last executing test programs: 7.362241941s ago: executing program 3 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) (async) 7.183572546s ago: executing program 3 (id=2727): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000840)={&(0x7f0000000640), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x1401, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000013000500002000000003000007000000", @ANYRES32=r4, @ANYBLOB="00040100521900000c001a800800058004000680"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0xfc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf3}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x223}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x101}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x53453634}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x20) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0xfc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf3}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x223}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x101}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x53453634}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dummy0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r6) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r7, 0x325, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r7, 0x325, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xe2b}, {0x6, 0x11, 0x7fff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c00018006000600800a0000100007"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.908091909s ago: executing program 3 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x10) 6.86729775s ago: executing program 3 (id=2733): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) close(r0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x6d, 0x8) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0xc1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000300)={0x2, {0x14, 0x7, 0x4, 0x0, 0x8}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, r6, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "04753923c3c1d06f744159d3b6bd98fc3211aa842f9650a3"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5ebf70dd894e489ed07c74abca054f4d27227959ab3d6d84"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f00000005c0)=0xffff, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'syztnl2\x00', r5, 0x8000, 0x8, 0x7ff, 0x5, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x66, 0x0, 0xbd, 0x2b, 0x0, @multicast2, @multicast1, {[@generic={0x83, 0xe, "23944892bae9222f53561cb3"}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x2, 0x6, "ef24b4c6"}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x248, r9, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20028811}, 0x40004) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000a40)={'rose0\x00', {0x2, 0x4e23, @multicast1}}) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000001340)={&(0x7f0000000ac0), 0xc, &(0x7f0000001300)={&(0x7f0000000b40)={0x7a4, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TID_CONFIG={0x77c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x36, 0xc, 0x18, 0x12, 0x18, 0xc, 0x6c, 0x1, 0x24, 0x48, 0x30, 0x30, 0x18, 0x12, 0xc, 0x24, 0x12]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x4}, {0x2, 0x9}, {0x1, 0x6}, {0x6}, {0x0, 0x5}, {0x6}, {0x3, 0x5}, {0x2, 0x4}, {0x1}, {0x1, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x4, 0x1, 0x4, 0x6, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xd, 0x6, 0x3, 0xc00, 0x3ff, 0x7, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1c, 0x0, 0x8, 0x4, 0x1, 0xdc4, 0x5]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x2, 0x18, 0x24, 0x12, 0x48, 0x18, 0x18, 0x37]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x8}, {0x6, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x6, 0x7}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x4}, {0x4}, {0x2, 0x8}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x8, 0xa0af, 0x89, 0x9, 0x4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x30, 0x36, 0x1b, 0xb, 0x36, 0x30, 0x24, 0x6c, 0x20, 0x1, 0x36, 0x60, 0x60, 0xb]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x6, 0x8, 0xe, 0x9, 0x1, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x48, 0x1, 0x18, 0x2, 0x3, 0xb, 0x6c, 0x2, 0xb, 0x9, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x9}, {}, {0x6, 0x7}, {0x2}, {0x0, 0x6}, {0x1}, {0x0, 0x3}, {0x7, 0xa}, {0x2, 0x1}, {0x3, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x6}, {0x3, 0x3}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x3, 0x6}, {0x6, 0x6}, {0x7, 0x6}, {0x3, 0x4}, {0x1}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0xa}, {0x7, 0x4}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {}, {0x5, 0x7}, {0x2, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x5, 0x6}, {0x1, 0x8}, {0x2}, {0x7, 0x8}, {0x2, 0x3}, {0x2, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xb3fe, 0xf000, 0x41, 0x7, 0x1, 0x1000, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7, 0xdb69, 0x6, 0x5, 0xdb, 0xfc01]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x24, 0x3, 0x24, 0x6c, 0x36, 0x4, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1000, 0x0, 0x120, 0x8000, 0x1, 0x2, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8, 0x2, 0x4, 0x41fa, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x9, 0x9, 0x6, 0x3ff, 0xfe01, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7, 0x7, 0x6, 0x4, 0x400, 0xb9, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x49c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9f}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xeef, 0x4, 0x0, 0x0, 0x1, 0x8f, 0xf4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x450, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x4, 0x48, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x80, 0x3e7, 0x7, 0x4, 0x8, 0x7]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x2, 0x6, 0x1b, 0x5, 0x16, 0x9, 0x0, 0x1, 0x6d, 0x36, 0xf, 0x18, 0x16, 0x16, 0x833208510a6ff781, 0x9, 0x1b, 0x9, 0xb, 0xb, 0x3, 0x2, 0x4, 0x6c, 0x24, 0x32, 0x6, 0x6, 0x18, 0x9, 0x24]}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x4, 0xb, 0x12, 0x12, 0x48, 0xb, 0x24, 0x6c, 0x16, 0x9, 0x12, 0x36, 0xd9ffd174a3f8024d, 0x2, 0x9, 0x9, 0xc, 0x48, 0x5, 0x4, 0x5b, 0x48]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x6}, {0x1, 0x6}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x3}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0x5}, {0x1, 0x2}, {0x2, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x4}, {0x3, 0x6}, {0x6, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x7}, {0x3}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x1}, {0x3, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x1}]}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x4}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x1}, {0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x4}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x1}, {0x6, 0x3}, {0x2, 0xa}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x60, 0xc, 0xc, 0x5, 0x30, 0x32, 0x16, 0x44, 0x16, 0x6, 0x7b, 0x3, 0x4, 0x2, 0x0, 0xc, 0x5]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x48, 0x20, 0x1b, 0x16, 0x16, 0x2, 0x9, 0x18, 0x1, 0x1, 0x6, 0x48, 0x3, 0x1b, 0x5f, 0x12, 0x3, 0x1b, 0x0, 0x0, 0x1b, 0x1, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x16, 0x16, 0xc, 0x1b, 0x18, 0x30, 0x6c, 0x12, 0x1, 0x2, 0x36, 0x9, 0x4, 0x16, 0x1, 0x36, 0xc, 0x24, 0x18, 0xc, 0x2, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x6, 0x7, 0x3ff, 0x4, 0x7, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x1b, 0x4, 0x12, 0x1, 0xc, 0x6, 0x16, 0xc, 0x1b, 0xc, 0x9, 0x24, 0x3, 0x4, 0x12, 0x12, 0x48, 0x5, 0x5, 0x24, 0xb, 0x6, 0x7baa5e6109f74f1b, 0xc, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x800, 0x3, 0xf5ad, 0x400, 0x9, 0xff81, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x5e6, 0x1, 0x10, 0x7, 0x2, 0x101]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x3, 0x48, 0x36, 0x5, 0x18, 0x6, 0x60, 0x3, 0x6c, 0x0]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1e, 0xb, 0x5, 0x2, 0x12, 0x6, 0x12, 0x2, 0x1, 0x36, 0x1b, 0x1b, 0x24, 0xc, 0x1b, 0xc, 0x30, 0xb, 0x12, 0x9, 0x48, 0x60, 0x6c]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x8}, {0x7, 0x7}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x1}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x5}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x2}, {0x7, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x2, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x9}, {0x7, 0x9}, {0x4, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5}, {0x5, 0x4}, {0x5, 0x3}, {0x4, 0x1}, {0x0, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x4, 