last executing test programs: 2.255794673s ago: executing program 3 (id=2365): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113200000000008510000002000000b7000007000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 2.044498498s ago: executing program 3 (id=2370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'hsr0\x00', {0x1}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 1.838791944s ago: executing program 0 (id=2372): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2be27de13db01225280012800b0001006d616373656300001800028005000f00020000000c000100feffff7fa100000008000500", @ANYRES32=r1], 0x50}}, 0x0) 1.830048942s ago: executing program 2 (id=2373): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x21, 0x41bdc22ca285f531}) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r1) socket$nl_route(0x10, 0x3, 0x0) 1.600604521s ago: executing program 4 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c"], 0xc0}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x28) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b78811", @ANYRESHEX=r1, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.59959943s ago: executing program 0 (id=2376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x0, 0x0, 0x10000000}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 1.579410374s ago: executing program 3 (id=2377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x9}], 0x38) (async, rerun: 64) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="22e03ad2e9e48a858fbb30769d9dbf59ba835368a157ffdb6a318148ab2f7ba3b12435bbd08ca4e9f018acecbe0103485d568e2f1b87a1e9846fe33f5be949cab4e1ab52225b57c40e5890e6486a8eee1a5fea99f83b4fddd5f63528373ce8c2f2454224ce7262d17ea80157be5d869779e7b74456636edbf93916be8b99cb600423fb24fefd2844aaac13cad8268740af7cd7f0d35b30c30086f34c983d38d433756981393074cb75da22d2e31e74b0033d30cafecd627040612d0984543ba608c60a2ab282176431f10cf76001784647", 0xd1}, {&(0x7f0000002000)="e41b28db35e368136c16e9f8ad6a8d42f8627ca2a7d701cabb44d1c161709c3a061bd27e5aac049e1dd09fb0ab88755415857d657aad9db18eebcdadb1300425a679f3c1e2fd4c84d585e886b17b644fcdffef9f86e93d39f14a56291558f1ac3a31fa5aaa4f880bb19df404b4b34e172f87c907f0bc7b79c853803fab250171c9466a47c2c94d59e1ea5c310999c4f09abb9d187d21f12a06ef7054583003644454fc5d280a0fffb15d96ff", 0xac}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="59e61b065c4231df5ae00d4ae3323ee836a154208ed94d5576e7c394bf538fc67813818459bfbb10bf439592fa23b11784ad79b7c9e4088c6f734477ca67b6f4ae7275501b3d4e7fc4c6d7d23525d303b41a67d0dd784bd0a53685570bf45fe53ae689730c689d89357a3d9b57205b6342bdd5bda19cbc34273422a6d6839414d5b2a82c7127fea305a4a12795e412730fbbca97b78191f5d59da7f1eb0b1e3d7378dbf318faabab58d7e10ea293702abd63dead404814bbf5e6029f7e0258389e22305a15a58a19cc74d089b1d486618345b04f03b801a0", 0xd8}], 0x5, &(0x7f0000003240)=[@hopopts={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x0, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}], 0x78}}, {{&(0x7f00000032c0)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}, 0x1c, &(0x7f0000003440)=[{&(0x7f0000003300)="4de4bf0267c9e876580731593dc0be1d870643cf9c1b26c579f4f4d3a48d8d0d3969eb03283c23a81aa85bce715e53f69d8d197c9ecbd7a8698638110066d9f320f00a7a1485decbcbfcae16adadc4844e07441553393ed2c8c8319dcb5c22e717e2e5d83556ac049ce21a323cd77f05c0339f59b107ffd37bc90fc23332eb0e5d30b4e5ebeb883f2b243f714f1c6e344af250404ec79a6dc3b2317e10cc0b590f94e637b38ae3bfbfc8903dd47cb695c1974feacd46dabfc95881dfe8", 0xbd}, {&(0x7f00000033c0)="38a5757ac295b836684a57e21f79b2aba0c219ec9f806026394fd5f88df21af2b6f4dc88e007d77c169922cec9adfab8a82cb16472cfe6c9984e5021d3db6a7a94e9b31ead0b83f88793862a69bf6caffe2c371f4e5081cdb1737badc1", 0x5d}], 0x2, &(0x7f0000003480)=[@dontfrag={{0x14, 0x29, 0x3e, 0xd4f}}], 0x18}}], 0x2, 0x20004000) 1.518441988s ago: executing program 1 (id=2378): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000200000050000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@can_delroute={0x40, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6698c13a70ca67e7"}, 0x2}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1}, {0x2, 0x0, 0x0, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0xfffffffffffffffa, 0xfffffffffffffff8, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltclass={0xb8, 0x29, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xe, 0xe}, {0x4, 0xfff3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_HDR={0x2d, 0x3, "58eddaeb503e33a5a04c362da4e06af46e554affdd06babdf5d7ecec79ef438ec787e1b6d23aaf9e39"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_EXCESS={0x8, 0x4, {0x4, 0xa}}, @TCA_ATM_HDR={0x9, 0x3, "f9f933648e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040840}, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r8, r8, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="2f000000180000005655e1f199fb61366a"], 0x20) (async) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@private1, 0x0}, &(0x7f0000000180)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r12], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xb, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x1000c042) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80008900}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r9, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x94}}, 0x2404c884) 1.41968928s ago: executing program 2 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xca1, 0x8001, 0x4}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000010403000000000000000000000007050001000100"], 0x1c}}, 0x20000890) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000104010100000000e1000000000000070500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.419338558s ago: executing program 4 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) (async) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x8) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r8, 0x894b, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r10) sendmsg$NFC_CMD_GET_TARGET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r12, 0x1}, 0x14}}, 0x24004044) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r11) 1.308593061s ago: executing program 2 (id=2381): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@allocspi={0xf8, 0x16, 0x8, 0x70bd2c, 0x25dfdbfd, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20, 0x7, 0x4e21, 0x4097, 0x2, 0x20, 0x180, 0x3c, 0x0, r2}, {@in=@loopback, 0x4d5, 0x17}, @in6=@mcast2, {0x2, 0x1, 0x9, 0x8, 0x3, 0x9, 0x2e80, 0xa}, {0x40, 0x2, 0x10, 0x1}, {0x1af3, 0x9, 0x8}, 0x70bd25, 0x3503, 0x2, 0x0, 0xe, 0xc}, 0x9, 0x61e80}}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x20010000) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, 0x0, 0x0, 0x2f, 0x0, "55a2b10d32b266512aa689d5eedb6157452bd550e1401cdd238fd68116e26dc398fc015d0f1fa9dedac8b64c16bc432251e22a1ba8b4d3e7787d41518101f4b0bbd1111e3335cfbf7a30f7c10bbbe843"}, 0xd8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0xff00, 0x7f}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000500)={r3, 0xdec}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000540)={0x2, [0x0, 0x0]}, &(0x7f0000000580)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000005c0)={r5}, 0x8) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x4000) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000780)=0xd9, 0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000007c0)={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, 0x59, 0x4, 0x2, 0x80, 0xfffffffffffffffb, 0x10080, r1}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000cc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3e4, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xda}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4905}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x770}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0ec}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x43b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x950}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x13}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x26a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b2b}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2de}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r8 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000d40)={{r8}, 0x6, &(0x7f0000000d00)=[0x0, 0x2, 0x4, 0x800, 0x6, 0x6], 0xfffffffffffffff7, 0xe}) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$FIOCLEX(r9, 0x5451) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000e00), 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x94, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{}, {0x24}, {0x36, 0x1}, {0x1b}, {0x6}, {0x24}, {0x6, 0x1}, {0x1}, {0xb, 0x1}, {0x3}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @NL80211_ATTR_MESH_SETUP={0x2c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_POWER(r11, 0x112, 0x9, &(0x7f0000001000)=0xde, 0x1) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, r10, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4048091) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001140)={@in6={{0xa, 0x4e22, 0xcc0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}}, 0x0, 0x0, 0x37, 0x0, "6ef8e943767cb9578d0e6fab99b60c20f3bcfd08bbc43b4b87981727f13d14c34e5822c362b7bee1c7deff61dd9caee6ad40c6c316a43c84677335da5b20761f456523be9e222da74033dd55756457c0"}, 0xd8) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x18002}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x10, 0x3fb, 0x8, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001340)={r6, 0x1000, "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"}, &(0x7f0000002380)=0x1008) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000002780)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002400)={0x33c, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x17c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x62, 0x1, "7904bbf1e1cff816a8bbe4c21f18bafa6d82e9948f860816f06a86c11065033845617a89f752cf5fca29ffc8d99f242e23bb68e09e571cf4f51ccc66599426bbba3428dd05a1b0f7a9f2f666b65c39765d916bf1202fb54bf29aea45cff7"}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x101, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x17c, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe7, 0x1, "60944422b90b2f25968a2a761cc8da00747787c59589421fd7d2a02f63fd1e4ee362b5918639a4e7a112334c0d42cac1c8fb6c092fb4f02af6ea72eccef2c3c69fadca12482d07cdac1732f72413acbd2a492cbe0cd2697f21c789eebbd1f10f992d2bf7710e5b869c1c608a32ededb2774eed665d3be13776b6f08f999ec5ad6711a5a48c5c35555b038a7491a2591b03ae21c456cc6542c8dd5d5b66ed144855119791b146bc833b678eb33bc91e64b7a5e6bf786946b4e03c63f01374e096e54a1e3e3840c9d9a11e18c91bef2e4b42c322c5c74da4e48c3c813a5dd4e959d604a7"}}, {0x80, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x79, 0x2, "7d6e91a09d17c13734b7cf5b1016e95b037819f425eb6fe3a98adb9423466c479bf883f940f2003542e9c07b183175704614b618b5dfc87bc73131c93c486a123faf8d1ba4006f2ffdbbae34d6f017a4dd6eaf4d0a4a27766cb3317e13730218838c27ab55da135c0cac48f883cec808b7fd93e2f0"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) 1.275351074s ago: executing program 4 (id=2382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)='4', 0x1) tee(r3, r2, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) close(r6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0xf0bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.217209758s ago: executing program 1 (id=2383): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x20040001) (async) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x20040001) close(0x3) r3 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="3019", 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) write$cgroup_devices(r3, &(0x7f0000000800)=ANY=[@ANYBLOB='m\x00'], 0xa) (async) write$cgroup_devices(r3, &(0x7f0000000800)=ANY=[@ANYBLOB='m\x00'], 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xfffffffc}}]}}}]}, 0x78}}, 0x0) 1.18169252s ago: executing program 0 (id=2384): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.115010876s ago: executing program 2 (id=2385): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000000000250000001900040004", 0x23}, {&(0x7f0000000480)="6506ac248ff4a1e553ec283566fb5f4135b95e8a23442b5786dadc1513fb5ebb2692a960d3f7cf91fee2c8007d3068ddeb4c6ce7ef63ca07eb90a84b8ceab0bea9d4c3b976e84c2bd38211f0264c09e8ef2ea99af4818dc8f07623e49407c74d9a9e2ad6fad8c52ae5bf7ce2de29c79c606491e2fccdfc7a2a7f9bc5bbc2afdf48e1c64536981caae3a8027bd77634d65b70d13995b218b62a935cce39ee1ff79e565e1293a9c2a54ab28094ade25d56f8a70d232b13425848b46eb9868dccdb3e798937aa93b5848cd3cb465d0e1f47dd3acd559008f64a397d00b48856c4346a290d985124", 0xe6}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1a3000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x10}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) listen(r3, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) 973.34459ms ago: executing program 1 (id=2386): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200001de45e5f2e21f006000000850000000500000095000000000000000000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 972.487549ms ago: executing program 0 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 907.665048ms ago: executing program 4 (id=2388): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000440)=0x101, 0x31) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000024f194e20"], 0xfdef) 824.818982ms ago: executing program 1 (id=2389): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c0005"], 0xc0}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 599.848779ms ago: executing program 3 (id=2390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000500)='GPL\x00', 0xfe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 598.364136ms ago: executing program 1 (id=2391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0xc}]}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [], "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"}}}}}}, 0xfce) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r4 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) 559.113542ms ago: executing program 0 (id=2392): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x7d4165c9) listen(r5, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendto$inet6(r2, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r11, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 476.905855ms ago: executing program 3 (id=2393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000480)="48d428fd81ed9c148ebe27222776d01f735121c0e0698d92d841f85ab122f007022494148eb104449973ab5dfc7b3c8f8f5c8ef840a42ec9c53c291e52b182a6214bfa042f024a9738a0e2d7cd8997f14a8b97ec6b769cdfe2205bd3c42e263bc6613e87103d18561cc473340c540b328e82da2e33c24a413ba130a4ac38a19249383e43bc9cac58f254c82d7f23077b6a9c76cf687a0d04c32aad486b02b15e400e95c3c96ebc0abab8385e0a5555081309e548879b3b7614f4", 0xba, 0x4, &(0x7f00000006c0)={0xa, 0x4e20, 0x5, @mcast2, 0x4}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f00000008c0)="db982a7108d6b4a2527c4bf2cc51400884c22b7e97c1f5bf42295d1ed4d72d5ba2562204e02496b67f6a94cfa8cfedafed70c9f5d94b527fe5a5c8aa223a7ffc4cf2b9078e1d8db3ea087b03ecb36691b2899550cdff65cc08f7934bb29191c8428590e147a296f5bf8753d0e0b62674279d7e776269df8b437b42c90056d79fc8c21dccbdc01d3fde7c37a17b2087124b07adb02fd55fc17bc945f245751805e2251666708ae301aefc96915d71f11e549f21ed57b8dd6279df23f60277b5bc53ff8062ad9d7d591fa8705edec60b3282d9cd3960b7f59f71159967e2598d17dee6e7434952245d9895d660d59e84d39ce5e7f2184742e6b7607f5197272fac0b186ea4e467be38dc6122dda029f1d51e37c0f2f78885bee5d33c667f4f6b327a71ca544b449bbc5bb4ce2eb81d9e03a4c9e71668fa2ac4b980ec9c01b1778dfc885357b8afcc05df41f0c76d0325248f5385b55336d2875018d2683077e266c047065351a77a538e2cd4fece0a15b572f3a6fda00998041b2dbd8fbec3a7202ce82fe4f46af490348913921d49e89f52c7f2e80c9406dcc3", &(0x7f0000000580)=""/214}, 0x20) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a80)={'vlan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) getpeername$packet(r4, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ec0)={'ip6tnl0\x00', &(0x7f0000000e40)={'syztnl2\x00', 0x0, 0x29, 0xd5, 0x5, 0x12b0, 0x48, @mcast2, @remote, 0x7800, 0x40, 0x3468, 0x3}}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r14, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r11, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r14}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001080)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x11c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x64}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000700)="70f811be149f37263ca89775700e90cef6d1ed9905c40d05301cd52b87de20326d80495a0891d3e5901a787e80c9eaa3bf345848b375699d4d1dd21cb68b2c314d7edfae28902cf14ba7fbe4cde122f73974485865d015195b0fdb59eccbaf288a65a2bb90b03e4bbf7d0908ba8953e832b64c411c080f457ca6bf9f97dab77397c00b33741e9f4b042da235c7a8c9e14b2d611569be8bb1e3f6893a17a6432ac21f91c402ad1d2a9729b3a1ce0158089427a5fb8472dd15901cd87308184d788441511922e4c500d0156bb5cd2e2e2ff501035505f3cbdbde92e5", &(0x7f0000000800)=""/97, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 303.916815ms ago: executing program 4 (id=2394): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018014000300fc"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r4) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r8, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040842) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000b1414c525090000ffdbdf2508003f0001000000080001000200000008000100010000000800010001000000a098676cb77072767bf3460f0c5a5400cad5d43f1a78007bca54fab95197c471aa90b3058d11e2ecb55c2defb4cb9e88652175100f742aaf6a"], 0x30}, 0x1, 0x0, 0x0, 0x4410}, 0x48000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032abd7000fddbdf2508000000050001010100000005000100000000003ce18bed3348d633fe56b9c47d77be5425c9b98105435cedd4263aff4f61ef2d9cfce1c36c60ec4f7d06081905e26a03694670d0ffb1917737ccde949144e2fd39412224f9540e9e581646ecdced269d7915301783012a790e28453e96a2a49745276291dc243ee7ae27ad8584b499ccd2779ae4db0fe9d74854"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0x10100) connect$inet(r9, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) splice(r9, 