/0x100 [ 337.369272][ T7364] ? l2cap_sock_ready_cb+0x45/0x140 [ 337.374483][ T7364] l2cap_sock_ready_cb+0x45/0x140 [ 337.379523][ T7364] l2cap_conn_start+0x76d/0xe50 [ 337.384393][ T7364] ? __pfx_l2cap_conn_start+0x10/0x10 [ 337.389784][ T7364] ? __lock_acquire+0xab9/0xd20 [ 337.394735][ T7364] ? __pfx___mutex_lock+0x10/0x10 [ 337.399862][ T7364] ? process_scheduled_works+0x9ef/0x17b0 [ 337.405603][ T7364] l2cap_info_timeout+0x68/0xa0 [ 337.410470][ T7364] ? process_scheduled_works+0x9ef/0x17b0 [ 337.416291][ T7364] process_scheduled_works+0xae1/0x17b0 [ 337.421886][ T7364] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.427963][ T7364] worker_thread+0x8a0/0xda0 [ 337.432579][ T7364] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.438933][ T7364] ? __kthread_parkme+0x7b/0x200 [ 337.443978][ T7364] kthread+0x711/0x8a0 [ 337.448073][ T7364] ? __pfx_worker_thread+0x10/0x10 [ 337.453219][ T7364] ? __pfx_kthread+0x10/0x10 [ 337.457835][ T7364] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.463077][ T7364] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.468293][ T7364] ? __pfx_kthread+0x10/0x10 [ 337.473173][ T7364] ret_from_fork+0x4bc/0x870 [ 337.477948][ T7364] ? __pfx_ret_from_fork+0x10/0x10 [ 337.483162][ T7364] ? __switch_to_asm+0x39/0x70 [ 337.487964][ T7364] ? __switch_to_asm+0x33/0x70 [ 337.492739][ T7364] ? __pfx_kthread+0x10/0x10 [ 337.497529][ T7364] ret_from_fork_asm+0x1a/0x30 [ 337.502494][ T7364] [ 337.505529][ T7364] Modules linked in: [ 337.510658][ T7364] ---[ end trace 0000000000000000 ]--- [ 337.520136][ T5834] Bluetooth: hci1: command tx timeout [ 337.526317][ T7364] RIP: 0010:kasan_byte_accessible+0x12/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.532315][ T7364] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 9e 23 09 cc 66 66 66 66 66 66 2e [ 337.555221][ T7364] RSP: 0018:ffffc9000b9c7788 EFLAGS: 00010202 [ 337.561431][ T7364] RAX: dffffc0000000000 RBX: ffffffff891f0898 RCX: 7a3866eecf297900 [ 337.578195][ T7364] RDX: 0000000000000000 RSI: ffffffff891f0898 RDI: 000000000000004c [ 337.586244][ T7364] RBP: ffffffff8a4ff9c5 R08: 0000000000000001 R09: 0000000000000000 [ 337.607849][ T7364] R10: dffffc0000000000 R11: ffffffff8a4ff980 R12: 0000000000000000 [ 337.627328][ T7364] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 337.638068][ T7364] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 337.647063][ T7364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.670245][T16303] 8021q: adding VLAN 0 to HW filter on device bond13 [ 337.745860][ T7364] CR2: 00007f1175212286 CR3: 000000007d37a000 CR4: 00000000003526f0 [ 337.788030][ T7364] Kernel panic - not syncing: Fatal exception [ 337.794439][ T7364] Kernel Offset: disabled [ 337.798776][ T7364] Rebooting in 86400 seconds..