0x4}, {0x2, 0xa}, {0x6, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x9}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0x5}, {0x7, 0x3}, {0x3, 0x5}, {0x3, 0x5}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xb, 0x0, 0x1, 0x4, 0x426e, 0x100, 0xfc7d]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x7}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x7}, {0x3, 0x8}, {0x2, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x7}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x2, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x9}, {0x5, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x3}, {0x0, 0xa}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0xd09, 0x5, 0x1, 0x7, 0x8000, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x8, 0x7, 0xd, 0x4, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7ff, 0x8, 0x4, 0x3, 0x3, 0x3, 0x2]}}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x5d, 0x2, 0x48, 0x24, 0x6c, 0xb, 0x60, 0x18, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x7ff, 0x81, 0x0, 0x5, 0x2, 0xfff9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0x9, 0xff, 0x7, 0x5, 0xfffc, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x3d, 0x1b, 0x60, 0x48, 0x4, 0x1b, 0xc, 0x2, 0x6c, 0x60, 0xc, 0x16, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x3, 0x3ff, 0x8001, 0x8001, 0x0, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x2, 0x7ff, 0x8a, 0x73d1, 0x2, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x800, 0x4, 0x6, 0x6, 0x0, 0x3, 0x26e8]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x60, 0x48, 0x4, 0x36, 0xe7df795168ae35bc, 0x2, 0x60, 0x4, 0x1b, 0x9, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x5, 0x5}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x7}, {0x4}, {}, {0x3, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x1}, {0x4}, {0x7, 0x6}, {}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x7}, {0x3, 0x2}, {0x5, 0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0x2}, {0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x4, 0x9}, {0x6, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0xb, 0xb, 0x18, 0x48, 0x60, 0x9, 0x6, 0x2, 0x24, 0x60, 0x24, 0x9, 0x48, 0x1b, 0x0, 0x4, 0x9, 0x24, 0x4a, 0x30, 0x36, 0x3]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x12, 0x6c, 0xb, 0x0, 0x3, 0x48, 0x36, 0x4, 0x16, 0x54, 0xb, 0x6c, 0x48, 0x18, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001400)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002400)={r14, 0x8}) 6.606002171s ago: executing program 3 (id=2739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7ffffffe}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='cubic', 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x9}}]}}}]}, 0x60}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008000900001cf10f0000000290780000ebffab141422110090780005000109105a2b2295e09f3069b3a2bcbe937f36e597cf051485cdd1009beeea24eb0240564568c4aa260834f15aff2eec2a02f2d4b8e512da6df123050b2b84d17bdc1d949254557c0e1a35937a86fd01b9324eb1c58dc79646666291ffb8fa9d2dc46a6d"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x1c, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000000000002000000140000001100010000000000000000000000000a0000000000000000"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000a40)=@ethtool_cmd={0x3d, 0x0, 0xfffffffd, 0x1, 0x2, 0x3, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, [0x0, 0x2]}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x400c1, 0xffffffffffffffff, 0x676, '\x00', r8, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x0, 0x10200}, [@IFLA_PHYS_PORT_ID={0x1a, 0x22, "8add2735039eb7bbf5219e8fce1ab0fb0c33e797aba5"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5.664351256s ago: executing program 3 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0104000000000000000002000000600004805c0001800b00010065787468647200004c00028008000540000000e1080001400000000f080003400000005b08000440000000b605000200830000000800074000000009080001400000000108000340000000fe08000340000000540900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.550987925s ago: executing program 2 (id=2809): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x8, 0x2, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x8, 0x4, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0xc, 0x7, 0x25, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7800, 0x6c, 0x4}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@local, @dev, 0x0}, &(0x7f0000000380)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x8, 0x10, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x788, 0x7, 0xfffffff8, 0x5}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xdc, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100000}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7fff}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.29514784s ago: executing program 1 (id=2812): r0 = socket(0x10, 0x803, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x1, 0xff, 0x4, [0x2, 0x200, 0x8, 0x100000001]}}) 1.244331665s ago: executing program 2 (id=2813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="eb2c707b62a50be5db435263000800"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x20, r7, 0x8d52e7128bb80e97, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x2000c000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r5], 0x4c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x4, 0x4, 0x1, 0x7fff, 0x3ee, 0xa, 0x919, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x80000, 0x2, 0x3, 0xad1, 0x3}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000000440)={r12, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f00000002c0)=0x84) connect$rose(r10, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x8, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r8) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00042cbd7000fcdbdf2507000000040001800100068008000700", @ANYRES32=r5, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x90) 1.195894915s ago: executing program 1 (id=2814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r1 = socket$caif_seqpacket(0x25, 0x5, 0x20020) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f00000000c0)="7d05a5367ff1ef59d6fdd6885a1df5b290da4991b29bd8786a0bb06a493bd86b8795f857fce195c4e4556a195b0e46807e01a7accb7a7688bdba52426e17a9ebefd91715a9b203cfb5b442e4ad614b12b849039f6295b59b7996c428bcecf3b86cc5", 0x62) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) recvfrom(r0, &(0x7f0000000140)=""/234, 0xea, 0x102, 0x0, 0x0) 1.109556047s ago: executing program 0 (id=2815): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000200012800e000100697036677265746170"], 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.040074329s ago: executing program 4 (id=2816): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev, @dev}}) connect$netlink(r3, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private0, 0x0, 0x1, 0xfffffffe}}) 1.038522272s ago: executing program 1 (id=2817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000060000000e0dc60f000000be8f08475fdd915cfcfcb7b5e22bd33405376c586508a892d6da793db9cc8136bf983c39792c176312d00610fe38f848387b4d1fb0663aa5c33a75"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd39, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40008d5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa0000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 943.215323ms ago: executing program 4 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) sendto$llc(r2, &(0x7f0000000040)="3d7b646579892d332655", 0xa, 0x814, &(0x7f00000000c0)={0x1a, 0xf, 0x7, 0x9, 0x1b, 0x3, @remote}, 0x10) 902.570646ms ago: executing program 2 (id=2819): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close(0x4) 839.116916ms ago: executing program 0 (id=2820): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000002c0)={{r2}, 0x3, &(0x7f0000000200)=[0x3, 0x4, 0x9], 0x7fffffff, 0x6}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r0, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x80c4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r6], 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x54c}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x20008080) write$cgroup_devices(r8, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) 752.893375ms ago: executing program 2 (id=2821): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 685.143187ms ago: executing program 0 (id=2822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 619.928183ms ago: executing program 2 (id=2823): syz_emit_ethernet(0x10b, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x38, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@local}, {@rand_addr=0x64010102, 