0x0, r0, 0x0, 0x5, 0xa) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, 0xfffffffffffffffc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00040324bd68627e0edf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041dfffff00080000080000009111c30000000000951a000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 299.920713ms ago: executing program 2 (id=2395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x823}}, 0x20}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xfffffffe, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x73}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) 223.30538ms ago: executing program 0 (id=2396): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) preadv(r0, 0x0, 0x0, 0x8, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x10}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 222.197687ms ago: executing program 3 (id=2397): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x48, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7a, 0x4, 0x5, 0x80, 0x1, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x58, &(0x7f00000001c0)}, 0x10) 98.569529ms ago: executing program 1 (id=2398): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f27, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x1, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="0200000002000000000043416d29da00"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x1, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="0200000002000000000043416d29da00"/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f0, 0x1170, 0x1170, 0x1f0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1f0, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xf5, 0x23, 0x7, '\x00', 'syz0\x00', {0xc}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000002840)=ANY=[@ANYBLOB="06040600080014000000450a0fc1006600000b89907864010101ffffffff3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80af5274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534b6c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb2677158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e96857308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e03048700000000000000000000002cdbc14f2dd2a4c482f9947d91ce577be6c5882c38a4786a55cf680f"], 0xfcb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r6) (async) syz_genetlink_get_family_id$nl802154(0x0, r6) socket(0x15, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, 0x0, 0x804) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, 0x0, 0x804) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf250200000008000100", @ANYBLOB="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", @ANYBLOB="0821017e", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000894}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf250200000008000100", @ANYBLOB="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", @ANYBLOB="0821017e", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000894}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x24, 0x0, &(0x7f0000000040)) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="d5dd2cbd7000fcdbdf7d0824500024003080200001800800010000001000140003800800020000000000060001000300000008000300", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x880) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f00000001c0)={'team0\x00', 0x16570113, 0x3}) socket(0x10, 0xa, 0xfffffffe) (async) socket(0x10, 0xa, 0xfffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0904000000000000000002000000140000001100010000000000000000000000000a2db5e836c6bf0d0e9cbd2823e3"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0904000000000000000002000000140000001100010000000000000000000000000a2db5e836c6bf0d0e9cbd2823e3"], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 668.777µs ago: executing program 2 (id=2399): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ffbfffff", @ANYRES16=r3, @ANYBLOB="00022dbd7000ffdbdf255500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 0s ago: executing program 4 (id=2400): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xa4}}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ffffff"], 0x50) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5f, &(0x7f00000000c0), 0x18}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, r3) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fcdbdf250900000005080001000100"/30], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100025bd7000fedbdf2511000000080015000200000008001500c00000f16bebd0e05a79cba0ca8a2c961f0008000100", @ANYRES32=r7, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c004) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) epoll_pwait(r8, &(0x7f0000000680)=[{}], 0x1, 0x4857, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) r11 = socket$alg(0x26, 0x5, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0) bind$alg(r11, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c99bfa", 0x3) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000040), 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): 72 - 0 [ 123.474172][ T6855] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.499067][ T6855] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.544761][ T6855] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.573657][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 123.586283][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 123.595839][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 124.095518][ T7269] netlink: 96 bytes leftover after parsing attributes in process `syz.4.416'. [ 124.337772][ T7277] netlink: 244 bytes leftover after parsing attributes in process `syz.4.416'. [ 124.565159][ T7291] netlink: 5 bytes leftover after parsing attributes in process `syz.4.423'. [ 124.998507][ T7313] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 125.028441][ T7313] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 125.353863][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 125.677389][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 126.097568][ T7372] openvswitch: netlink: Key type 79 is out of range max 32 [ 126.577924][ T7369] syzkaller0: entered promiscuous mode [ 126.620454][ T7369] syzkaller0: entered allmulticast mode [ 126.679514][ T7403] batadv_slave_0: Caught tx_queue_len zero misconfig [ 126.933566][ T7411] netlink: 'syz.1.453': attribute type 30 has an invalid length. [ 127.275510][ T7427] netlink: 'syz.2.456': attribute type 8 has an invalid length. [ 128.529996][ T7411] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 128.532750][ T7423] __nla_validate_parse: 1 callbacks suppressed [ 128.532768][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.455'. [ 128.582881][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.591967][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.924911][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.979801][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.165880][ T7461] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.460'. [ 129.314995][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 129.390772][ T7472] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 129.578088][ T7476] syzkaller0: entered promiscuous mode [ 129.605481][ T7476] syzkaller0: entered allmulticast mode [ 129.773094][ T7479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.856646][ T7484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'. [ 129.965843][ T7479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.110333][ T7479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.225123][ T7479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.474850][ T1016] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.641026][ T6855] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.667966][ T6855] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.687731][ T7524] netlink: 'syz.3.484': attribute type 22 has an invalid length. [ 130.699974][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 130.746025][ T6853] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.820200][ T7525] netlink: 'syz.3.484': attribute type 22 has an invalid length. [ 130.829614][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 130.851570][ T7524] netlink: 'syz.3.484': attribute type 22 has an invalid length. [ 130.882975][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 131.020045][ T7525] netlink: 'syz.3.484': attribute type 22 has an invalid length. [ 131.058770][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 131.187092][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'. [ 131.216145][ T7546] netlink: 'syz.0.490': attribute type 12 has an invalid length. [ 131.447965][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 131.734533][ T7568] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 132.026677][ T7577] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 132.164553][ T7584] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 132.315406][ T7596] bridge2: entered promiscuous mode [ 132.325097][ T7596] bond3: (slave bridge2): making interface the new active one [ 132.333674][ T7596] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 132.412676][ T7603] IPv6: Can't replace route, no match found [ 132.420135][ T7603] IPv6: Can't replace route, no match found [ 132.477307][ T7591] dvmrp8: entered allmulticast mode [ 132.801470][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.923909][ T7633] netlink: 'syz.1.520': attribute type 2 has an invalid length. [ 132.934838][ T7633] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.106438][ T7591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.154709][ T7595] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 133.407697][ T7645] netlink: 'syz.3.523': attribute type 1 has an invalid length. [ 133.580199][ T7645] __nla_validate_parse: 5 callbacks suppressed [ 133.580217][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 133.619555][ T7645] bridge2: entered promiscuous mode [ 133.628962][ T7645] bond3: (slave bridge2): making interface the new active one [ 133.637242][ T7645] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 133.801340][ T7667] netlink: 68 bytes leftover after parsing attributes in process `syz.3.529'. [ 134.031416][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 134.075181][ T7676] netlink: 92 bytes leftover after parsing attributes in process `syz.3.531'. [ 134.824926][ T7709] netlink: 'syz.2.538': attribute type 1 has an invalid length. [ 134.933290][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 134.964979][ T7709] bridge1: entered promiscuous mode [ 134.979686][ T7709] bond1: (slave bridge1): making interface the new active one [ 134.988093][ T7709] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 135.195658][ T7723] sctp: [Deprecated]: syz.2.543 (pid 7723) Use of int in max_burst socket option. [ 135.195658][ T7723] Use struct sctp_assoc_value instead [ 135.212891][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 135.223331][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 137.013704][ T7677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.170861][ T7726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 137.556799][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 137.635783][ T7754] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 137.830355][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 137.896962][ T7754] bridge3: entered promiscuous mode [ 137.924238][ T5638] block nbd0: Receive control failed (result -32) [ 137.934667][ T7754] bond7: (slave bridge3): making interface the new active one [ 137.950274][ T7754] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 138.238013][ T7777] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 138.251211][ T7777] bond3 (unregistering): Released all slaves [ 138.767199][ T7805] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 138.786391][ T7805] netlink: 'syz.2.564': attribute type 2 has an invalid length. [ 138.797665][ T7805] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 138.871701][ T7808] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 139.051470][ T7817] __nla_validate_parse: 2 callbacks suppressed [ 139.051490][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 139.420801][ T7840] tipc: Failed to remove unknown binding: 66,1,1/0:936431053/936431055 [ 139.445807][ T7840] tipc: Failed to remove unknown binding: 66,1,1/0:936431053/936431055 [ 139.591477][ T7844] openvswitch: netlink: IP tunnel dst address not specified [ 139.748663][ T7857] netlink: 'syz.3.580': attribute type 58 has an invalid length. [ 139.787368][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 140.295694][ T7882] bridge4: entered promiscuous mode [ 140.303454][ T7882] bridge4: entered allmulticast mode [ 140.379806][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 140.415599][ T7891] Cannot find set identified by id 0 to match [ 140.466351][ T7887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.491164][ T7897] sctp: [Deprecated]: syz.4.591 (pid 7897) Use of int in maxseg socket option. [ 140.491164][ T7897] Use struct sctp_assoc_value instead [ 140.506360][ T7887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.531675][ T7887] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 140.550270][ T7887] bond0 (unregistering): Released all slaves [ 140.660990][ T7894] bond3 (unregistering): Released all slaves [ 140.763391][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 140.935443][ T7911] bond0: entered promiscuous mode [ 140.947380][ T7911] bond_slave_0: entered promiscuous mode [ 140.971618][ T7911] bond_slave_1: entered promiscuous mode [ 140.996368][ T7911] batadv0: entered promiscuous mode [ 141.014831][ T7911] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 141.041082][ T7919] netlink: 'syz.3.600': attribute type 1 has an invalid length. [ 141.059141][ T7919] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.600'. [ 141.061433][ T7914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.598'. [ 141.112174][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 141.133551][ T7925] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.352909][ T7931] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.603'. [ 141.542565][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.3.609'. [ 141.685961][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 141.955384][ T7964] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 141.999182][ T7961] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 142.046918][ T808] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.290868][ T7975] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 142.905990][ T8005] SET target dimension over the limit! [ 143.098171][ T8015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.673886][ T8044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.693699][ T8044] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 143.771614][ T6854] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.812791][ T8049] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 143.824132][ T6854] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.849388][ T6846] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.883903][ T6846] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.993520][ T8049] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.064955][ T8059] __nla_validate_parse: 12 callbacks suppressed [ 144.064974][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 144.102764][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 144.115385][ T8059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.649'. [ 144.162621][ T8059] geneve2: entered promiscuous mode [ 144.169578][ T8059] geneve2: entered allmulticast mode [ 144.180051][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 144.439367][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 144.475835][ T8073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.655'. [ 144.528769][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 145.058845][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'. [ 146.127474][ T8172] syzkaller0: entered promiscuous mode [ 146.133806][ T8172] syzkaller0: entered allmulticast mode [ 146.312374][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 147.272219][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.696'. [ 147.458204][ T8248] IPVS: length: 30 != 24 [ 148.455106][ T8306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.823231][ T8328] openvswitch: netlink: Flow actions attr not present in new flow. [ 148.841432][ T8328] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.106065][ T8336] __nla_validate_parse: 7 callbacks suppressed [ 149.106085][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'. [ 151.367057][ T8301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.783192][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 151.857956][ T8364] netlink: 'syz.2.737': attribute type 16 has an invalid length. [ 151.882577][ T8364] netlink: 'syz.2.737': attribute type 17 has an invalid length. [ 152.024856][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.032647][ T8364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.040780][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.047988][ T8364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.095317][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 152.171631][ T8364] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.193683][ T8379] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.742'. [ 152.224627][ T8364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.235137][ T8364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.244570][ T8364] bridge1: left promiscuous mode [ 152.257574][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 153.036155][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 153.107794][ T8418] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.757'. [ 153.258150][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.762'. [ 153.340266][ T8435] xt_connbytes: Forcing CT accounting to be enabled [ 153.466999][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'. [ 153.718181][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 153.923095][ T8473] netlink: 'syz.4.774': attribute type 19 has an invalid length. [ 153.994034][ T8475] netlink: 'syz.4.775': attribute type 1 has an invalid length. [ 154.046821][ T8475] bridge2: entered promiscuous mode [ 154.056971][ T8475] bond2: (slave bridge2): making interface the new active one [ 154.066109][ T8424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.075007][ T8475] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 154.318073][ T8487] raw_sendmsg: syz.3.777 forgot to set AF_INET. Fix it! [ 154.432628][ T8491] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 154.582722][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.626196][ T8497] bond0: (slave geneve2): making interface the new active one [ 154.636960][ T8497] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 154.646771][ T8498] __nla_validate_parse: 3 callbacks suppressed [ 154.646788][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 154.664283][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 154.727838][ T8502] syzkaller0: entered promiscuous mode [ 154.735400][ T8502] syzkaller0: entered allmulticast mode [ 154.867160][ T8511] IPVS: Error connecting to the multicast addr [ 154.893890][ T8511] syzkaller0: entered promiscuous mode [ 154.902902][ T8511] syzkaller0: entered allmulticast mode [ 154.998561][ T8516] bridge_slave_0: left allmulticast mode [ 155.004566][ T8516] bridge_slave_0: left promiscuous mode [ 155.015609][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.166401][ T8522] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 155.284156][ T8525] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 155.406230][ T8516] bridge_slave_1: left allmulticast mode [ 155.412231][ T8516] bridge_slave_1: left promiscuous mode [ 155.418219][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.463471][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 155.506622][ T8516] bond0: (slave bond_slave_0): Releasing backup interface [ 155.524224][ T8516] bond0: (slave bond_slave_1): Releasing backup interface [ 155.569572][ T8516] team0: Port device team_slave_0 removed [ 155.608941][ T8516] team0: Port device team_slave_1 removed [ 155.623081][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.630985][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.640125][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.647597][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.659407][ T8516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.847053][ T8528] bridge3: entered promiscuous mode [ 155.862806][ T8528] bond5: (slave bridge3): making interface the new active one [ 155.871377][ T8528] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 156.090473][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 156.155938][ T8549] sock: sock_set_timeout: `syz.3.794' (pid 8549) tries to set negative timeout [ 156.171030][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 156.315885][ T8556] bridge4: entered promiscuous mode [ 156.342124][ T8556] bridge4: entered allmulticast mode [ 156.586580][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'. [ 156.754031][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 156.818064][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 156.848813][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 156.879864][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 157.226373][ T8598] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 157.254221][ T8598] netlink: 'syz.4.810': attribute type 1 has an invalid length. [ 157.320123][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.091171][ T8644] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.157679][ T8645] team0: No ports can be present during mode change [ 158.182622][ T8644] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 158.222363][ T8648] netlink: 'syz.1.824': attribute type 11 has an invalid length. [ 158.356083][ T8648] bond7 (unregistering): Released all slaves [ 158.406067][ T8661] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 158.590896][ T8672] netlink: 'syz.2.830': attribute type 23 has an invalid length. [ 158.736811][ T8674] syzkaller0: entered promiscuous mode [ 158.769638][ T8674] syzkaller0: entered allmulticast mode [ 159.048777][ T8683] veth0: entered promiscuous mode [ 159.061450][ T8683] batadv_slave_1: entered promiscuous mode [ 159.095918][ T8683] syzkaller0: entered promiscuous mode [ 159.117954][ T8683] syzkaller0: entered allmulticast mode [ 159.212719][ T8681] batadv_slave_1: left promiscuous mode [ 159.234699][ T8681] veth0: left promiscuous mode [ 159.484965][ T8707] SET target dimension over the limit! [ 159.530426][ T8707] SET target dimension over the limit! [ 159.570547][ T8707] SET target dimension over the limit! [ 159.613756][ T8707] SET target dimension over the limit! [ 159.633405][ T8707] SET target dimension over the limit! [ 159.656202][ T8707] SET target dimension over the limit! [ 159.676636][ T8707] SET target dimension over the limit! [ 159.698526][ T8707] SET target dimension over the limit! [ 159.707184][ T8707] SET target dimension over the limit! [ 159.714433][ T8711] xt_CT: No such helper "snmp" [ 159.722973][ T8707] SET target dimension over the limit! [ 159.954589][ T8725] netlink: 'syz.1.848': attribute type 1 has an invalid length. [ 159.973449][ T8725] netlink: 'syz.1.848': attribute type 3 has an invalid length. [ 159.982874][ T8725] __nla_validate_parse: 6 callbacks suppressed [ 159.982910][ T8725] netlink: 224 bytes leftover after parsing attributes in process `syz.1.848'. [ 160.056483][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 160.111499][ T8729] netlink: 'syz.0.850': attribute type 12 has an invalid length. [ 160.722503][ T8756] syzkaller0: entered promiscuous mode [ 160.746579][ T8756] syzkaller0: entered allmulticast mode [ 161.307970][ T8790] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.342277][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'. [ 161.555329][ T5288] veth0_vlan: left promiscuous mode [ 161.626273][ T8801] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 161.651592][ T9] veth0_vlan: entered promiscuous mode [ 161.674804][ T9] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.747583][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 161.855811][ T8808] bond4: entered promiscuous mode [ 161.903206][ T8808] bond4: entered allmulticast mode [ 162.106718][ T8824] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 162.140376][ T8824] netlink: 228 bytes leftover after parsing attributes in process `syz.0.881'. [ 162.152027][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.882'. [ 162.210728][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 162.216371][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 162.504059][ T8843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.545374][ T8843] syzkaller1: entered promiscuous mode [ 162.611951][ T8843] syzkaller1: entered allmulticast mode [ 162.815396][ T8856] bridge4: entered promiscuous mode [ 162.838980][ T8856] bridge4: entered allmulticast mode [ 163.007269][ T8869] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 163.007269][ T8869] Please contact the netfilter-devel mailing list or update your nftables rules. [ 163.046582][ T8864] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 163.063815][ T8871] netlink: 88 bytes leftover after parsing attributes in process `syz.0.892'. [ 163.097466][ T8857] trusted_key: syz.3.889 sent an empty control message without MSG_MORE. [ 163.115248][ T8871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.892'. [ 163.709840][ T8903] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 163.830863][ T8899] syzkaller1: entered allmulticast mode [ 163.955062][ T8916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.146168][ T8914] bridge4: entered promiscuous mode [ 164.197153][ T8914] bond5: (slave bridge4): making interface the new active one [ 164.224017][ T8914] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 164.283624][ T8921] syzkaller1: entered promiscuous mode [ 164.312907][ T8921] syzkaller1: entered allmulticast mode [ 164.650100][ T8951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.960635][ T8977] macvtap2: entered promiscuous mode [ 164.974597][ T8977] macvtap2: entered allmulticast mode [ 165.036330][ T8981] __nla_validate_parse: 7 callbacks suppressed [ 165.036343][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 165.242158][ T8988] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 165.362492][ T8997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.372105][ T8997] syzkaller1: entered promiscuous mode [ 165.385940][ T8997] syzkaller1: entered allmulticast mode [ 167.716296][ T8955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.924902][ T9009] netlink: 'syz.2.928': attribute type 2 has an invalid length. [ 168.017305][ T9018] xt_recent: Unsupported userspace flags (000000b1) [ 168.057730][ T9004] bond5: entered promiscuous mode [ 168.063697][ T9021] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 168.141961][ T9019] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 168.176831][ T9019] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.475846][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 168.493051][ T9040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.544227][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 168.566135][ T6850] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.575837][ T6850] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.594800][ T9045] syzkaller1: entered promiscuous mode [ 168.606382][ T9045] syzkaller1: entered allmulticast mode [ 168.613882][ T6850] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.637519][ T6850] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.909476][ T9060] xt_hashlimit: size too large, truncated to 1048576 [ 169.195297][ T9067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.943'. [ 169.229455][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.237873][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.308681][ T9075] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.946'. [ 169.445010][ T9080] smc: net device team0 applied user defined pnetid SYZ2 [ 169.467567][ T9080] netlink: 204 bytes leftover after parsing attributes in process `syz.0.948'. [ 169.638776][ T9087] netlink: 'syz.0.951': attribute type 4 has an invalid length. [ 170.086583][ T9104] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 170.107248][ T9107] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.137350][ T9111] bond0: Error: Cannot enslave bond to itself. [ 170.166448][ T9110] bond0: Error: Cannot enslave bond to itself. [ 170.175527][ T9113] tipc: MTU too low for tipc bearer [ 170.181453][ T9104] netlink: 'syz.1.956': attribute type 7 has an invalid length. [ 170.190579][ T9107] syzkaller1: entered promiscuous mode [ 170.196429][ T9107] syzkaller1: entered allmulticast mode [ 170.222415][ T9113] tipc: MTU too low for tipc bearer [ 170.233624][ T9111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 170.259669][ T9110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.958'. [ 170.829337][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.3.967'. [ 170.962546][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'. [ 170.987629][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 171.469860][ T9167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.557413][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'. [ 171.612661][ T9167] syzkaller1: entered promiscuous mode [ 171.628200][ T9167] syzkaller1: entered allmulticast mode [ 171.666257][ T9183] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 174.450432][ T9172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.656051][ T9231] netlink: 'syz.0.987': attribute type 30 has an invalid length. [ 174.690134][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 174.868512][ T9245] 8021q: VLANs not supported on ip_vti0 [ 174.895511][ T9245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 175.003243][ T9251] netlink: 'syz.0.990': attribute type 11 has an invalid length. [ 175.025169][ T9251] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 175.055854][ T9251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.990'. [ 175.112470][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 175.286892][ T9251] team1: entered promiscuous mode [ 175.320060][ T9251] team1: entered allmulticast mode [ 175.366367][ T9265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.020047][ T9303] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 176.066224][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 176.151287][ T9310] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1008'. [ 176.185285][ T9313] lo: entered allmulticast mode [ 176.240492][ T9313] tunl0: entered allmulticast mode [ 176.360216][ T9313] gre0: entered allmulticast mode [ 176.420072][ T9313] gretap0: entered allmulticast mode [ 176.610429][ T9313] erspan0: entered allmulticast mode [ 176.656090][ T9313] ip_vti0: entered allmulticast mode [ 176.696224][ T9313] ip6_vti0: entered allmulticast mode [ 176.717211][ T9313] sit0: entered allmulticast mode [ 176.731821][ T9313] ip6tnl0: entered allmulticast mode [ 176.742473][ T9313] ip6gre0: entered allmulticast mode [ 176.769036][ T9313] syz_tun: entered allmulticast mode [ 177.112891][ T9349] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 177.172023][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 177.219934][ T9352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1017'. [ 177.244274][ T9349] bond7: (slave geneve2): making interface the new active one [ 177.272062][ T9349] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 177.298677][ T6855] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.333174][ T6855] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.345441][ T9360] netlink: 'syz.0.1016': attribute type 11 has an invalid length. [ 177.365641][ T9360] netlink: 'syz.0.1016': attribute type 8 has an invalid length. [ 177.373983][ T9360] netlink: 4064 bytes leftover after parsing attributes in process `syz.0.1016'. [ 177.384156][ T6855] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.393923][ T6855] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 177.661583][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 177.761494][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 177.780578][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 177.790961][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 177.801421][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1020'. [ 178.264472][ T9405] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 178.492891][ T9420] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 178.513622][ T9410] bond7: (slave gretap2): making interface the new active one [ 178.534620][ T9410] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 178.693617][ T9432] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 178.718574][ T9432] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 178.752139][ T9432] NCSI netlink: No device for ifindex 813332851 [ 178.854001][ T9431] bridge4: entered promiscuous mode [ 178.863889][ T9431] bond8: (slave bridge4): making interface the new active one [ 178.872113][ T9431] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 178.972414][ T9421] syzkaller0: entered promiscuous mode [ 178.994429][ T9421] syzkaller0: entered allmulticast mode [ 179.245084][ T9461] netlink: 'syz.3.1043': attribute type 12 has an invalid length. [ 179.482094][ T9475] ipt_rpfilter: unknown options [ 180.935838][ T9494] validate_nla: 2 callbacks suppressed [ 180.935862][ T9494] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 180.956415][ T9493] gtp1: entered promiscuous mode [ 180.972448][ T9493] gtp1: entered allmulticast mode [ 181.188980][ T9496] __nla_validate_parse: 36 callbacks suppressed [ 181.189001][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 181.250897][ T9496] bridge4: entered promiscuous mode [ 181.280252][ T9496] bond11: (slave bridge4): making interface the new active one [ 181.309356][ T9496] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 181.375910][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.649630][ T9521] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 181.667803][ T9532] Can't find ip_set type Iash:net,net [ 181.871833][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 181.884008][ T9549] syzkaller1: entered promiscuous mode [ 181.944267][ T9549] syzkaller1: entered allmulticast mode [ 182.151547][ T9560] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1070'. [ 182.189221][ T9565] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 182.254477][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 182.349459][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 182.377848][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 182.443240][ T9580] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 182.477480][ T9577] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1073'. [ 182.533199][ T9566] hsr_slave_1 (unregistering): left promiscuous mode [ 182.560711][ T9578] bridge5: entered promiscuous mode [ 182.570525][ T9578] bond8: (slave bridge5): making interface the new active one [ 182.579147][ T9578] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 182.595239][ T9580] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 182.609997][ T9581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 182.814394][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 182.864147][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1079'. [ 