0x6}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x4, 0x46, 0x0, 0x1}]}}, "bc"}}}}}, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 588.030127ms ago: executing program 1 (id=2824): socketpair(0x26, 0x3, 0x8, &(0x7f0000000000)) 583.101581ms ago: executing program 4 (id=2825): r0 = socket$inet(0x10, 0x3, 0x2) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004d4e000f00000000000000fff4000000000000dd00000000"], 0x48) (async) r1 = socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x2}}, 0x1c}}, 0x20008004) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x12}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r11, 0x58, &(0x7f00000014c0)}, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) (async, rerun: 64) pwritev(r10, &(0x7f00000002c0)=[{&(0x7f0000000000)="8ee9876d63d737af82dfa232859f4a3c76b5216abd0e863e1d251d23c0abaf6429c0506e6eec5299ee173a3b1b7a0fa3722e94d2bcbea4c0bd55d6e4c5e705d572b1ca940914bf88c52e6a75fc2a6d6e0153ea48db7c4051139de0ab790ec47d84b1c51ab1b5168002de9dc8f9d793e01a69e96050c2924537bdd5c1f4825b3d2927f245ee1f7429e7de910358e1256fba0070077bc30c34555c276363aa3921c1297767ba4d997c384e2520", 0xac}, {&(0x7f0000000400)="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", 0x106}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000001c0)="e1c39eaa91d4234fd818d475c350604f8412359978131c1a2ca13d887fbef944cfaa5be5b6268b8ceb858b1606e2b254e8e65723b32b97e29c95bb2ada61807680848b23204b12db622520ec7363e28986f8026ba3840c7c82052dbebd8e07ab45e2c4a2f286956edf3ac927e9ad6e515093983cde856b7629822ebc2fb21bcbca24d12addf4750445e57bb67c6a25020efc2827e839d1179e13d2cabcefa3b797ab", 0xa2}, {&(0x7f0000000280)="6734b7264a6afef573f83a77c58eac22e76fe8e620595b0b708be1a22c24100ce8488f2f0d35ad9a61e3f249379e76375a", 0x31}], 0x5, 0x6, 0x4000) (async, rerun: 64) r13 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) (async) getsockname$packet(r13, 0x0, &(0x7f0000000240)) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="df2234227000ffdbdf250500000004000180000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) (rerun: 32) 487.863264ms ago: executing program 2 (id=2826): r0 = socket$inet6(0xa, 0x802, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) 484.059313ms ago: executing program 0 (id=2827): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1410, 0x1}, 0x10}}, 0x0) 439.554347ms ago: executing program 0 (id=2828): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x8, {@in6_addr=@empty, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r6, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="000000000000000014001a80308005800c000380080001"], 0x34}, 0x1, 0x0, 0x0, 0x20000811}, 0x20000000) 418.444479ms ago: executing program 1 (id=2829): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004c0000440000000000069078ac1414bbac1414aa441c0a010000000000000000ac14140000000000ac1414000000000000004e22", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="5c78000956c4770a25a74d0ab238bcee00010000002d45b999db53c1c53b321837000000000000000025ff7915560238b684a36d6efcc186b13f7648cb973cff971661b688b1cc09d8e299f40a76e400"/93], 0x0) 268.069948ms ago: executing program 4 (id=2830): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e62e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x1, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_buf(r3, 0x29, 0x13, 0x0, &(0x7f00000001c0)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, r0, 0x4, r0}, 0x10) 246.488706ms ago: executing program 0 (id=2831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 245.666202ms ago: executing program 1 (id=2832): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x300}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x48010) 194.70218ms ago: executing program 4 (id=2833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r2, &(0x7f00000000c0), 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800003}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) socket$isdn(0x22, 0x3, 0x24) 0s ago: executing program 4 (id=2834): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x100, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8000) kernel console output (not intermixed with test programs): 'syz.2.290': attribute type 1 has an invalid length. [ 99.086302][ T7014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.106416][ T7018] netlink: 'syz.1.294': attribute type 1 has an invalid length. [ 99.202199][ T7018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.873508][ T7051] ip6erspan0: entered promiscuous mode [ 99.921675][ T7054] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 100.003194][ T7054] bond5: entered promiscuous mode [ 100.032972][ T7054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.078318][ T7065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 100.089039][ T7065] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 100.108951][ T7079] __nla_validate_parse: 7 callbacks suppressed [ 100.108968][ T7079] netlink: 88 bytes leftover after parsing attributes in process `syz.3.308'. [ 100.126438][ T7065] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 100.142998][ T7065] bond5: (slave wireguard1): making interface the new active one [ 100.151511][ T7065] wireguard1: entered promiscuous mode [ 100.159997][ T7065] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 100.175689][ T7082] openvswitch: netlink: IPv4 tun info is not correct [ 100.182375][ T7054] netlink: 636 bytes leftover after parsing attributes in process `syz.2.305'. [ 100.847269][ T7101] netlink: 'syz.1.316': attribute type 64 has an invalid length. [ 100.856324][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 101.004287][ T7106] netlink: 88 bytes leftover after parsing attributes in process `syz.4.317'. [ 101.073927][ T7112] netlink: 'syz.3.318': attribute type 11 has an invalid length. [ 101.159960][ T7119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.251367][ T7123] tls_set_device_offload_rx: netdev not found [ 101.345782][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 101.553089][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 101.625808][ T7126] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 101.666990][ T7160] wireguard: wg2: Could not create IPv4 socket [ 101.686960][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.738969][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.334'. [ 101.847065][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 102.093963][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 102.174685][ T7193] netlink: 51 bytes leftover after parsing attributes in process `syz.0.342'. [ 102.354860][ T7203] netlink: 'syz.3.348': attribute type 11 has an invalid length. [ 102.824485][ T7230] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 102.857580][ T7233] netlink: 'syz.3.356': attribute type 6 has an invalid length. [ 103.058900][ T7232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.063110][ T7237] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 103.081638][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.089690][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.096934][ T7237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.233770][ T7258] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 103.249720][ T7258] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 103.893380][ T7295] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.060247][ T7295] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.124043][ T7311] netlink: 'syz.4.376': attribute type 3 has an invalid length. [ 104.259583][ T7295] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.392117][ T7295] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.641793][ T7339] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 104.693220][ T7339] netlink: 'syz.2.382': attribute type 83 has an invalid length. [ 104.707247][ T993] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.762600][ T993] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.791691][ T993] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.842945][ T7352] dvmrp0: entered allmulticast mode [ 104.855945][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.950952][ T7358] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 104.994917][ T7362] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 105.055991][ T7362] team0: Device veth1_macvtap failed to register rx_handler [ 105.123543][ T7368] syzkaller1: entered promiscuous mode [ 105.141072][ T7368] syzkaller1: entered allmulticast mode [ 105.149594][ T7368] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 105.308911][ T7383] __nla_validate_parse: 10 callbacks suppressed [ 105.308929][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 