182.962841][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 183.175379][ T9605] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 183.356255][ T9620] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 183.502130][ T9620] bridge3: entered promiscuous mode [ 183.529088][ T9620] bond6: (slave bridge3): making interface the new active one [ 183.537413][ T9620] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 183.824177][ T9641] bridge4: entered promiscuous mode [ 183.831285][ T9641] bridge4: entered allmulticast mode [ 184.036789][ T9652] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.171805][ T9659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.201596][ T9659] syzkaller1: entered promiscuous mode [ 184.237408][ T9659] syzkaller1: entered allmulticast mode [ 184.282431][ T9666] openvswitch: netlink: Message has 263 unknown bytes. [ 184.727463][ T9689] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 184.938599][ T9699] xt_limit: Overflow, try lower: 604147548/4200216962 [ 185.218876][ T9717] IPv6: addrconf: prefix option has invalid lifetime [ 185.389215][ T9727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.402247][ T9682] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 185.435554][ T9727] syzkaller1: entered promiscuous mode [ 185.456149][ T9727] syzkaller1: entered allmulticast mode [ 185.482189][ T9729] netlink: 'syz.1.1120': attribute type 11 has an invalid length. [ 185.510569][ T9729] netlink: 'syz.1.1120': attribute type 4 has an invalid length. [ 186.122994][ T9755] tc action pedit 'at' offset 6 out of bounds [ 186.268442][ T9764] __nla_validate_parse: 11 callbacks suppressed [ 186.268461][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 186.446615][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1133'. [ 186.587636][ T9787] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1133'. [ 186.627671][ T9786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.667695][ T9789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 186.706814][ T9786] syzkaller1: entered promiscuous mode [ 186.717301][ T9786] syzkaller1: entered allmulticast mode [ 186.739147][ T9791] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 186.761831][ T9791] netlink: 'syz.0.1139': attribute type 3 has an invalid length. [ 186.778196][ T9791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1139'. [ 186.795530][ T9789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1138'. [ 186.812052][ T9794] gretap3: entered promiscuous mode [ 186.819039][ T9794] batman_adv: batadv0: Adding interface: gretap3 [ 186.825446][ T9794] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.853028][ T9794] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 186.866513][ T9789] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1138'. [ 187.383196][ T9820] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1149'. [ 187.427517][ T9824] netlink: 'syz.1.1150': attribute type 3 has an invalid length. [ 187.696249][ T9833] netlink: 'syz.1.1154': attribute type 7 has an invalid length. [ 187.721460][ T9841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.722762][ T9833] netlink: 'syz.1.1154': attribute type 8 has an invalid length. [ 187.815227][ T9841] syzkaller1: entered promiscuous mode [ 187.828377][ T9841] syzkaller1: entered allmulticast mode [ 187.903102][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1159'. [ 188.411323][ T9869] syzkaller0: entered promiscuous mode [ 188.417253][ T9866] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1165'. [ 188.427193][ T9869] syzkaller0: entered allmulticast mode [ 188.624611][ T9879] sctp: [Deprecated]: syz.4.1169 (pid 9879) Use of int in max_burst socket option. [ 188.624611][ T9879] Use struct sctp_assoc_value instead [ 189.090087][ T9899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.116771][ T9899] syzkaller1: entered promiscuous mode [ 189.153679][ T9899] syzkaller1: entered allmulticast mode [ 189.969399][ T9939] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 190.036695][ T9941] netlink: 'syz.4.1187': attribute type 1 has an invalid length. [ 190.508596][ T9963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.518085][ T9951] bridge5: entered promiscuous mode [ 190.545617][ T9951] bond8: (slave bridge5): making interface the new active one [ 190.555260][ T9951] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 190.579356][ T9962] lo speed is unknown, defaulting to 1000 [ 190.586008][ T9962] lo speed is unknown, defaulting to 1000 [ 190.595798][ T9962] lo speed is unknown, defaulting to 1000 [ 190.628822][ T9962] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 190.685769][ T9962] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 190.755036][ T9962] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 190.817514][ T9962] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.880723][ T9965] syzkaller1: entered promiscuous mode [ 190.897983][ T9965] syzkaller1: entered allmulticast mode [ 190.912456][ T9962] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 191.082708][ T9962] lo speed is unknown, defaulting to 1000 [ 191.110061][ T9962] lo speed is unknown, defaulting to 1000 [ 191.111838][ T9979] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 191.125804][ T9962] lo speed is unknown, defaulting to 1000 [ 191.135974][ T9962] lo speed is unknown, defaulting to 1000 [ 191.144648][ T9979] netlink: 'syz.3.1195': attribute type 2 has an invalid length. [ 191.157167][ T9962] lo speed is unknown, defaulting to 1000 [ 191.164376][ T9981] netlink: 'syz.3.1195': attribute type 1 has an invalid length. [ 191.188823][ T9981] netlink: 'syz.3.1195': attribute type 2 has an invalid length. [ 191.403650][ T9987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.431603][ T5780] lo speed is unknown, defaulting to 1000 [ 192.057674][T10017] __nla_validate_parse: 8 callbacks suppressed [ 192.057692][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 192.256279][T10017] 8021q: adding VLAN 0 to HW filter on device bond12 [ 192.385292][T10028] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 192.444664][T10023] syzkaller0: entered promiscuous mode [ 192.461979][T10023] syzkaller0: entered allmulticast mode [ 192.501733][T10031] bridge0: port 3(dummy0) entered blocking state [ 192.516104][T10031] bridge0: port 3(dummy0) entered disabled state [ 192.529401][T10031] dummy0: entered allmulticast mode [ 192.544683][T10031] dummy0: entered promiscuous mode [ 192.551282][T10031] bridge0: port 3(dummy0) entered blocking state [ 192.558458][T10031] bridge0: port 3(dummy0) entered forwarding state [ 194.241726][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.384147][T10062] tipc: Started in network mode [ 194.392529][T10062] tipc: Node identity 7eb1b463dd97, cluster identity 4711 [ 194.409322][T10062] tipc: Enabled bearer , priority 0 [ 194.435504][T10062] syzkaller0: entered promiscuous mode [ 194.464256][T10062] syzkaller0: entered allmulticast mode [ 194.514026][T10062] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1220'. [ 194.564117][T10062] tipc: Resetting bearer [ 194.665756][T10060] tipc: Resetting bearer [ 194.770775][T10060] tipc: Disabling bearer [ 195.344554][T10108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.467242][T10112] xt_TCPMSS: Only works on TCP SYN packets [ 195.489862][T10118] netlink: 'syz.3.1235': attribute type 24 has an invalid length. [ 195.694461][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 195.806690][T10125] sctp: [Deprecated]: syz.1.1237 (pid 10125) Use of int in maxseg socket option. [ 195.806690][T10125] Use struct sctp_assoc_value instead [ 195.825478][ T6855] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.858681][T10137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1241'. [ 195.869691][ T6855] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.891508][ T6855] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.994489][ T6855] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.229443][T10157] ªªªªª»: renamed from dummy0 (while UP) [ 196.592853][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 196.736960][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 196.881369][T10187] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1252'. [ 197.654335][T10229] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 197.858870][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'. [ 197.927546][T10239] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1269'. [ 198.163980][T10247] bridge3: entered promiscuous mode [ 198.198405][T10247] bridge3: entered allmulticast mode [ 198.236481][T10254] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 198.488840][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'. [ 198.640646][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'. [ 198.661973][T10275] bridge6: entered promiscuous mode [ 198.675796][T10275] bond10: (slave bridge6): making interface the new active one [ 198.684218][T10275] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 199.056413][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 199.254502][ T9336] IPVS: starting estimator thread 0... [ 199.265552][ T5638] Bluetooth: hci3: link tx timeout [ 199.273422][ T5638] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.337183][ T5642] Bluetooth: hci3: link tx timeout [ 199.343411][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.369238][ T5642] Bluetooth: hci3: link tx timeout [ 199.375091][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.382923][T10316] IPVS: using max 30 ests per chain, 72000 per kthread [ 199.510476][ T5642] Bluetooth: hci3: link tx timeout [ 199.515697][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.239019][ T5642] Bluetooth: hci3: link tx timeout [ 200.245371][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.563072][ T5642] Bluetooth: hci3: link tx timeout [ 200.568486][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 200.979167][ T5642] Bluetooth: hci3: link tx timeout [ 200.984429][ T5642] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 201.358473][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 201.458755][T10271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.640685][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'. [ 202.405652][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 202.748198][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 202.764277][T10390] openvswitch: netlink: Unknown key attributes 20 [ 202.774273][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1304'. [ 202.787552][T10391] netlink: 'syz.3.1304': attribute type 7 has an invalid length. [ 202.800112][T10391] netlink: 'syz.3.1304': attribute type 8 has an invalid length. [ 202.809660][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 203.707930][T10405] bridge7: entered promiscuous mode [ 203.713692][T10405] bridge7: entered allmulticast mode [ 205.420988][T10372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.625860][T10431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1314'. [ 205.765006][T10436] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1316'. [ 205.928764][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 206.143529][T10458] bridge6: entered promiscuous mode [ 206.162978][T10458] bridge6: entered allmulticast mode [ 206.346798][T10461] syzkaller0: entered promiscuous mode [ 206.366193][T10461] syzkaller0: entered allmulticast mode [ 206.552909][T10475] netlink: 'syz.3.1330': attribute type 83 has an invalid length. [ 206.564474][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 206.570643][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 206.578472][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 206.741036][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1334'. [ 207.072752][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 208.288119][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 208.533694][T10509] netlink: 'syz.4.1339': attribute type 5 has an invalid length. [ 208.551959][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 208.577706][T10516] netlink: 'syz.0.1341': attribute type 21 has an invalid length. [ 208.594707][T10516] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.697596][T10519] netlink: 'syz.4.1342': attribute type 21 has an invalid length. [ 208.742468][T10519] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1342'. [ 208.847916][T10526] vcan1: entered promiscuous mode [ 208.893407][T10526] vcan1: entered allmulticast mode [ 209.003276][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 209.232467][T10546] netlink: 'syz.4.1351': attribute type 1 has an invalid length. [ 209.372173][T10553] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1353'. [ 209.437549][T10559] Unsupported ieee802154 address type: 0 [ 209.471253][T10558] bridge6: entered promiscuous mode [ 209.504018][T10559] Unsupported ieee802154 address type: 0 [ 209.521506][T10558] bond10: (slave bridge6): making interface the new active one [ 209.548042][T10559] Unsupported ieee802154 address type: 0 [ 209.553901][T10558] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 209.578907][T10559] Unsupported ieee802154 address type: 0 [ 209.589386][T10559] Unsupported ieee802154 address type: 0 [ 209.622009][T10559] Unsupported ieee802154 address type: 0 [ 209.637908][T10559] Unsupported ieee802154 address type: 0 [ 209.653842][T10559] Unsupported ieee802154 address type: 0 [ 209.667676][T10559] Unsupported ieee802154 address type: 0 [ 209.681936][T10559] Unsupported ieee802154 address type: 0 [ 209.688357][T10548] syzkaller0: entered promiscuous mode [ 209.694362][T10559] Unsupported ieee802154 address type: 0 [ 209.700388][T10548] syzkaller0: entered allmulticast mode [ 209.707553][T10559] Unsupported ieee802154 address type: 0 [ 209.714652][T10559] Unsupported ieee802154 address type: 0 [ 209.726236][T10559] Unsupported ieee802154 address type: 0 [ 209.738004][T10559] Unsupported ieee802154 address type: 0 [ 209.752049][T10559] Unsupported ieee802154 address type: 0 [ 209.770171][T10559] Unsupported ieee802154 address type: 0 [ 209.782732][T10559] Unsupported ieee802154 address type: 0 [ 209.795005][T10559] Unsupported ieee802154 address type: 0 [ 209.821806][T10559] Unsupported ieee802154 address type: 0 [ 209.838778][T10559] Unsupported ieee802154 address type: 0 [ 209.863080][T10559] Unsupported ieee802154 address type: 0 [ 209.904137][T10559] Unsupported ieee802154 address type: 0 [ 209.931407][T10559] Unsupported ieee802154 address type: 0 [ 209.956726][T10559] Unsupported ieee802154 address type: 0 [ 209.982126][T10559] Unsupported ieee802154 address type: 0 [ 210.001294][T10559] Unsupported ieee802154 address type: 0 [ 210.018089][T10559] Unsupported ieee802154 address type: 0 [ 210.035414][T10559] Unsupported ieee802154 address type: 0 [ 210.054530][T10559] Unsupported ieee802154 address type: 0 [ 210.060994][T10559] Unsupported ieee802154 address type: 0 [ 210.079335][T10559] Unsupported ieee802154 address type: 0 [ 210.094122][T10559] Unsupported ieee802154 address type: 0 [ 210.107732][T10559] Unsupported ieee802154 address type: 0 [ 210.122820][T10559] Unsupported ieee802154 address type: 0 [ 210.137670][T10559] Unsupported ieee802154 address type: 0 [ 210.152068][T10559] Unsupported ieee802154 address type: 0 [ 210.166023][T10559] Unsupported ieee802154 address type: 0 [ 210.172999][T10559] Unsupported ieee802154 address type: 0 [ 210.179978][T10559] Unsupported ieee802154 address type: 0 [ 210.194855][T10559] Unsupported ieee802154 address type: 0 [ 211.773570][T10582] __nla_validate_parse: 2 callbacks suppressed [ 211.773590][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 211.844521][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 211.942632][T10590] netlink: 'syz.1.1362': attribute type 83 has an invalid length. [ 212.074662][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1364'. [ 212.141061][T10602] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 212.267566][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 212.287479][T10602] bridge3: entered promiscuous mode [ 212.297624][T10602] bond4: (slave bridge3): making interface the new active one [ 212.307694][T10602] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 212.447077][T10612] bond1: entered allmulticast mode [ 212.453012][T10612] ip6gre1: entered allmulticast mode [ 212.469842][T10608] bond1: left allmulticast mode [ 212.475705][T10608] ip6gre1: left allmulticast mode [ 212.603696][T10614] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 212.890048][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 212.910078][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 213.023132][T10630] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1376'. [ 213.053365][T10630] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.079078][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 213.164567][T10635] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 213.360558][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 213.464042][T10654] bridge4: entered promiscuous mode [ 213.537474][T10660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1384'. [ 213.574329][T10654] bond6: (slave bridge4): making interface the new active one [ 213.619192][T10654] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 214.307758][T10703] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 214.412602][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.420409][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.747226][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.766468][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.809644][T10692] v: left promiscuous mode [ 214.912203][T10719] bridge7: entered promiscuous mode [ 214.917551][T10719] bridge7: entered allmulticast mode [ 215.040147][T10732] netlink: zone id is out of range [ 215.049172][T10732] netlink: zone id is out of range [ 215.054372][T10732] netlink: zone id is out of range [ 215.060731][T10732] netlink: zone id is out of range [ 215.065940][T10732] netlink: zone id is out of range [ 215.079654][T10732] netlink: zone id is out of range [ 215.084979][T10732] netlink: zone id is out of range [ 215.091444][T10732] netlink: zone id is out of range [ 215.117661][ T6845] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.127764][ T6845] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.168688][ T6845] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.209256][ T6845] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.246152][ T6845] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.299942][ T6845] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.348646][ T6845] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.392260][ T6845] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.961335][T10768] bridge5: entered promiscuous mode [ 215.986994][T10768] bridge5: entered allmulticast mode [ 216.188741][T10789] ip6gre1: entered allmulticast mode [ 216.197264][ T6855] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.117098][T10835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.183663][T10835] syzkaller1: entered promiscuous mode [ 217.236410][T10835] syzkaller1: entered allmulticast mode [ 217.321350][T10850] __nla_validate_parse: 10 callbacks suppressed [ 217.321390][T10850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1431'. [ 217.347387][T10847] bridge7: entered promiscuous mode [ 217.371042][T10847] bridge7: entered allmulticast mode [ 217.423042][T10853] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1431'. [ 217.689398][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 217.887063][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 217.898874][T10879] FAULT_INJECTION: forcing a failure. [ 217.898874][T10879] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 217.918714][T10880] netlink: 'syz.1.1438': attribute type 178 has an invalid length. [ 217.941406][T10880] netlink: 'syz.1.1438': attribute type 32 has an invalid length. [ 217.954271][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.3.1437 Not tainted syzkaller #0 PREEMPT(full) [ 217.954300][T10879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 217.954313][T10879] Call Trace: [ 217.954322][T10879] [ 217.954331][T10879] dump_stack_lvl+0xe8/0x150 [ 217.954369][T10879] should_fail_ex+0x40c/0x560 [ 217.954403][T10879] _copy_from_user+0x2d/0xb0 [ 217.954426][T10879] ___sys_sendmsg+0x1c6/0x360 [ 217.954450][T10879] ? __lock_acquire+0x683/0x2cf0 [ 217.954487][T10879] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.954550][T10879] ? __fget_files+0x2a/0x420 [ 217.954580][T10879] ? __fget_files+0x3a2/0x420 [ 217.954619][T10879] __x64_sys_sendmsg+0x1b1/0x290 [ 217.954645][T10879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.954688][T10879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.954713][T10879] do_syscall_64+0x174/0x580 [ 217.954737][T10879] ? trace_irq_disable+0x3b/0x140 [ 217.954766][T10879] ? clear_bhb_loop+0x40/0x90 [ 217.954793][T10879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.954816][T10879] RIP: 0033:0x7f694359de99 [ 217.954844][T10879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.954862][T10879] RSP: 002b:00007f69444c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.954890][T10879] RAX: ffffffffffffffda RBX: 00007f6943825fa0 RCX: 00007f694359de99 [ 217.954907][T10879] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 217.954922][T10879] RBP: 00007f69444c5090 R08: 0000000000000000 R09: 0000000000000000 [ 217.954935][T10879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.954948][T10879] R13: 00007f6943826038 R14: 00007f6943825fa0 R15: 00007ffeb8a16638 [ 217.954983][T10879] [ 218.001915][T10887] netlink: 'syz.1.1438': attribute type 178 has an invalid length. [ 218.201378][T10882] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1439'. [ 218.757724][T10913] bridge7: entered promiscuous mode [ 218.784899][T10913] bridge7: entered allmulticast mode [ 219.052170][T10927] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 219.250908][T10937] syzkaller0: entered promiscuous mode [ 219.256988][T10937] syzkaller0: entered allmulticast mode [ 219.266657][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 219.284459][T10939] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 219.847528][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.006465][T10976] set_target_v1_checkentry: 23 callbacks suppressed [ 220.006485][T10976] SET target dimension over the limit! [ 220.986119][T10999] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1465'. [ 220.995727][T10999] netlink: 'syz.1.1465': attribute type 9 has an invalid length. [ 221.912261][T11013] GUP no longer grows the stack in syz.4.1469 (11013): 200000003000-20000000a000 (200000001000) [ 221.933560][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.4.1469 Not tainted syzkaller #0 PREEMPT(full) [ 221.933591][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 221.933605][T11013] Call Trace: [ 221.933613][T11013] [ 221.933622][T11013] dump_stack_lvl+0xe8/0x150 [ 221.933661][T11013] __get_user_pages+0x238c/0x2720 [ 221.933692][T11013] ? __gup_longterm_locked+0xc3b/0x15c0 [ 221.933750][T11013] __gup_longterm_locked+0xd52/0x15c0 [ 221.933781][T11013] ? lock_acquire+0x106/0x350 [ 221.933832][T11013] gup_fast_fallback+0x1d8c/0x20e0 [ 221.933856][T11013] ? lockdep_hardirqs_on+0x7a/0x110 [ 221.933918][T11013] ? __pfx_gup_fast_fallback+0x10/0x10 [ 221.933948][T11013] ? is_valid_gup_args+0x11f/0x200 [ 221.933976][T11013] ? get_user_pages_fast+0x4d/0xb0 [ 221.934005][T11013] __iov_iter_get_pages_alloc+0x378/0xa40 [ 221.934049][T11013] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 221.934078][T11013] iov_iter_get_pages2+0x5e/0xa0 [ 221.934118][T11013] __se_sys_vmsplice+0x7b5/0x1660 [ 221.934197][T11013] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 221.934238][T11013] ? __pfx_futex_wake+0x10/0x10 [ 221.934339][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.934366][T11013] do_syscall_64+0x174/0x580 [ 221.934391][T11013] ? trace_irq_disable+0x3b/0x140 [ 221.934421][T11013] ? clear_bhb_loop+0x40/0x90 [ 221.934449][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.934473][T11013] RIP: 0033:0x7fc782d9de99 [ 221.934494][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.934513][T11013] RSP: 002b:00007fc783d32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 221.934537][T11013] RAX: ffffffffffffffda RBX: 00007fc783025fa0 RCX: 00007fc782d9de99 [ 221.934554][T11013] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 221.934569][T11013] RBP: 00007fc782e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 221.934587][T11013] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 221.934601][T11013] R13: 00007fc783026038 R14: 00007fc783025fa0 R15: 00007ffccdfd6198 [ 221.934639][T11013] [ 222.181086][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 222.197826][T11013] macsec1: entered promiscuous mode [ 222.203291][T11013] bridge0: entered promiscuous mode [ 222.209454][T11013] macsec1: entered allmulticast mode [ 222.214816][T11013] bridge0: entered allmulticast mode [ 222.221691][T11013] bridge0: port 4(macsec1) entered blocking state [ 222.229532][T11013] bridge0: port 4(macsec1) entered disabled state [ 222.274164][T11013] bridge0: left allmulticast mode [ 222.294632][ T5752] bridge0: left promiscuous mode [ 222.555663][T11036] netlink: 'syz.1.1475': attribute type 21 has an invalid length. [ 222.565850][T11036] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1475'. [ 222.622518][T11008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.864837][T11046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 223.130208][T11042] syzkaller0: entered promiscuous mode [ 223.148955][T11042] syzkaller0: entered allmulticast mode [ 223.391525][T11073] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1487'. [ 223.467234][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 223.479326][T11076] netlink: 'syz.4.1490': attribute type 12 has an invalid length. [ 224.841779][T11076] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 224.849387][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.883281][T11077] bridge_slave_0 (unregistering): left allmulticast mode [ 224.910588][T11077] bridge_slave_0 (unregistering): left promiscuous mode [ 224.919671][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.068212][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1494'. [ 225.078573][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1491'. [ 225.088127][T11087] netlink: 'syz.0.1491': attribute type 7 has an invalid length. [ 225.099311][T11087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1491'. [ 225.465912][T11105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1500'. [ 225.488523][T11110] net_ratelimit: 73 callbacks suppressed [ 225.488541][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.590161][T11106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.812640][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 225.851649][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 225.983331][T11132] syzkaller0: entered promiscuous mode [ 226.001637][T11132] syzkaller0: entered allmulticast mode [ 226.154568][T11148] siw: device registration error -23 [ 226.185122][T11150] openvswitch: netlink: Missing key (keys=40, expected=80) [ 226.280133][T11152] smbdirect: ib_dev[syz2] removed [ 226.881028][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.699900][T11156] geneve3: entered promiscuous mode [ 227.705308][T11156] geneve3: entered allmulticast mode [ 227.754435][ T6848] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 227.815594][ T6848] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 227.862823][ T6848] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 227.894055][ T6848] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 227.948197][T11165] tc action pedit offset must be on 32 bit boundaries [ 228.076904][T11175] __nla_validate_parse: 2 callbacks suppressed [ 228.076924][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 228.288863][T11183] xt_TCPMSS: Only works on TCP SYN packets [ 228.328158][T11185] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 228.477135][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 228.499613][T11185] bridge6: entered promiscuous mode [ 228.510029][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1526'. [ 228.525555][T11185] bond11: (slave bridge6): making interface the new active one [ 228.563399][T11185] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 228.705902][T11201] syzkaller0: entered promiscuous mode [ 228.713159][T11201] syzkaller0: entered allmulticast mode [ 230.506513][T11219] vlan2: entered promiscuous mode [ 230.536781][T11219] geneve1: entered promiscuous mode [ 230.561870][T11219] vlan2: entered allmulticast mode [ 230.573551][T11219] geneve1: entered allmulticast mode [ 230.780059][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 231.182615][T11251] syzkaller0: entered promiscuous mode [ 231.183618][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1548'. [ 231.188506][T11251] syzkaller0: entered allmulticast mode [ 231.219586][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1548'. [ 232.850718][T11260] syzkaller0: entered promiscuous mode [ 232.856314][T11260] syzkaller0: entered allmulticast mode [ 233.010705][T11279] netlink: 'syz.1.1553': attribute type 12 has an invalid length. [ 233.395697][T11304] ip6t_REJECT: ECHOREPLY is not supported [ 233.416431][T11305] bridge6: entered promiscuous mode [ 233.423071][T11305] bridge6: entered allmulticast mode [ 233.561211][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 233.646602][T11319] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 233.666737][T11318] netlink: 'syz.4.1564': attribute type 1 has an invalid length. [ 233.692881][T11318] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1564'. [ 233.933614][T11331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.990349][T11336] openvswitch: netlink: Missing valid actions attribute. [ 234.013944][T11336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.219677][T11350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1573'. [ 234.589184][T11371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1577'. [ 234.631130][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 234.657407][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 234.870501][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 234.912475][T11384] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1583'. [ 234.986206][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 235.051262][T11388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.073819][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 235.111311][T11388] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 235.225444][T11420] netlink: 'syz.0.1585': attribute type 10 has an invalid length. [ 235.245167][T11388] bond13: option mode: invalid value (10) [ 235.272186][T11388] bond13 (unregistering): Released all slaves [ 235.323491][T11431] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20002 [ 235.411010][T11420] dummy0: entered promiscuous mode [ 235.522351][T11440] x_tables: duplicate underflow at hook 2 [ 235.754097][T11458] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 235.902762][T11460] IPVS: Scheduler module ip_vs_sip not found [ 236.139357][T11477] FAULT_INJECTION: forcing a failure. [ 236.139357][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.156586][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.3.1602 Not tainted syzkaller #0 PREEMPT(full) [ 236.156615][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 236.156627][T11477] Call Trace: [ 236.156635][T11477] [ 236.156644][T11477] dump_stack_lvl+0xe8/0x150 [ 236.156682][T11477] should_fail_ex+0x40c/0x560 [ 236.156715][T11477] _copy_from_user+0x2d/0xb0 [ 236.156738][T11477] sock_do_ioctl+0x195/0x320 [ 236.156771][T11477] ? __pfx_sock_do_ioctl+0x10/0x10 [ 236.156798][T11477] ? hook_file_ioctl+0x1f0/0x5f0 [ 236.156837][T11477] sock_ioctl+0x57a/0x7e0 [ 236.156868][T11477] ? __pfx_sock_ioctl+0x10/0x10 [ 236.156896][T11477] ? __fget_files+0x2a/0x420 [ 236.156925][T11477] ? __fget_files+0x3a2/0x420 [ 236.156965][T11477] ? __fget_files+0x2a/0x420 [ 236.156996][T11477] ? bpf_lsm_file_ioctl+0x9/0x20 [ 236.157022][T11477] ? __pfx_sock_ioctl+0x10/0x10 [ 236.157047][T11477] __se_sys_ioctl+0xfc/0x170 [ 236.157070][T11477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.157093][T11477] do_syscall_64+0x174/0x580 [ 236.157116][T11477] ? trace_irq_disable+0x3b/0x140 [ 236.157143][T11477] ? clear_bhb_loop+0x40/0x90 [ 236.157169][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.157189][T11477] RIP: 0033:0x7f694359de99 [ 236.157209][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.157226][T11477] RSP: 002b:00007f69444c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.157248][T11477] RAX: ffffffffffffffda RBX: 00007f6943825fa0 RCX: 00007f694359de99 [ 236.157264][T11477] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 000000000000000a [ 236.157277][T11477] RBP: 00007f69444c5090 R08: 0000000000000000 R09: 0000000000000000 [ 236.157290][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.157303][T11477] R13: 00007f6943826038 R14: 00007f6943825fa0 R15: 00007ffeb8a16638 [ 236.157335][T11477] [ 236.663397][T11490] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 236.932717][T11499] netlink: 'syz.2.1608': attribute type 2 has an invalid length. [ 237.202918][T11522] sctp: [Deprecated]: syz.2.1615 (pid 11522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.202918][T11522] Use struct sctp_sack_info instead [ 237.242464][T11521] FAULT_INJECTION: forcing a failure. [ 237.242464][T11521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.269819][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.3.1616 Not tainted syzkaller #0 PREEMPT(full) [ 237.269849][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 237.269861][T11521] Call Trace: [ 237.269870][T11521] [ 237.269878][T11521] dump_stack_lvl+0xe8/0x150 [ 237.269917][T11521] should_fail_ex+0x40c/0x560 [ 237.269960][T11521] _copy_from_user+0x2d/0xb0 [ 237.269983][T11521] dev_ethtool+0xdb/0x29c0 [ 237.270013][T11521] ? __lock_acquire+0x683/0x2cf0 [ 237.270061][T11521] ? __pfx_dev_ethtool+0x10/0x10 [ 237.270092][T11521] ? kasan_quarantine_put+0xbb/0x1f0 [ 237.270127][T11521] ? dev_load+0x21/0x1f0 [ 237.270171][T11521] ? dev_load+0x21/0x1f0 [ 237.270206][T11521] ? dev_load+0x21/0x1f0 [ 237.270254][T11521] dev_ioctl+0x392/0x1150 [ 237.270291][T11521] sock_do_ioctl+0x23e/0x320 [ 237.270323][T11521] ? __pfx_sock_do_ioctl+0x10/0x10 [ 237.270348][T11521] ? hook_file_ioctl+0x1f0/0x5f0 [ 237.270387][T11521] sock_ioctl+0x57a/0x7e0 [ 237.270417][T11521] ? __pfx_sock_ioctl+0x10/0x10 [ 237.270445][T11521] ? __fget_files+0x2a/0x420 [ 237.270474][T11521] ? __fget_files+0x3a2/0x420 [ 237.270502][T11521] ? __fget_files+0x2a/0x420 [ 237.270535][T11521] ? bpf_lsm_file_ioctl+0x9/0x20 [ 237.270562][T11521] ? __pfx_sock_ioctl+0x10/0x10 [ 237.270588][T11521] __se_sys_ioctl+0xfc/0x170 [ 237.270611][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.270635][T11521] do_syscall_64+0x174/0x580 [ 237.270668][T11521] ? clear_bhb_loop+0x40/0x90 [ 237.270696][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.270736][T11521] RIP: 0033:0x7f694359de99 [ 237.270758][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.270778][T11521] RSP: 002b:00007f69444c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.270802][T11521] RAX: ffffffffffffffda RBX: 00007f6943825fa0 RCX: 00007f694359de99 [ 237.270821][T11521] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 000000000000000a [ 237.270836][T11521] RBP: 00007f69444c5090 R08: 0000000000000000 R09: 0000000000000000 [ 237.270855][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.270869][T11521] R13: 00007f6943826038 R14: 00007f6943825fa0 R15: 00007ffeb8a16638 [ 237.270905][T11521] [ 238.516959][T11574] FAULT_INJECTION: forcing a failure. [ 238.516959][T11574] name failslab, interval 1, probability 0, space 0, times 0 [ 238.549871][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.2.1631 Not tainted syzkaller #0 PREEMPT(full) [ 238.549902][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 238.549931][T11574] Call Trace: [ 238.549940][T11574] [ 238.549949][T11574] dump_stack_lvl+0xe8/0x150 [ 238.549989][T11574] should_fail_ex+0x40c/0x560 [ 238.550023][T11574] should_failslab+0xa8/0x100 [ 238.550059][T11574] __kmalloc_cache_noprof+0xa8/0x660 [ 238.550093][T11574] ? dev_ethtool+0x13f/0x29c0 [ 238.550122][T11574] ? dev_ethtool+0x13f/0x29c0 [ 238.550160][T11574] dev_ethtool+0x13f/0x29c0 [ 238.550189][T11574] ? __lock_acquire+0x683/0x2cf0 [ 238.550248][T11574] ? __pfx_dev_ethtool+0x10/0x10 [ 238.550279][T11574] ? kasan_quarantine_put+0xbb/0x1f0 [ 238.550311][T11574] ? dev_load+0x21/0x1f0 [ 238.550354][T11574] ? dev_load+0x21/0x1f0 [ 238.550388][T11574] ? dev_load+0x21/0x1f0 [ 238.550422][T11574] dev_ioctl+0x392/0x1150 [ 238.550465][T11574] sock_do_ioctl+0x23e/0x320 [ 238.550497][T11574] ? __pfx_sock_do_ioctl+0x10/0x10 [ 238.550541][T11574] ? hook_file_ioctl+0x1f0/0x5f0 [ 238.550586][T11574] sock_ioctl+0x57a/0x7e0 [ 238.550617][T11574] ? __pfx_sock_ioctl+0x10/0x10 [ 238.550645][T11574] ? __fget_files+0x2a/0x420 [ 238.550675][T11574] ? __fget_files+0x3a2/0x420 [ 238.550704][T11574] ? __fget_files+0x2a/0x420 [ 238.550739][T11574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 238.550766][T11574] ? __pfx_sock_ioctl+0x10/0x10 [ 238.550802][T11574] __se_sys_ioctl+0xfc/0x170 [ 238.550826][T11574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.550850][T11574] do_syscall_64+0x174/0x580 [ 238.550878][T11574] ? clear_bhb_loop+0x40/0x90 [ 238.550905][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.550927][T11574] RIP: 0033:0x7f357159de99 [ 238.550948][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.550966][T11574] RSP: 002b:00007f3572382028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.550989][T11574] RAX: ffffffffffffffda RBX: 00007f3571826090 RCX: 00007f357159de99 [ 238.551006][T11574] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 000000000000000b [ 238.551020][T11574] RBP: 00007f3572382090 R08: 0000000000000000 R09: 0000000000000000 [ 238.551034][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.551047][T11574] R13: 00007f3571826128 R14: 00007f3571826090 R15: 00007ffd9306c958 [ 238.551082][T11574] [ 239.257474][T11593] __nla_validate_parse: 10 callbacks suppressed [ 239.257494][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1639'. [ 239.317950][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1639'. [ 239.972476][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.004436][T11611] dummy0: left promiscuous mode [ 240.062849][T11611] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.094958][T11626] FAULT_INJECTION: forcing a failure. [ 240.094958][T11626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.131098][T11626] CPU: 1 UID: 0 PID: 11626 Comm: syz.4.1647 Not tainted syzkaller #0 PREEMPT(full) [ 240.131133][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 240.131146][T11626] Call Trace: [ 240.131155][T11626] [ 240.131164][T11626] dump_stack_lvl+0xe8/0x150 [ 240.131203][T11626] should_fail_ex+0x40c/0x560 [ 240.131236][T11626] _copy_from_user+0x2d/0xb0 [ 240.131259][T11626] ethtool_set_channels+0x166/0x5e0 [ 240.131286][T11626] ? __pfx_ethtool_set_channels+0x10/0x10 [ 240.131321][T11626] ? bpf_lsm_capable+0x9/0x20 [ 240.131349][T11626] ? security_capable+0x7e/0x2c0 [ 240.131380][T11626] dev_ethtool+0x1d94/0x29c0 [ 240.131408][T11626] ? __lock_acquire+0x683/0x2cf0 [ 240.131455][T11626] ? __pfx_dev_ethtool+0x10/0x10 [ 240.131485][T11626] ? kasan_quarantine_put+0xbb/0x1f0 [ 240.131518][T11626] ? dev_load+0x21/0x1f0 [ 240.131561][T11626] ? dev_load+0x21/0x1f0 [ 240.131595][T11626] ? dev_load+0x21/0x1f0 [ 240.131629][T11626] dev_ioctl+0x392/0x1150 [ 240.131673][T11626] sock_do_ioctl+0x23e/0x320 [ 240.131705][T11626] ? __pfx_sock_do_ioctl+0x10/0x10 [ 240.131731][T11626] ? hook_file_ioctl+0x1f0/0x5f0 [ 240.131770][T11626] sock_ioctl+0x57a/0x7e0 [ 240.131800][T11626] ? __pfx_sock_ioctl+0x10/0x10 [ 240.131828][T11626] ? __fget_files+0x2a/0x420 [ 240.131857][T11626] ? __fget_files+0x3a2/0x420 [ 240.131886][T11626] ? __fget_files+0x2a/0x420 [ 240.131920][T11626] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.131947][T11626] ? __pfx_sock_ioctl+0x10/0x10 [ 240.131974][T11626] __se_sys_ioctl+0xfc/0x170 [ 240.131997][T11626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.132021][T11626] do_syscall_64+0x174/0x580 [ 240.132044][T11626] ? trace_irq_disable+0x3b/0x140 [ 240.132074][T11626] ? clear_bhb_loop+0x40/0x90 [ 240.132105][T11626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.132126][T11626] RIP: 0033:0x7fc782d9de99 [ 240.132147][T11626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.132164][T11626] RSP: 002b:00007fc783d11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.132188][T11626] RAX: ffffffffffffffda RBX: 00007fc783026090 RCX: 00007fc782d9de99 [ 240.132204][T11626] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 000000000000000a [ 240.132219][T11626] RBP: 00007fc783d11090 R08: 0000000000000000 R09: 0000000000000000 [ 240.132233][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.132246][T11626] R13: 00007fc783026128 R14: 00007fc783026090 R15: 00007ffccdfd6198 [ 240.132282][T11626] [ 240.581395][T11633] netlink: 'syz.1.1650': attribute type 1 has an invalid length. [ 240.663260][T11633] bond13: entered promiscuous mode [ 240.664036][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 240.669675][T11633] 8021q: adding VLAN 0 to HW filter on device bond13 [ 240.888914][T11655] netlink: 'syz.4.1655': attribute type 1 has an invalid length. [ 240.906027][T11633] 8021q: adding VLAN 0 to HW filter on device bond13 [ 240.914112][T11633] bond13: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 240.924914][T11633] bond13: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 240.943381][T11633] bond13: (slave ip6gre2): making interface the new active one [ 240.951280][T11633] ip6gre2: entered promiscuous mode [ 240.956813][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 240.966211][T11633] bond13: (slave ip6gre2): Enslaving as an active interface with an up link [ 240.975253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.987700][T11645] netlink: 'syz.0.1652': attribute type 4 has an invalid length. [ 241.094743][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 241.179608][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 241.227492][T11655] 8021q: adding VLAN 0 to HW filter on device bond13 [ 241.603761][T11694] ip6gre2: entered allmulticast mode [ 241.631202][T11694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1665'. [ 241.642789][T11698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.663636][T11694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1665'. [ 241.686457][T11694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1665'. [ 241.741451][T11702] ipvlan2: entered promiscuous mode [ 241.795101][T11709] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1668'. [ 242.082729][T11721] bridge7: entered promiscuous mode [ 242.119306][T11721] bridge7: entered allmulticast mode [ 242.206112][T11731] netlink: 'syz.4.1676': attribute type 1 has an invalid length. [ 242.411597][T11738] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 242.740194][T11767] netlink: 'syz.3.1682': attribute type 5 has an invalid length. [ 242.919228][T11774] ip6t_rpfilter: unknown options [ 242.961266][T11757] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.995800][T11757] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.018588][T11757] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.253314][T11787] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 243.297113][T11757] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.321649][T11757] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.344704][T11757] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.603704][T11757] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.638549][T11757] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.664816][T11757] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 243.896655][T11805] syzkaller0: entered promiscuous mode [ 243.902835][T11805] syzkaller0: entered allmulticast mode [ 243.929880][T11757] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.940608][T11757] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.953942][T11757] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 245.547050][T11828] __nla_validate_parse: 7 callbacks suppressed [ 245.547070][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 245.674215][T11832] sctp: [Deprecated]: syz.3.1702 (pid 11832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.674215][T11832] Use struct sctp_sack_info instead [ 245.773085][T11415] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.782980][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.805994][T11415] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 245.837542][T11415] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 245.911175][T11419] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.944552][T11419] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 245.976793][T11419] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.065542][T11415] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.102411][T11415] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 246.115071][T11415] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.173364][T11428] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.204721][T11428] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 246.243928][T11428] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 246.326103][T11867] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 246.382367][T11869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 246.405075][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 246.435142][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 246.463370][T11867] bridge6: entered promiscuous mode [ 246.473301][T11867] bond8: (slave bridge6): making interface the new active one [ 246.505985][T11867] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 246.583566][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 246.883549][T11899] netlink: 'syz.3.1720': attribute type 1 has an invalid length. [ 246.930740][T11899] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1720'. [ 247.636043][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 247.983217][T11966] 8021q: VLANs not supported on vxcan1 [ 248.176814][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1743'. [ 248.194352][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1743'. [ 248.282137][T11987] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 248.501900][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'. [ 248.625252][T11999] bridge8: entered promiscuous mode [ 248.635424][T11999] bond14: (slave bridge8): making interface the new active one [ 248.647239][T11999] bond14: (slave bridge8): Enslaving as an active interface with an up link [ 249.423155][T12052] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 249.653166][T12064] bridge8: entered promiscuous mode [ 249.667554][T12064] bridge8: entered allmulticast mode [ 249.711581][T12066] bridge7: entered promiscuous mode [ 249.729559][T12066] bond10: (slave bridge7): making interface the new active one [ 249.743307][T12066] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 250.047486][T12076] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 250.075052][T12076] bond12: option packets_per_slave: allowed values 0 - 65535 [ 250.099985][T12076] bond12 (unregistering): Released all slaves [ 250.567259][T12109] bridge7: entered promiscuous mode [ 250.601706][T12109] bridge7: entered allmulticast mode [ 250.730093][T12101] tipc: Enabling of bearer rejected, failed to enable media [ 250.797439][T12127] netlink: 'syz.1.1780': attribute type 2 has an invalid length. [ 250.906462][T12131] netlink: 'syz.3.1782': attribute type 1 has an invalid length. [ 250.953747][T12131] 8021q: adding VLAN 0 to HW filter on device bond12 [ 251.186976][T12140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.340557][T12151] __nla_validate_parse: 3 callbacks suppressed [ 251.340576][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 251.380395][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 251.495078][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 251.524246][T12158] syzkaller0: entered promiscuous mode [ 251.574275][T12158] syzkaller0: entered allmulticast mode [ 251.639819][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 251.711425][T12170] bridge7: entered promiscuous mode [ 251.736286][T12170] bridge7: entered allmulticast mode [ 251.871552][T12174] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1794'. [ 251.905531][T12182] xt_nfacct: accounting object `syz1' does not exist [ 251.915627][T12182] xt_nfacct: accounting object `syz1' does not exist [ 252.096740][T12178] netlink: 'syz.1.1794': attribute type 1 has an invalid length. [ 252.358244][T12202] syzkaller0: entered promiscuous mode [ 252.364924][T12202] syzkaller0: entered allmulticast mode [ 252.402122][T12212] netlink: 'syz.2.1802': attribute type 4 has an invalid length. [ 252.444088][T12213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.451512][T12213] IPv6: NLM_F_CREATE should be set when creating new route [ 252.458848][T12213] IPv6: NLM_F_CREATE should be set when creating new route [ 252.466107][T12213] IPv6: NLM_F_CREATE should be set when creating new route [ 252.478844][T12213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.554040][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1805'. [ 252.568712][T12174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.990929][T12233] syzkaller0: entered promiscuous mode [ 252.996653][T12233] syzkaller0: entered allmulticast mode [ 254.973289][T12256] bridge9: entered promiscuous mode [ 254.980631][T12256] bridge9: entered allmulticast mode [ 255.085085][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1819'. [ 255.680074][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.738033][T12224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.221010][T12292] ip6erspan0: entered allmulticast mode [ 256.234825][T12291] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1827'. [ 256.284915][T12291] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1827'. [ 256.505230][T12308] bridge6: entered promiscuous mode [ 256.535081][T12308] bridge6: entered allmulticast mode [ 256.630787][T12320] syzkaller0: entered promiscuous mode [ 256.636932][T12320] syzkaller0: entered allmulticast mode [ 256.815612][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 257.073215][T12346] netlink: 'syz.2.1838': attribute type 30 has an invalid length. [ 257.200193][T12357] netlink: 'syz.1.1844': attribute type 21 has an invalid length. [ 257.290750][T12351] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 257.442660][T12364] bridge9: entered promiscuous mode [ 257.458388][T12364] bridge9: entered allmulticast mode [ 257.541395][T12371] IPVS: set_ctl: invalid protocol: 136 172.30.1.3:20001 [ 257.630350][T12377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.234400][T12400] bridge0: port 3(dummy0) entered disabled state [ 258.285949][T12400] bridge0: port 3(dummy0) entered blocking state [ 258.292479][T12400] bridge0: port 3(dummy0) entered forwarding state [ 258.569245][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.576935][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.583121][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.589259][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.595402][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.601559][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.607687][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.613833][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.620261][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.626373][T12411] tc action pedit 'at' offset 5 out of bounds [ 258.632540][T12411] 0: reclassify loop, rule prio 0, protocol 800 [ 258.694073][T12412] netlink: 'syz.1.1859': attribute type 29 has an invalid length. [ 259.006879][T12425] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1860'. [ 259.060377][T12426] bridge8: entered promiscuous mode [ 259.071559][T12430] openvswitch: netlink: IP tunnel dst address not specified [ 259.088948][T12426] bridge8: entered allmulticast mode [ 259.103661][T12425] netlink: 'syz.0.1860': attribute type 5 has an invalid length. [ 259.130001][T12425] netlink: 'syz.0.1860': attribute type 6 has an invalid length. [ 259.147528][T12434] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 259.307439][T12441] netlink: 'syz.3.1866': attribute type 17 has an invalid length. [ 259.340951][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 259.374841][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1866'. [ 259.403884][T12434] 8021q: adding VLAN 0 to HW filter on device bond14 [ 259.437472][T12436] bond14: (slave geneve3): making interface the new active one [ 259.449973][T12436] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 259.494400][T12441] gretap0: entered promiscuous mode [ 259.544149][T12441] gretap0: left promiscuous mode [ 260.069819][T12470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1877'. [ 260.159821][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 260.229260][T12475] Cannot find add_set index 46338 as target [ 260.311760][T12478] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1874'. [ 260.333648][T12478] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1874'. [ 260.345316][T12486] bridge9: entered promiscuous mode [ 260.356031][T12486] bridge9: entered allmulticast mode [ 