105.406913][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.414439][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.424971][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.439962][ T7388] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.454942][ T7390] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 105.460433][ T7388] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.469086][ T7390] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 105.496913][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.504222][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.514445][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.522610][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.531375][ T7388] hsr0 speed is unknown, defaulting to 1000 [ 105.573494][ T7393] netlink: 9 bytes leftover after parsing attributes in process `syz.0.404'. [ 105.584866][ T7393] gretap0: entered promiscuous mode [ 105.662888][ T7397] netlink: 'syz.3.405': attribute type 6 has an invalid length. [ 105.862516][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 105.969574][ T7411] syzkaller0: entered promiscuous mode [ 105.983988][ T7411] syzkaller0: entered allmulticast mode [ 105.998070][ T7411] netlink: 256 bytes leftover after parsing attributes in process `syz.0.411'. [ 106.034490][ T7414] netlink: 84 bytes leftover after parsing attributes in process `syz.2.412'. [ 106.130992][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'. [ 107.487170][ T7433] syzkaller0: entered promiscuous mode [ 107.493097][ T7433] syzkaller0: entered allmulticast mode [ 109.302742][ T7491] netlink: 'syz.2.427': attribute type 2 has an invalid length. [ 109.345291][ T7491] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.427'. [ 109.346177][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 109.381877][ T7495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.428'. [ 109.432383][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 110.022496][ T7543] 0ªî{X¹¦: entered promiscuous mode [ 110.043770][ T7543] batadv_slave_1: entered promiscuous mode [ 110.252120][ T7558] netlink: 'syz.1.450': attribute type 10 has an invalid length. [ 110.396653][ T7569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.602422][ T7576] netlink: 'syz.3.456': attribute type 2 has an invalid length. [ 110.894025][ T7605] __nla_validate_parse: 5 callbacks suppressed [ 110.894042][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 111.173113][ T7620] macsec0: entered promiscuous mode [ 111.183882][ T7622] netlink: 76 bytes leftover after parsing attributes in process `syz.3.469'. [ 111.194676][ T7620] batadv0: entered promiscuous mode [ 111.202725][ T7620] hsr2: entered allmulticast mode [ 111.215938][ T7620] macsec0: entered allmulticast mode [ 111.221266][ T7620] veth1_macvtap: entered allmulticast mode [ 111.233183][ T7620] batadv0: entered allmulticast mode [ 111.259004][ T7620] macsec0: left promiscuous mode [ 111.273840][ T7620] batadv0: left promiscuous mode [ 111.287420][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.467'. [ 111.398311][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 111.521344][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 111.580625][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'. [ 111.659735][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 111.683020][ T7659] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 111.838080][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 111.863430][ T7666] syzkaller1: entered promiscuous mode [ 111.869196][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 111.902030][ T7673] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 111.905074][ T7666] syzkaller1: entered allmulticast mode [ 111.926039][ T7674] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 112.020730][ T7673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.176058][ T7680] bond1: (slave veth3): Enslaving as an active interface with a down link [ 112.264445][ T7672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.277095][ T7694] Illegal XDP return value 3871651282 on prog (id 89) dev N/A, expect packet loss! [ 112.319852][ T7697] netlink: 'syz.0.489': attribute type 21 has an invalid length. [ 112.327874][ T7697] netlink: 152 bytes leftover after parsing attributes in process `syz.0.489'. [ 112.423545][ T7701] netlink: ct family unspecified [ 112.434627][ T7701] openvswitch: netlink: Actions may not be safe on all matching packets [ 112.804682][ T7724] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 113.297887][ T7759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.305414][ T7759] IPv6: NLM_F_CREATE should be set when creating new route [ 113.350347][ T7764] syz.1.507 uses old SIOCAX25GETINFO [ 113.352672][ T7760] veth1_macvtap: left allmulticast mode [ 113.378789][ T7760] veth1_macvtap: left promiscuous mode [ 113.662811][ T7776] hsr_slave_0 (unregistering): left promiscuous mode [ 113.674212][ T7784] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 113.760059][ T7789] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003 [ 114.005667][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.069743][ T7812] gretap0: entered promiscuous mode [ 114.080511][ T7812] gretap0: left promiscuous mode [ 114.205687][ T7821] vlan2: entered allmulticast mode [ 114.220266][ T7821] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 114.625538][ T7856] Unsupported ieee802154 address type: 0 [ 114.814634][ T7870] netlink: 'syz.2.539': attribute type 27 has an invalid length. [ 114.834585][ T7869] netlink: 'syz.2.539': attribute type 27 has an invalid length. [ 114.912204][ T7869] macsec1: entered promiscuous mode [ 114.948640][ T7869] macsec1: entered allmulticast mode [ 114.994268][ T7882] tipc: Started in network mode [ 115.000643][ T7882] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 115.011700][ T7882] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 115.022871][ T7882] tipc: Enabled bearer , priority 10 [ 115.092226][ T7893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.185585][ T7896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.517187][ T7912] bridge_slave_0: left allmulticast mode [ 115.523058][ T7912] bridge_slave_0: left promiscuous mode [ 115.529785][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.548310][ T7912] bridge_slave_1: left allmulticast mode [ 115.554919][ T7912] bridge_slave_1: left promiscuous mode [ 115.563510][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.574922][ T7912] bond0: (slave bond_slave_0): Releasing backup interface [ 115.592815][ T7912] bond_slave_0: left promiscuous mode [ 115.599550][ T7912] bond_slave_0: left allmulticast mode [ 115.610758][ T7912] bond0: (slave bond_slave_1): Releasing backup interface [ 115.620132][ T7912] bond_slave_1: left promiscuous mode [ 115.625882][ T7912] bond_slave_1: left allmulticast mode [ 115.638384][ T7912] team0: Port device team_slave_0 removed [ 115.652134][ T7912] team0: Port device team_slave_1 removed [ 115.660007][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.668261][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.678448][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.687537][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.017814][ T9] tipc: Node number set to 1 [ 116.042851][ T7935] trusted_key: syz.3.561 sent an empty control message without MSG_MORE. [ 116.240168][ T7949] nft_compat: unsupported protocol 1 [ 116.429185][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.524762][ T7962] __nla_validate_parse: 18 callbacks suppressed [ 116.524781][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.569'. [ 116.604418][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 116.614845][ T7970] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 116.632014][ T7970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.642301][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 116.652064][ T7971] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 116.653173][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'. [ 116.670068][ T7971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.868805][ T7986] netlink: 100 bytes leftover after parsing attributes in process `syz.3.577'. [ 117.091499][ T7996] netlink: 'syz.1.574': attribute type 6 has an invalid length. [ 117.139909][ T5971] IPVS: starting estimator thread 0... [ 117.248020][ T8007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.255880][ T8003] IPVS: using max 29 ests per chain, 69600 per kthread [ 117.276077][ T8012] netlink: 200 bytes leftover after parsing attributes in process `syz.3.584'. [ 117.531363][ T8036] netlink: 'syz.3.589': attribute type 33 has an invalid length. [ 117.539305][ T8036] netlink: 152 