260.602525][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 260.620537][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'. [ 260.685059][T12502] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 260.911055][T12506] ip6gre2: entered allmulticast mode [ 260.959567][T11428] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.986317][T11428] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.026419][T11428] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.084812][T11428] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.006981][T12564] __nla_validate_parse: 4 callbacks suppressed [ 262.007002][T12564] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1897'. [ 262.125428][T12568] ipt_rpfilter: unknown options [ 262.134162][T12568] ipt_rpfilter: unknown options [ 262.147756][T12568] ipt_rpfilter: unknown options [ 262.153525][T12568] ipt_rpfilter: unknown options [ 262.169942][T12568] ipt_rpfilter: unknown options [ 262.185399][T12568] ipt_rpfilter: unknown options [ 262.200080][T12568] ipt_rpfilter: unknown options [ 262.217526][T12568] ipt_rpfilter: unknown options [ 262.247689][T12568] ipt_rpfilter: unknown options [ 262.367775][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 262.408089][T12579] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1902'. [ 262.454835][T12582] netlink: 'syz.2.1903': attribute type 2 has an invalid length. [ 262.547038][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 262.603771][T12591] bridge9: entered promiscuous mode [ 262.613233][T12591] bridge9: entered allmulticast mode [ 262.763784][T12587] bond13: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 262.782896][T12587] bond13 (unregistering): Released all slaves [ 263.040068][T12610] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 263.064223][T12611] IPv6: sit2: Disabled Multicast RS [ 263.134861][T12614] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 263.245150][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 263.264059][T12623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.310656][T12614] 8021q: adding VLAN 0 to HW filter on device bond13 [ 263.419485][T12610] bridge9: entered promiscuous mode [ 263.433023][T12610] bond15: (slave bridge9): making interface the new active one [ 263.441531][T12610] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 263.493897][T12630] netlink: 'syz.3.1917': attribute type 3 has an invalid length. [ 263.744852][T12647] bridge10: entered promiscuous mode [ 263.751693][T12647] bridge10: entered allmulticast mode [ 263.959519][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1925'. [ 264.119447][T12663] netlink: 'syz.2.1929': attribute type 21 has an invalid length. [ 264.131161][T12663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1929'. [ 264.263613][T12675] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 264.446670][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 264.483533][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 264.521202][T12678] bridge6: entered promiscuous mode [ 264.532781][T12678] bond15: (slave bridge6): making interface the new active one [ 264.541546][T12678] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 264.751559][T12698] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 264.881309][ T5638] Bluetooth: hci3: link tx timeout [ 264.886518][ T5638] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 264.951599][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 264.987946][T12712] bridge9: entered promiscuous mode [ 264.993326][T12712] bridge9: entered allmulticast mode [ 265.193212][T12725] netlink: 'syz.2.1945': attribute type 1 has an invalid length. [ 265.231587][T12724] ip6erspan0: entered allmulticast mode [ 265.487415][T12725] bridge8: entered promiscuous mode [ 265.534242][T12725] bond12: (slave bridge8): making interface the new active one [ 265.560779][T12725] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 265.570421][T12743] ip6gre0: Master is either lo or non-ether device [ 265.607324][T12739] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 265.627902][T12739] netlink: 'syz.4.1949': attribute type 2 has an invalid length. [ 265.759482][T12752] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 265.930692][T12768] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 266.008019][T12768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.054012][T12770] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 266.065976][T12770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.117510][T12777] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 266.157211][T12777] team0: Device ipvlan3 is already an upper device of the team interface [ 266.463252][T12807] TCP: TCP_TX_DELAY enabled [ 266.557551][T12797] bridge7: entered promiscuous mode [ 266.597165][T12797] bond13: (slave bridge7): making interface the new active one [ 266.638045][T12797] bond13: (slave bridge7): Enslaving as an active interface with an up link [ 266.962550][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 267.306086][T12851] __nla_validate_parse: 5 callbacks suppressed [ 267.306108][T12851] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1976'. [ 267.620220][T12865] validate_nla: 2 callbacks suppressed [ 267.620240][T12865] netlink: 'syz.0.1980': attribute type 1 has an invalid length. [ 267.693157][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1982'. [ 267.871033][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 268.051703][T12887] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 268.063606][T12865] bridge8: entered promiscuous mode [ 268.093042][T12865] bond16: (slave bridge8): making interface the new active one [ 268.105151][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'. [ 268.122872][T12865] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 268.144363][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1984'. [ 268.194809][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 268.384772][T12911] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 268.494249][T12917] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1989'. [ 268.996858][T12951] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 269.227028][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'. [ 269.239990][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 269.275488][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 269.386937][T12975] bridge9: entered promiscuous mode [ 269.402887][T12975] bond18: (slave bridge9): making interface the new active one [ 269.411399][T12975] bond18: (slave bridge9): Enslaving as an active interface with an up link [ 269.546863][T12986] netlink: 'syz.0.2005': attribute type 11 has an invalid length. [ 269.758709][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.786235][T13000] bridge10: entered promiscuous mode [ 269.806429][T13000] bridge10: entered allmulticast mode [ 269.840227][ T30] audit: type=1804 audit(1785205089.742:2): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2009" name="/newroot/412/cgroup.controllers" dev="tmpfs" ino=2104 res=1 errno=0 [ 269.875208][ T30] audit: type=1800 audit(1785205089.752:3): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2009" name="cgroup.controllers" dev="tmpfs" ino=2104 res=0 errno=0 [ 272.040542][T12967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.312001][T13107] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 272.326167][T13108] __nla_validate_parse: 1 callbacks suppressed [ 272.326186][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2017'. [ 272.385358][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'. [ 272.536682][T13116] team_slave_1: Caught tx_queue_len zero misconfig [ 272.549181][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 272.571548][T13113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2018'. [ 272.594791][T13107] bridge10: entered promiscuous mode [ 272.605977][T13107] bond17: (slave bridge10): making interface the new active one [ 272.614744][T13107] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 272.909739][T13140] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2023'. [ 272.941707][T13135] bridge8: entered promiscuous mode [ 272.956477][T13135] bridge8: entered allmulticast mode [ 273.465442][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 273.738890][T13183] IPVS: set_ctl: invalid protocol: 46 172.30.0.3:20004 [ 273.782959][T13179] bond16: (slave bond_slave_1): Device is not our slave [ 273.790435][T13179] bond16: option active_slave: invalid value (bond_slave_1) [ 273.818467][T13179] bond16 (unregistering): Released all slaves [ 274.112883][T13177] syzkaller0: entered promiscuous mode [ 274.119029][T13177] syzkaller0: entered allmulticast mode [ 274.195340][T13206] bridge9: entered promiscuous mode [ 274.219585][T13206] bridge9: entered allmulticast mode [ 274.759360][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 274.769000][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2041'. [ 275.962373][T13221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.027009][T13222] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 276.060587][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 276.280984][T13236] pim6reg527: entered allmulticast mode [ 276.341016][T13235] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2048'. [ 276.385916][T13238] syzkaller0: entered promiscuous mode [ 276.414626][T13238] syzkaller0: entered allmulticast mode [ 276.516104][T13249] bridge9: entered promiscuous mode [ 276.538011][T13249] bridge9: entered allmulticast mode [ 276.787379][T13257] syzkaller0: entered promiscuous mode [ 276.797302][T13257] syzkaller0: entered allmulticast mode [ 276.855618][T13262] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 276.887821][T13262] bond15 (unregistering): Released all slaves [ 278.667885][T13285] __nla_validate_parse: 2 callbacks suppressed [ 278.667905][T13285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2064'. [ 278.806498][T13285] ip6tnl2: entered promiscuous mode [ 278.844965][T13294] bond0: Error: Cannot enslave bond to itself. [ 279.284626][T13319] syzkaller1: entered promiscuous mode [ 279.302510][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2073'. [ 279.313222][T13319] syzkaller1: entered allmulticast mode [ 279.344347][T13319] netlink: 'syz.4.2071': attribute type 142 has an invalid length. [ 279.464848][T13325] syzkaller0: entered promiscuous mode [ 279.470583][T13325] syzkaller0: entered allmulticast mode [ 281.146805][T13342] erspan0: entered promiscuous mode [ 281.152422][T13342] erspan0: entered allmulticast mode [ 281.158181][T13351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.438269][T13330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.846368][T13374] netlink: 'syz.0.2090': attribute type 2 has an invalid length. [ 282.914975][T13377] veth0: entered promiscuous mode [ 282.972247][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2092'. [ 283.042975][T13380] veth0: left promiscuous mode [ 283.913985][T13420] xt_l2tp: invalid flags combination: 0 [ 283.925108][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 283.945108][T13420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2105'. [ 283.957120][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2104'. [ 283.978164][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2105'. [ 283.989205][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2104'. [ 284.014283][T13420] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 284.026952][T13420] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 284.045456][T13420] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2105'. [ 284.145382][T13431] vcan0: entered allmulticast mode [ 284.816837][T13473] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 284.867757][T13479] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20002 [ 285.427849][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2124'. [ 285.521128][T13507] netlink: 'syz.0.2127': attribute type 49 has an invalid length. [ 285.570832][T13465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.637558][T13507] ip6gretap0: entered promiscuous mode [ 285.660898][T13507] ip6gretap0: entered allmulticast mode [ 285.877612][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2132'. [ 285.906265][T13525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.045181][T13529] netlink: 'syz.0.2133': attribute type 23 has an invalid length. [ 286.582596][T13562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2142'. [ 286.654515][T13574] netlink: 'syz.4.2145': attribute type 3 has an invalid length. [ 286.673013][T13561] syzkaller0: entered promiscuous mode [ 286.685632][T13574] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 286.696786][T13561] syzkaller0: entered allmulticast mode [ 287.061676][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2149'. [ 287.535931][T13611] syzkaller0: entered promiscuous mode [ 287.549308][T13611] syzkaller0: entered allmulticast mode [ 289.961307][T13652] vlan0: entered promiscuous mode [ 290.258029][T13665] netlink: 'syz.0.2164': attribute type 12 has an invalid length. [ 290.429463][T13665] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 290.490492][T13681] netlink: 'syz.2.2168': attribute type 1 has an invalid length. [ 290.586781][T13689] __nla_validate_parse: 5 callbacks suppressed [ 290.586801][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 290.617858][T13665] bond20 (unregistering): Released all slaves [ 290.941223][T13681] bond14: entered promiscuous mode [ 290.960466][T13681] 8021q: adding VLAN 0 to HW filter on device bond14 [ 291.037083][T13706] ipt_REJECT: ECHOREPLY no longer supported. [ 291.275516][T13720] bond15: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 291.314229][T13720] bond15 (unregistering): Released all slaves [ 291.534733][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2182'. [ 291.772117][T13732] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2184'. [ 291.854583][T13739] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 291.962122][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 292.004710][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 292.026541][T13748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.036113][T13744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2189'. [ 292.052935][T13748] bridge0: Caught tx_queue_len zero misconfig [ 292.063766][T13747] netlink: 'syz.1.2190': attribute type 39 has an invalid length. [ 292.215468][T13753] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2191'. [ 292.269125][T13761] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 292.277387][T13761] netlink: 'syz.4.2192': attribute type 2 has an invalid length. [ 292.446354][T13767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 292.568773][T13772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2194'. [ 292.862958][T13793] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 293.195861][T13808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2204'. [ 293.435404][T13822] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 293.749512][T13831] bridge10: entered promiscuous mode [ 293.779296][T13831] bond20: (slave bridge10): making interface the new active one [ 293.800051][T13831] bond20: (slave bridge10): Enslaving as an active interface with an up link [ 294.041312][T13854] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 295.715553][T13857] bridge8: entered promiscuous mode [ 295.720973][T13857] bridge8: entered allmulticast mode [ 296.030969][T13889] __nla_validate_parse: 7 callbacks suppressed [ 296.030989][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 296.032887][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 296.085757][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'. [ 296.232607][T13898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2225'. [ 298.870540][T13873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.114556][T13913] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 299.141492][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 299.174790][T13913] netlink: 'syz.2.2230': attribute type 4 has an invalid length. [ 299.219886][T13913] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2230'. [ 299.245836][T13920] bridge13: entered promiscuous mode [ 299.264153][T13920] bridge13: entered allmulticast mode [ 299.489692][T13929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2234'. [ 299.519792][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 299.544181][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 299.558593][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 299.672663][T13930] 8021q: adding VLAN 0 to HW filter on device bond17 [ 300.677050][T13985] 8021q: VLANs not supported on ipvlan0 [ 300.683738][T13985] netlink: 'syz.0.2244': attribute type 13 has an invalid length. [ 300.766571][T13985] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 300.774999][T13985] syzkaller0: entered promiscuous mode [ 300.781813][T13985] syzkaller0: entered allmulticast mode [ 300.843183][T13986] ªªªªª»: renamed from dummy0 [ 302.791130][T13940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.008587][T14008] __nla_validate_parse: 2 callbacks suppressed [ 303.008606][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 303.313655][T14017] bridge11: entered promiscuous mode [ 303.332841][T14017] bridge11: entered allmulticast mode [ 303.372152][T14017] team0: Port device bridge11 added [ 303.404240][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 303.451887][T14033] bridge0: port 3(team0) entered blocking state [ 303.471316][T14033] bridge0: port 3(team0) entered disabled state [ 303.491516][T14033] team0: entered allmulticast mode [ 303.507816][T14033] team_slave_0: entered allmulticast mode [ 303.525171][T14033] team_slave_1: entered allmulticast mode [ 303.562863][T14033] team0: entered promiscuous mode [ 303.578366][T14033] team_slave_0: entered promiscuous mode [ 303.590339][T14033] team_slave_1: entered promiscuous mode [ 