bytes leftover after parsing attributes in process `syz.3.589'. [ 118.326135][ T8039] sctp: [Deprecated]: syz.4.590 (pid 8039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.326135][ T8039] Use struct sctp_sack_info instead [ 118.450367][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.644339][ T8061] netlink: 'syz.4.597': attribute type 2 has an invalid length. [ 118.771711][ T8065] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 119.235126][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 119.323587][ T8076] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 119.470699][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 119.525437][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.609'. [ 119.762913][ T8105] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 119.797109][ T8106] netlink: 'syz.4.613': attribute type 39 has an invalid length. [ 120.133813][ T8121] hsr0 speed is unknown, defaulting to 1000 [ 120.300733][ T8148] sctp: [Deprecated]: syz.0.622 (pid 8148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.300733][ T8148] Use struct sctp_sack_info instead [ 120.503934][ T8160] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 120.561962][ T8160] bond2 (unregistering): Released all slaves [ 120.598304][ T8167] ip6tnl1: entered promiscuous mode [ 120.603639][ T8167] ip6tnl1: entered allmulticast mode [ 120.656389][ T8166] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 120.664858][ T8166] nbd: error processing sock list [ 120.678409][ T8166] block nbd1: shutting down sockets [ 120.741755][ T8170] netlink: 'syz.2.630': attribute type 10 has an invalid length. [ 120.753321][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.761933][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.787317][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.794541][ T8170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.802086][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.809278][ T8170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.824387][ T8170] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 121.074883][ T8185] macvlan0: mtu less than device minimum [ 121.078763][ T1217] IPVS: starting estimator thread 0... [ 121.175286][ T8193] IPVS: using max 30 ests per chain, 72000 per kthread [ 121.228002][ T8206] tipc: Enabled bearer , priority 0 [ 121.236387][ T8206] syzkaller0: entered promiscuous mode [ 121.241996][ T8206] syzkaller0: entered allmulticast mode [ 121.300561][ T8206] tipc: Resetting bearer [ 121.357800][ T8205] tipc: Resetting bearer [ 121.393006][ T8205] tipc: Disabling bearer [ 121.608321][ T8229] __nla_validate_parse: 6 callbacks suppressed [ 121.608339][ T8229] netlink: 44 bytes leftover after parsing attributes in process `syz.3.646'. [ 121.900809][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 121.928000][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 122.070582][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 122.227705][ T8259] netlink: 68 bytes leftover after parsing attributes in process `syz.0.655'. [ 122.237064][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 122.240542][ T8263] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.656'. [ 122.255907][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 122.375952][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'. [ 122.539930][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 122.743806][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 122.839691][ T8297] bridge: RTM_NEWNEIGH with invalid ether address [ 122.967874][ T8306] hsr0 speed is unknown, defaulting to 1000 [ 123.060580][ T8311] netlink: 'syz.0.673': attribute type 21 has an invalid length. [ 123.227917][ T8321] macvlan0: entered allmulticast mode [ 123.239182][ T8321] veth1_vlan: entered allmulticast mode [ 123.603340][ T8343] sctp: [Deprecated]: syz.2.683 (pid 8343) Use of int in max_burst socket option deprecated. [ 123.603340][ T8343] Use struct sctp_assoc_value instead [ 123.614108][ T8346] syzkaller1: entered promiscuous mode [ 123.640319][ T8346] syzkaller1: entered allmulticast mode [ 123.733285][ T8356] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 123.746351][ T8348] veth5: entered allmulticast mode [ 123.995829][ T8368] netlink: 'syz.4.689': attribute type 29 has an invalid length. [ 124.027245][ T8368] netlink: 'syz.4.689': attribute type 29 has an invalid length. [ 124.118887][ T8382] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.121448][ T8380] bond2: entered promiscuous mode [ 124.132611][ T8380] bond2: entered allmulticast mode [ 124.140001][ T8380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.150827][ T8372] tipc: Started in network mode [ 124.157170][ T8372] tipc: Node identity aa4fc31fb94c, cluster identity 4711 [ 124.164750][ T8372] tipc: Enabled bearer , priority 0 [ 124.172006][ T8383] syzkaller0: entered promiscuous mode [ 124.194268][ T8383] syzkaller0: entered allmulticast mode [ 124.229342][ T8372] tipc: Resetting bearer [ 124.310520][ T8371] tipc: Resetting bearer [ 124.485466][ T8371] tipc: Disabling bearer [ 124.600163][ T8405] netlink: 'syz.2.701': attribute type 21 has an invalid length. [ 124.632304][ T8408] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 124.647067][ T8408] nbd: couldn't find device at index 1048576 [ 124.657613][ T8396] netlink: 'syz.4.698': attribute type 23 has an invalid length. [ 124.689641][ T8409] netlink: 'syz.0.702': attribute type 83 has an invalid length. [ 124.751141][ T8409] bridge1: entered promiscuous mode [ 124.779257][ T8409] bridge1: entered allmulticast mode [ 125.174924][ T44] IPVS: starting estimator thread 0... [ 125.265300][ T8434] IPVS: using max 28 ests per chain, 67200 per kthread [ 125.390652][ T8435] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 125.506659][ T8435] veth5: entered promiscuous mode [ 125.538712][ T8435] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 125.656020][ T8456] unsupported nlmsg_type 40 [ 125.783155][ T8466] IPVS: set_ctl: invalid protocol: 7 172.20.20.62:20002 [ 125.829665][ T8461] syzkaller0: entered promiscuous mode [ 125.835541][ T8461] syzkaller0: entered allmulticast mode [ 125.943331][ T8470] validate_nla: 2 callbacks suppressed [ 125.943351][ T8470] netlink: 'syz.3.719': attribute type 21 has an invalid length. [ 126.047274][ T3587] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.047410][ T8470] netlink: 'syz.3.719': attribute type 21 has an invalid length. [ 126.080829][ T3587] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.123825][ T3587] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.200660][ T3587] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.373671][ T8490] IPVS: Error connecting to the multicast addr [ 126.397386][ T8490] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 126.405527][ T8490] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 126.426967][ T8490] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 126.564096][ T8494] syzkaller1: entered promiscuous mode [ 126.615294][ T8494] syzkaller1: entered allmulticast mode [ 126.658452][ T8502] netlink: 'syz.2.727': attribute type 28 has an invalid length. [ 126.682573][ T8502] netlink: 'syz.2.727': attribute type 3 has an invalid length. [ 126.693044][ T8502] __nla_validate_parse: 30 callbacks suppressed [ 126.693059][ T8502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.727'. [ 126.759745][ T8506] syzkaller1: entered promiscuous mode [ 126.766877][ T8506] syzkaller1: entered allmulticast mode [ 126.828364][ T8512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.832315][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 126.853515][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 127.078614][ T8531] team_slave_0: mtu greater than device maximum [ 127.239498][ T8536] macvlan0: entered promiscuous mode [ 127.286828][ T8536] batadv0: entered promiscuous mode [ 127.333770][ T8536] debugfs: 'hsr1' already exists in 'hsr' [ 127.374400][ T8536] Cannot create hsr debugfs directory [ 127.399753][ T8536] hsr1: entered allmulticast mode [ 127.407528][ T8536] macvlan0: entered allmulticast mode [ 127.412975][ T8536] veth1_vlan: entered allmulticast mode [ 127.421314][ T8536] batadv0: entered allmulticast mode [ 127.428672][ T8536] macvlan0: left promiscuous mode [ 127.449284][ T8536] batadv0: left promiscuous mode [ 127.525569][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.735900][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.4.745'. [ 127.768202][ T8570] netlink: 'syz.4.745': attribute type 2 has an invalid length. [ 127.923122][ T8579] hsr0 speed is unknown, defaulting to 1000 [ 127.936167][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 128.007258][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.747'. [ 128.043759][ T8575] ip_vti0: entered promiscuous mode [ 128.063578][ T8575] ip_vti0: entered allmulticast mode [ 128.320480][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 128.328369][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.758'. [ 128.656707][ T8602] macvlan2: entered promiscuous mode [ 128.664929][ T8602] macvlan2: entered allmulticast mode [ 128.672531][ T8602] bond2: (slave macvlan2): Opening slave failed [ 128.740899][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 128.740923][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 128.784607][ T8625] tap0: tun_chr_ioctl cmd 1074025677 [ 128.790738][ T8625] tap0: linktype set to 65534 [ 128.796816][ T8626] tap0: tun_chr_ioctl cmd 1074025677 [ 128.802430][ T8626] tap0: linktype set to 823 [ 128.840936][ T8631] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 128.907099][ T8636] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 128.921490][ T8636] nbd: error processing sock list [ 128.930593][ T8636] block nbd1: shutting down sockets [ 129.005610][ T8641] vlan2: entered promiscuous mode [ 129.208672][ T8651] hsr0 speed is unknown, defaulting to 1000 [ 129.361885][ T8666] netlink: 'syz.4.772': attribute type 11 has an invalid length. [ 129.379700][ T8663] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 129.480437][ T8673] syzkaller0: create flow: hash 287006938 index 2 [ 129.577520][ T8676] tipc: Enabling of bearer rejected, failed to enable media [ 129.694157][ T8681] ipvlan2: entered promiscuous mode [ 129.724526][ T8661] syzkaller0: delete flow: hash 287006938 index 2 [ 131.678635][ T8735] netlink: 'syz.1.794': attribute type 11 has an invalid length. [ 131.694212][ T8739] atomic_op ffff88807675b998 conn xmit_atomic 0000000000000000 [ 131.713541][ T8739] validate_nla: 1 callbacks suppressed [ 131.713559][ T8739] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 131.723090][ T8735] __nla_validate_parse: 9 callbacks suppressed [ 131.723108][ T8735] netlink: 224 bytes leftover after parsing attributes in process `syz.1.794'. [ 131.744472][ T8739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.796'. [ 131.801953][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.794'. [ 131.858311][ T8745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.881620][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 131.901634][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 132.161044][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 132.224073][ T8768] netlink: 'syz.2.807': attribute type 1 has an invalid length. [ 132.272717][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 132.317098][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 132.406650][ T8782] netlink: 'syz.1.809': attribute type 10 has an invalid length. [ 132.449135][ T8782] bridge_slave_1: entered promiscuous mode [ 132.468860][ T8782] bridge_slave_1: entered allmulticast mode [ 132.476286][ T8782] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 132.484341][ T8786] netlink: 88 bytes leftover after parsing attributes in process `syz.2.811'. [ 132.525770][ T8783] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 132.533612][ T8783] nbd: error processing sock list [ 132.539724][ T8783] block nbd1: shutting down sockets [ 132.889451][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040828][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 133.075370][ T8809] netlink: 'syz.2.820': attribute type 32 has an invalid length. [ 133.201451][ T8813] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.287717][ T8819] netlink: 'syz.2.822': attribute type 4 has an invalid length. [ 133.491969][ T8835] netlink: 'syz.0.830': attribute type 11 has an invalid length. [ 133.633108][ T8846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.651180][ T8845] netlink: 'syz.2.832': attribute type 2 has an invalid length. [ 133.663115][ T8845] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 133.714130][ T8845] tipc: Started in network mode [ 133.719227][ T8845] tipc: Node identity 2ad66ab4770a, cluster identity 4711 [ 133.739621][ T8845] tipc: Enabled bearer , priority 0 [ 133.757137][ T8845] syzkaller0: entered promiscuous mode [ 133.762753][ T8845] syzkaller0: entered allmulticast mode [ 133.812132][ T8845] tipc: Resetting bearer [ 133.849005][ T8840] tipc: Resetting bearer [ 133.864085][ T8840] tipc: Disabling bearer [ 134.091610][ T8873] netlink: 'syz.2.842': attribute type 4 has an invalid length. [ 134.600978][ T8906] netlink: 'syz.0.855': attribute type 11 has an invalid length. [ 134.823964][ T8921] netem: unknown loss type 0 [ 134.856071][ T8921] netem: change failed [ 135.239985][ T8951] veth1_vlan (unregistering): left allmulticast mode [ 135.777517][ T8930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.944810][ T8964] vxlan0: entered promiscuous mode [ 135.950668][ T8964] vxlan0: entered allmulticast mode [ 135.965088][ T993] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.994341][ T993] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.016822][ T993] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.034776][ T993] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.053566][ T8970] xfrm1: entered allmulticast mode [ 136.415994][ T9001] netlink: 'syz.3.880': attribute type 11 has an invalid length. [ 136.483900][ T9004] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 136.653562][ T9013] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.763256][ T9024] __nla_validate_parse: 24 callbacks suppressed [ 136.763275][ T9024] netlink: 10 bytes leftover after parsing attributes in process `syz.3.884'. [ 136.817113][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.887'. [ 136.902286][ T9013] vlan0 (unregistering): left allmulticast mode [ 136.908743][ T9013] veth0_vlan (unregistering): left allmulticast mode [ 136.920672][ T9013] vlan0 (unregistering): left promiscuous mode [ 137.037089][ T9025] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 137.071546][ T9032] validate_nla: 5 callbacks suppressed [ 137.071565][ T9032] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 137.107660][ T9032] netlink: 172 bytes leftover after parsing attributes in process `syz.0.888'. [ 137.157363][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 137.281891][ T9047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.311219][ T9047] bond_slave_0: entered promiscuous mode [ 137.317259][ T9047] bond_slave_1: entered promiscuous mode [ 137.333921][ T9047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.374951][ T9047] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 137.774371][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 137.789771][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.899'. [ 138.016663][ T9091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'. [ 138.040918][ T9089] netlink: 3 bytes leftover after parsing attributes in process `syz.3.902'. [ 138.083829][ T9089] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.660293][ T9126] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 138.737777][ T9128] tipc: Enabled bearer , priority 0 [ 138.750551][ T9130] syzkaller1: entered promiscuous mode [ 138.756146][ T9130] syzkaller1: entered allmulticast mode [ 138.782729][ T9132] netlink: 'syz.0.919': attribute type 3 has an invalid length. [ 138.862891][ T9138] tipc: Resetting bearer [ 138.869739][ T9128] block nbd1: server does not support multiple connections per device. [ 138.884626][ T9128] block nbd1: shutting down sockets [ 138.893199][ T9140] tunl0: entered promiscuous mode [ 138.907359][ T9140] netlink: 'syz.0.922': attribute type 3 has an invalid length. [ 138.921087][ T9140] netlink: 9 bytes leftover after parsing attributes in process `syz.0.922'. [ 138.931522][ T9141] netlink: 'syz.1.921': attribute type 11 has an invalid length. [ 138.942715][ T9127] tipc: Disabling bearer [ 138.952639][ T9141] netlink: 'syz.1.921': attribute type 11 has an invalid length. [ 138.964788][ T9141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.921'. [ 139.259371][ T9160] netlink: 'syz.4.928': attribute type 15 has an invalid length. [ 139.606348][ T9179] nbd1: detected capacity change from 0 to 127 [ 139.614681][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 139.651529][ T5864] block nbd1: Receive control failed (result -32) [ 139.716744][ T9189] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 140.273689][ T9232] 0ªî{X¹¦: left allmulticast mode [ 140.302909][ T9232] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 140.327652][ T9232] 1ªî{X¹¦: entered allmulticast mode [ 140.342250][ T9232] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 140.396434][ T9232] netlink: 