303.815386][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2255'. [ 303.884294][T14051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2257'. [ 303.926935][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'. [ 303.952599][T14051] netlink: 'syz.0.2257': attribute type 3 has an invalid length. [ 303.961656][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 303.972007][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2257'. [ 303.996875][T14051] netlink: 'syz.0.2257': attribute type 3 has an invalid length. [ 304.051526][T14053] xfrm2: entered promiscuous mode [ 304.060688][T14053] xfrm2: entered allmulticast mode [ 304.132214][T14065] syzkaller0: entered promiscuous mode [ 304.146861][T14065] syzkaller0: entered allmulticast mode [ 304.348819][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 307.012664][T14059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.207701][T14086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 307.241340][T14086] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.2266'. [ 307.252892][T14090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.277071][T14090] ipvlan0: Caught tx_queue_len zero misconfig [ 307.454770][ T5731] IPVS: starting estimator thread 0... [ 307.553474][T14101] IPVS: using max 27 ests per chain, 64800 per kthread [ 307.568747][T14098] ip6tnl0: Caught tx_queue_len zero misconfig [ 307.600924][T14097] IPVS: sh: FWM 3 0x00000003 - no destination available [ 307.706490][T14113] batadv_slave_1: entered promiscuous mode [ 307.875608][T14112] batadv_slave_1: left promiscuous mode [ 308.037364][T14133] bond22: option packets_per_slave: invalid value (18446744073709551615) [ 308.045939][T14133] bond22: option packets_per_slave: allowed values 0 - 65535 [ 308.056151][T14133] bond22 (unregistering): Released all slaves [ 308.174217][T14140] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 308.245990][T14140] can: request_module (can-proto-0) failed. [ 308.784947][T14147] netlink: 'syz.3.2285': attribute type 26 has an invalid length. [ 308.794137][T14147] __nla_validate_parse: 6 callbacks suppressed [ 308.794154][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 308.817787][T14147] netlink: 'syz.3.2285': attribute type 26 has an invalid length. [ 308.826631][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 309.551280][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 310.748624][T14115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.982447][T14177] bridge_slave_1: left allmulticast mode [ 310.998443][T14177] bridge_slave_1: left promiscuous mode [ 311.014103][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.028318][T14177] bridge_slave_0: left allmulticast mode [ 311.034887][T14177] bridge_slave_0: left promiscuous mode [ 311.041664][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.194550][T14193] netlink: 550 bytes leftover after parsing attributes in process `syz.2.2296'. [ 311.292746][T14197] netlink: 'syz.3.2297': attribute type 2 has an invalid length. [ 311.689067][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 311.968169][T14234] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2308'. [ 312.107894][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2310'. [ 312.117183][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2310'. [ 312.128688][T14242] netlink: 'syz.0.2310': attribute type 13 has an invalid length. [ 312.136709][T14242] netlink: 'syz.0.2310': attribute type 58 has an invalid length. [ 312.144748][T14242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2310'. [ 312.312715][T14244] syzkaller0: entered promiscuous mode [ 312.318334][T14244] syzkaller0: entered allmulticast mode [ 314.569372][T14209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.227518][T14273] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 315.246844][T14273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2322'. [ 315.262454][T14273] team0: entered allmulticast mode [ 315.281538][T14273] bridge0: port 1(team0) entered blocking state [ 315.299155][T14273] bridge0: port 1(team0) entered disabled state [ 315.614782][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 315.850855][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2328'. [ 315.874489][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2328'. [ 316.001553][T14303] syzkaller0: entered promiscuous mode [ 316.041058][T14303] syzkaller0: entered allmulticast mode [ 317.121159][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.813030][T14292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.012591][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 319.049015][T14333] lo: Caught tx_queue_len zero misconfig [ 319.255912][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'. [ 319.278914][T14346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.435684][T14353] x_tables: duplicate entry at hook 2 [ 319.507586][T14356] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.797399][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'. [ 319.839087][T11628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.874899][T14381] sock: sock_timestamping_bind_phc: sock not bind to device [ 319.986306][T14377] 8021q: adding VLAN 0 to HW filter on device bond19 [ 320.078598][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.274845][T14400] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.283056][T11628] IPVS: starting estimator thread 0... [ 320.378601][T14409] IPVS: using max 32 ests per chain, 76800 per kthread [ 320.405020][T14414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2362'. [ 320.470583][T14418] Cannot find add_set index 34 as target [ 320.634490][T14422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2363'. [ 320.644193][T14422] netlink: 'syz.1.2363': attribute type 7 has an invalid length. [ 320.652325][T14422] netlink: 'syz.1.2363': attribute type 8 has an invalid length. [ 320.661208][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 321.118559][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.158853][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.461114][T14361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.879175][T11628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.200618][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.265342][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 323.328381][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2377'. [ 323.403976][T14468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2378'. [ 323.461644][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'. [ 324.046915][T14500] bond22: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 324.071184][T14500] bond22 (unregistering): Released all slaves [ 324.250846][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.396632][T14516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.460546][T14521] gre0: Caught tx_queue_len zero misconfig [ 324.862463][T14540] xt_hashlimit: size too large, truncated to 1048576 [ 324.901078][T14536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.929317][T14544] xt_hashlimit: size too large, truncated to 1048576 [ 324.946943][T14536] syzkaller1: entered promiscuous mode [ 324.964968][T14536] syzkaller1: entered allmulticast mode [ 325.029764][ T6854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.052666][ T6854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.099575][ T808] ------------[ cut here ]------------ [ 325.106420][ T808] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 325.116344][ T808] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#1: kworker/1:2/808 [ 325.127013][ T808] Modules linked in: [ 325.132339][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 325.141749][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.151901][ T808] Workqueue: mld mld_ifc_work [ 325.156652][ T808] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 325.163028][ T808] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 325.182707][ T808] RSP: 0018:ffffc90004b16738 EFLAGS: 00010246 [ 325.188859][ T808] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 325.196867][ T808] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9069b9c0 [ 325.204976][ T808] RBP: ffff888067050f40 R08: 0000000000000000 R09: 0000000000000000 [ 325.213016][ T808] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807d38b028 [ 325.221078][ T808] R13: dffffc0000000000 R14: ffffffff9069b9c0 R15: ffff888067053258 [ 325.229137][ T808] FS: 0000000000000000(0000) GS:ffff888125050000(0000) knlGS:0000000000000000 [ 325.238107][ T808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.244781][ T808] CR2: 00007fc782deb580 CR3: 0000000051cc2000 CR4: 00000000003526f0 [ 325.252838][ T808] Call Trace: [ 325.256148][ T808] [ 325.259213][ T808] rate_control_send_low+0x1a7/0x7b0 [ 325.264581][ T808] ? __lock_acquire+0x683/0x2cf0 [ 325.269604][ T808] rate_control_get_rate+0x20b/0x5d0 [ 325.274972][ T808] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 325.280702][ T808] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 325.286830][ T808] ? __asan_memcpy+0x40/0x70 [ 325.291527][ T808] invoke_tx_handlers_late+0xb5/0x1830 [ 325.297042][ T808] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 325.303026][ T808] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 325.308541][ T808] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 325.314346][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.319809][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.324896][ T808] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 325.330433][ T808] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 325.336389][ T808] ieee80211_queue_skb+0x1923/0x22c0 [ 325.341790][ T808] ieee80211_tx+0x2c2/0x4b0 [ 325.346355][ T808] ? __pfx_ieee80211_tx+0x10/0x10 [ 325.351501][ T808] ? ieee80211_xmit+0x2e5/0x3c0 [ 325.356419][ T808] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 325.362479][ T808] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 325.368719][ T808] ? worker_thread+0xa47/0xfb0 [ 325.373555][ T808] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 325.380057][ T808] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 325.386348][ T808] ieee80211_subif_start_xmit+0xf1/0x570 [ 325.392050][ T808] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 325.398361][ T808] ? __pfx_netif_skb_features+0x10/0x10 [ 325.403951][ T808] dev_hard_start_xmit+0x2cd/0x830 [ 325.409162][ T808] __dev_queue_xmit+0x14c0/0x3820 [ 325.414218][ T808] ? __lock_acquire+0x683/0x2cf0 [ 325.419257][ T808] ? __dev_queue_xmit+0x29b/0x3820 [ 325.424452][ T808] ? ___neigh_create+0x1cd2/0x22b0 [ 325.429658][ T808] ? __pfx___dev_queue_xmit+0x10/0x10 [ 325.435078][ T808] ? neigh_resolve_output+0x428/0x720 [ 325.440533][ T808] ? eth_header+0x11b/0x200 [ 325.445082][ T808] ? __asan_memcpy+0x40/0x70 [ 325.449772][ T808] ? ip6_output+0x11e/0x540 [ 325.454325][ T808] ip6_output+0x337/0x540 [ 325.458730][ T808] ? __pfx_ip6_output+0x10/0x10 [ 325.463628][ T808] NF_HOOK+0x177/0x4f0 [ 325.467751][ T808] ? __pfx_NF_HOOK+0x10/0x10 [ 325.472442][ T808] ? icmp6_dst_alloc+0x39b/0x430 [ 325.477452][ T808] ? __pfx_dst_output+0x10/0x10 [ 325.482374][ T808] ? __local_bh_enable_ip+0xd0/0x130 [ 325.487706][ T808] ? icmp6_dst_alloc+0x39b/0x430 [ 325.492718][ T808] ? icmp6_dst_alloc+0x39b/0x430 [ 325.497716][ T808] mld_sendpack+0x890/0xe10 [ 325.502325][ T808] ? mld_sendpack+0x206/0xe10 [ 325.507057][ T808] ? __pfx_mld_sendpack+0x10/0x10 [ 325.512184][ T808] mld_ifc_work+0x842/0xd60 [ 325.516745][ T808] ? process_scheduled_works+0xa20/0x14e0 [ 325.522545][ T808] process_scheduled_works+0xa8e/0x14e0 [ 325.528236][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.534279][ T808] ? assign_work+0x3cf/0x5d0 [ 325.538941][ T808] worker_thread+0xa47/0xfb0 [ 325.543600][ T808] ? __kthread_parkme+0x71/0x1f0 [ 325.548645][ T808] kthread+0x388/0x470 [ 325.552761][ T808] ? __pfx_worker_thread+0x10/0x10 [ 325.557911][ T808] ? __pfx_kthread+0x10/0x10 [ 325.562580][ T808] ret_from_fork+0x514/0xb70 [ 325.567248][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 325.572452][ T808] ? __switch_to+0xc89/0x1420 [ 325.577199][ T808] ? __pfx_kthread+0x10/0x10 [ 325.581889][ T808] ret_from_fork_asm+0x1a/0x30 [ 325.586725][ T808] [ 325.589814][ T808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.597134][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 325.606448][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 325.616542][ T808] Workqueue: mld mld_ifc_work [ 325.621271][ T808] Call Trace: [ 325.624583][ T808] [ 325.627555][ T808] vpanic+0x56c/0xa60 [ 325.631602][ T808] ? __pfx__printk+0x10/0x10 [ 325.636215][ T808] ? __pfx_vpanic+0x10/0x10 [ 325.640756][ T808] ? is_bpf_text_address+0x292/0x2b0 [ 325.646077][ T808] ? is_bpf_text_address+0x26/0x2b0 [ 325.651327][ T808] panic+0xc5/0xd0 [ 325.655071][ T808] ? __pfx_panic+0x10/0x10 [ 325.659537][ T808] ? ret_from_fork_asm+0x1a/0x30 [ 325.664509][ T808] __warn+0x315/0x4c0 [ 325.668541][ T808] ? __rate_control_send_low+0x60c/0x8a0 [ 325.674230][ T808] ? __rate_control_send_low+0x60c/0x8a0 [ 325.679901][ T808] __report_bug+0x276/0x570 [ 325.684437][ T808] ? __rate_control_send_low+0x60c/0x8a0 [ 325.690099][ T808] ? __pfx___report_bug+0x10/0x10 [ 325.695163][ T808] ? unwind_next_frame+0x1baf/0x2550 [ 325.700476][ T808] ? unwind_next_frame+0x8f/0x2550 [ 325.705606][ T808] ? lock_acquire+0x106/0x350 [ 325.710333][ T808] report_bug_entry+0x19a/0x290 [ 325.715209][ T808] ? __rate_control_send_low+0x638/0x8a0 [ 325.720863][ T808] ? __rate_control_send_low+0x63d/0x8a0 [ 325.726513][ T808] handle_bug+0xce/0x200 [ 325.730774][ T808] exc_invalid_op+0x1a/0x50 [ 325.735388][ T808] asm_exc_invalid_op+0x1a/0x20 [ 325.740272][ T808] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 325.746567][ T808] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 325.766190][ T808] RSP: 0018:ffffc90004b16738 EFLAGS: 00010246 [ 325.772279][ T808] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 325.780262][ T808] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9069b9c0 [ 325.788306][ T808] RBP: ffff888067050f40 R08: 0000000000000000 R09: 0000000000000000 [ 325.796300][ T808] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807d38b028 [ 325.804280][ T808] R13: dffffc0000000000 R14: ffffffff9069b9c0 R15: ffff888067053258 [ 325.812293][ T808] ? __rate_control_send_low+0x600/0x8a0 [ 325.818016][ T808] rate_control_send_low+0x1a7/0x7b0 [ 325.823344][ T808] ? __lock_acquire+0x683/0x2cf0 [ 325.828310][ T808] rate_control_get_rate+0x20b/0x5d0 [ 325.833627][ T808] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 325.839303][ T808] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 325.845426][ T808] ? __asan_memcpy+0x40/0x70 [ 325.850039][ T808] invoke_tx_handlers_late+0xb5/0x1830 [ 325.855555][ T808] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 325.861477][ T808] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 325.866921][ T808] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 325.872669][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 325.878056][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 325.883099][ T808] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 325.888597][ T808] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 325.894525][ T808] ieee80211_queue_skb+0x1923/0x22c0 [ 325.899848][ T808] ieee80211_tx+0x2c2/0x4b0 [ 325.904384][ T808] ? __pfx_ieee80211_tx+0x10/0x10 [ 325.909449][ T808] ? ieee80211_xmit+0x2e5/0x3c0 [ 325.914330][ T808] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 325.920365][ T808] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 325.926544][ T808] ? worker_thread+0xa47/0xfb0 [ 325.931328][ T808] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 325.937788][ T808] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 325.944072][ T808] ieee80211_subif_start_xmit+0xf1/0x570 [ 325.949768][ T808] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 325.956040][ T808] ? __pfx_netif_skb_features+0x10/0x10 [ 325.961613][ T808] dev_hard_start_xmit+0x2cd/0x830 [ 325.966757][ T808] __dev_queue_xmit+0x14c0/0x3820 [ 325.971803][ T808] ? __lock_acquire+0x683/0x2cf0 [ 325.976773][ T808] ? __dev_queue_xmit+0x29b/0x3820 [ 325.981916][ T808] ? ___neigh_create+0x1cd2/0x22b0 [ 325.987072][ T808] ? __pfx___dev_queue_xmit+0x10/0x10 [ 325.992493][ T808] ? neigh_resolve_output+0x428/0x720 [ 325.997911][ T808] ? eth_header+0x11b/0x200 [ 326.002461][ T808] ? __asan_memcpy+0x40/0x70 [ 326.007113][ T808] ? ip6_output+0x11e/0x540 [ 326.011651][ T808] ip6_output+0x337/0x540 [ 326.016016][ T808] ? __pfx_ip6_output+0x10/0x10 [ 326.020903][ T808] NF_HOOK+0x177/0x4f0 [ 326.025012][ T808] ? __pfx_NF_HOOK+0x10/0x10 [ 326.029641][ T808] ? icmp6_dst_alloc+0x39b/0x430 [ 326.034609][ T808] ? __pfx_dst_output+0x10/0x10 [ 326.039485][ T808] ? __local_bh_enable_ip+0xd0/0x130 [ 326.044819][ T808] ? icmp6_dst_alloc+0x39b/0x430 [ 326.049788][ T808] ? icmp6_dst_alloc+0x39b/0x430 [ 326.054765][ T808] mld_sendpack+0x890/0xe10 [ 326.059324][ T808] ? mld_sendpack+0x206/0xe10 [ 326.064036][ T808] ? __pfx_mld_sendpack+0x10/0x10 [ 326.069118][ T808] mld_ifc_work+0x842/0xd60 [ 326.073664][ T808] ? process_scheduled_works+0xa20/0x14e0 [ 326.079421][ T808] process_scheduled_works+0xa8e/0x14e0 [ 326.085044][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.091084][ T808] ? assign_work+0x3cf/0x5d0 [ 326.095740][ T808] worker_thread+0xa47/0xfb0 [ 326.100396][ T808] ? __kthread_parkme+0x71/0x1f0 [ 326.105385][ T808] kthread+0x388/0x470 [ 326.109486][ T808] ? __pfx_worker_thread+0x10/0x10 [ 326.114628][ T808] ? __pfx_kthread+0x10/0x10 [ 326.119258][ T808] ret_from_fork+0x514/0xb70 [ 326.123886][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 326.129035][ T808] ? __switch_to+0xc89/0x1420 [ 326.133804][ T808] ? __pfx_kthread+0x10/0x10 [ 326.138420][ T808] ret_from_fork_asm+0x1a/0x30 [ 326.143216][ T808] [ 326.146858][ T808] Kernel Offset: disabled [ 326.151200][ T808] Rebooting in 86400 seconds..