'syz.2.949': attribute type 7 has an invalid length. [ 140.530308][ T9252] ip6tnl2: entered allmulticast mode [ 140.972469][ T9283] tipc: Enabled bearer , priority 12 [ 141.108117][ T9288] syzkaller0: entered promiscuous mode [ 141.113629][ T9288] syzkaller0: entered allmulticast mode [ 141.222294][ T9292] netlink: 'syz.1.968': attribute type 42 has an invalid length. [ 141.685746][ T9327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.730252][ T9321] ipvlan2: entered promiscuous mode [ 142.048518][ T9338] __nla_validate_parse: 9 callbacks suppressed [ 142.048537][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.981'. [ 142.085180][ T9] tipc: Node number set to 319013663 [ 142.110033][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 142.123162][ T9342] netlink: 56 bytes leftover after parsing attributes in process `syz.4.982'. [ 142.187679][ T9345] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 142.277479][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 142.311993][ T9349] netlink: 'syz.3.983': attribute type 30 has an invalid length. [ 142.430976][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 142.444193][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 143.630908][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 143.858756][ T9420] veth1_macvtap: left promiscuous mode [ 144.098756][ T9431] netlink: zone id is out of range [ 144.125749][ T9431] netlink: del zone limit has 4 unknown bytes [ 144.169948][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 144.275306][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 144.288396][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'. [ 144.304257][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.312014][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.343890][ T9447] netlink: 'syz.4.1018': attribute type 10 has an invalid length. [ 144.407070][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.420460][ T9447] bridge_slave_1: left allmulticast mode [ 144.426276][ T9447] bridge_slave_1: left promiscuous mode [ 144.432853][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.456870][ T9447] bridge_slave_1: entered promiscuous mode [ 144.463429][ T9447] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 144.597541][ T6273] tipc: Subscription rejected, illegal request [ 144.623142][ T9475] netlink: 'syz.2.1028': attribute type 1 has an invalid length. [ 144.633069][ T9475] netlink: 'syz.2.1028': attribute type 2 has an invalid length. [ 144.841515][ T9487] tipc: Started in network mode [ 144.848768][ T9487] tipc: Node identity 86e71be4bbbc, cluster identity 4711 [ 144.873322][ T9487] tipc: Enabled bearer , priority 0 [ 144.902423][ T9495] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 144.904857][ T9487] tipc: Resetting bearer [ 144.912628][ T9493] delete_channel: no stack [ 144.934754][ T9495] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 144.966051][ T9486] tipc: Disabling bearer [ 145.180026][ T9514] hsr0 speed is unknown, defaulting to 1000 [ 145.612422][ T9543] tap0: tun_chr_ioctl cmd 1074025676 [ 145.618311][ T9543] tap0: owner set to 0 [ 145.754876][ T9537] tipc: Subscription rejected, illegal request [ 146.144753][ T9581] pimreg3: entered allmulticast mode [ 146.292491][ T9594] tipc: Enabled bearer , priority 0 [ 146.303079][ T9594] syzkaller0: entered promiscuous mode [ 146.316978][ T9594] syzkaller0: entered allmulticast mode [ 146.387690][ T9591] tipc: Resetting bearer [ 146.429511][ T9591] tipc: Disabling bearer [ 146.921813][ T9629] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 147.008281][ T9629] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 147.179577][ T9650] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 147.294075][ T9659] __nla_validate_parse: 8 callbacks suppressed [ 147.294094][ T9659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1074'. [ 147.320423][ T9664] Bluetooth: MGMT ver 1.23 [ 147.588372][ T9684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1082'. [ 147.604678][ T9677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.638226][ T9677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.692931][ T9689] netlink: 'syz.4.1081': attribute type 4 has an invalid length. [ 147.742296][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 147.836371][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 148.083446][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 148.149757][ T9722] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 148.253407][ T9726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'. [ 148.264881][ T9730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1098'. [ 148.577392][ T9747] tipc: Enabled bearer , priority 0 [ 148.604918][ T9747] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 148.631056][ T9747] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 148.744914][ T9764] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 148.863591][ T9771] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 148.952094][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 149.024001][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 149.047834][ T9776] syzkaller1: entered promiscuous mode [ 149.053485][ T9776] syzkaller1: entered allmulticast mode [ 149.116167][ T9788] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1112'. [ 149.158794][ T9787] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 149.698115][ T5952] tipc: Node number set to 1574726324 [ 150.659123][ T9814] sctp: [Deprecated]: syz.2.1120 (pid 9814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.659123][ T9814] Use struct sctp_sack_info instead [ 150.702703][ T9816] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 150.784706][ T9816] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.839003][ T9820] bond4: (slave gretap1): making interface the new active one [ 150.859105][ T9820] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 150.905153][ T9816] vlan2: entered allmulticast mode [ 150.910533][ T9816] bond4: entered allmulticast mode [ 150.915776][ T9816] gretap1: entered allmulticast mode [ 150.922993][ T9816] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 151.114251][ T9832] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 151.135450][ T9832] openvswitch: netlink: IPv4 tun info is not correct [ 151.177160][ T9834] netlink: 'syz.0.1127': attribute type 21 has an invalid length. [ 152.011862][ T9890] tipc: Enabled bearer , priority 0 [ 152.058357][ T9890] syzkaller0: entered promiscuous mode [ 152.063896][ T9890] syzkaller0: entered allmulticast mode [ 152.101661][ T9899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 152.120194][ T9899] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.143289][ T9899] gretap0: entered promiscuous mode [ 152.160224][ T9899] gretap0: entered allmulticast mode [ 152.197526][ T9903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 152.301260][ T9890] tipc: Resetting bearer [ 152.340007][ T9888] tipc: Resetting bearer [ 152.386193][ T9888] tipc: Disabling bearer [ 152.612246][ T9933] __nla_validate_parse: 13 callbacks suppressed [ 152.612266][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'. [ 152.628909][ T9] hsr0 speed is unknown, defaulting to 1000 [ 152.812890][ T9949] netlink: 'syz.4.1159': attribute type 10 has an invalid length. [ 152.863352][ T9949] team0: Port device dummy0 added [ 152.947642][ T9962] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1167'. [ 152.988415][ T9962] syzkaller1: entered promiscuous mode [ 152.993935][ T9962] syzkaller1: entered allmulticast mode [ 153.062800][ T9965] netlink: 'syz.3.1168': attribute type 10 has an invalid length. [ 153.133055][ T9965] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.148483][ T9965] bond0: (slave team0): Enslaving as an active interface with an up link [ 153.153562][ T9973] netlink: 'syz.0.1170': attribute type 21 has an invalid length. [ 153.165303][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1170'. [ 153.550412][ T9996] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0 [ 153.889340][T10019] netlink: 'syz.0.1183': attribute type 10 has an invalid length. [ 153.912134][T10020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1182'. [ 154.364053][T10047] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 154.498321][T10053] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 154.680074][T10061] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20001 [ 155.094582][T10084] sctp: [Deprecated]: syz.0.1201 (pid 10084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.094582][T10084] Use struct sctp_sack_info instead [ 155.360965][T10099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1208'. [ 155.375821][T10100] nft_compat: unsupported protocol 0 [ 155.400460][T10100] openvswitch: netlink: EtherType 0 is less than min 600 [ 155.478322][T10106] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 155.498627][T10106] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1210'. [ 155.527640][T10106] nbd: illegal input index 1048576 [ 155.537266][T10113] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1211'. [ 155.549530][T10113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.874865][T10134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.875828][T10133] netlink: ct family unspecified [ 155.911096][T10133] openvswitch: netlink: Actions may not be safe on all matching packets [ 178.106051][T10160] netlink: 'syz.0.1230': attribute type 21 has an invalid length. [ 178.126224][T10160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1230'. [ 178.161160][T10166] tap0: tun_chr_ioctl cmd 1074025672 [ 178.166947][T10166] tap0: ignored: set checksum disabled [ 178.191497][T10172] veth1_to_bond: entered allmulticast mode [ 178.211707][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 178.271573][T10179] netlink: 'syz.3.1232': attribute type 64 has an invalid length. [ 178.323498][T10179] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1232'. [ 178.411164][T10172] bond0: (slave bond_slave_1): Releasing backup interface [ 178.487571][T10172] veth1_to_bond (unregistering): left allmulticast mode [ 178.658684][T10200] netlink: 'syz.4.1238': attribute type 11 has an invalid length. [ 178.678615][T10200] netlink: 'syz.4.1238': attribute type 11 has an invalid length. [ 178.688217][T10200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1238'. [ 178.808505][T10207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.014149][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'. [ 179.029928][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'. [ 179.163652][T10240] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 179.369457][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 179.679507][T10274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1259'. [ 179.835627][T10289] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1267'. [ 179.849790][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1268'. [ 179.865703][T10293] sch_fq: defrate 0 ignored. [ 180.036491][T10310] netlink: 'syz.2.1273': attribute type 8 has an invalid length. [ 180.480232][T10334] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 180.499813][T10334] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 180.510941][T10334] netlink: 'syz.2.1282': attribute type 11 has an invalid length. [ 180.561544][T10339] syzkaller1: entered promiscuous mode [ 180.580534][T10339] syzkaller1: entered allmulticast mode [ 181.264345][T10369] tipc: Enabled bearer , priority 0 [ 181.359596][T10369] syzkaller0: entered promiscuous mode [ 181.367148][T10369] syzkaller0: entered allmulticast mode [ 181.373491][T10369] tipc: Resetting bearer [ 181.555478][T10368] tipc: Resetting bearer [ 181.681409][T10379] netlink: 'syz.4.1291': attribute type 4 has an invalid length. [ 183.059078][T10368] tipc: Disabling bearer [ 183.078737][T10377] batadv0: entered promiscuous mode [ 183.086479][T10377] batadv_slave_1: entered promiscuous mode [ 183.092513][T10377] batadv_slave_1: left promiscuous mode [ 183.105072][T10377] batadv0: left promiscuous mode [ 183.232352][T10394] netlink: 'syz.4.1294': attribute type 5 has an invalid length. [ 183.279433][T10392] hsr0 speed is unknown, defaulting to 1000 [ 183.322615][T10400] syz_tun: entered allmulticast mode [ 183.392054][T10404] __nla_validate_parse: 6 callbacks suppressed [ 183.392071][T10404] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1298'. [ 183.646706][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 184.002574][T10452] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 184.064295][T10450] bridge_slave_0: left allmulticast mode [ 184.118830][T10450] bridge_slave_0: left promiscuous mode [ 184.124866][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.139060][T10458] netlink: 'syz.4.1313': attribute type 5 has an invalid length. [ 184.178835][T10462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1312'. [ 184.302749][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1315'. [ 184.321200][T10450] bridge_slave_1: left allmulticast mode [ 184.329764][T10450] bridge_slave_1: left promiscuous mode [ 184.335713][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.350431][T10450] bond0: (slave bond_slave_0): Releasing backup interface [ 184.369719][T10450] bond0: (slave bond_slave_1): Releasing backup interface [ 184.409193][T10450] team0: Port device team_slave_0 removed [ 184.444232][T10450] team0: Port device team_slave_1 removed [ 184.452763][T10450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.461371][T10450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.471307][T10450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.479870][T10450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.496581][T10450] bond0: (slave geneve1): Releasing backup interface [ 184.516631][T10450] bond1: (slave veth3): Releasing active interface [ 184.543970][T10450] bond4: (slave gretap1): Releasing active interface [ 184.554856][T10450] gretap1: left allmulticast mode [ 184.579907][T10461] team0: Mode changed to "broadcast" [ 184.592422][T10464] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 184.808744][T10473] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1317'. [ 184.828751][T10477] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 184.845185][T10477] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 185.329094][T10501] pimreg: entered allmulticast mode [ 185.385484][T10500] pimreg: left allmulticast mode [ 185.502085][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 185.526990][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 185.758427][T10509] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 185.800154][T10509] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 185.818858][T10509] gretap1: entered promiscuous mode [ 185.824492][T10509] gretap1: entered allmulticast mode [ 185.847833][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 186.133368][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 186.153558][T10540] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 186.194245][T10540] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 186.243935][T10540] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1337'. [ 186.359384][T10556] netlink: 'syz.2.1340': attribute type 3 has an invalid length. [ 186.399667][T10556] tipc: Enabling of bearer rejected, failed to enable media [ 186.478089][T10557] hsr0 speed is unknown, defaulting to 1000 [ 188.134249][T10668] bridge0: port 1(batadv1) entered blocking state [ 188.141010][T10668] bridge0: port 1(batadv1) entered disabled state [ 188.148131][T10668] batadv1: entered allmulticast mode [ 188.154701][T10668] batadv1: entered promiscuous mode [ 188.289825][T10680] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 188.351034][T10682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.356306][T10685] openvswitch: netlink: EtherType 0 is less than min 600 [ 188.375354][T10682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.426046][T10682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.433608][T10682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.635763][ T9541] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 188.645536][ T9541] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 188.696104][T10694] __nla_validate_parse: 10 callbacks suppressed [ 188.696124][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 188.824134][T10704] netlink: 'syz.0.1384': attribute type 1 has an invalid length. [ 188.843813][T10704] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1384'. [ 189.148019][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 189.304615][T10730] tipc: Enabling of bearer rejected, already enabled [ 189.336029][T10733] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 189.383377][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 189.450354][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 189.477455][T10746] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1397'. [ 189.489343][T10750] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1397'. [ 189.497560][T10746] openvswitch: netlink: Actions may not be safe on all matching packets [ 189.516932][T10750] openvswitch: netlink: Actions may not be safe on all matching packets [ 189.577515][T10736] bond0: (slave bond_slave_1): Releasing backup interface [ 190.398185][T10761] netlink: 'syz.1.1400': attribute type 11 has an invalid length. [ 190.419616][T10761] netlink: 'syz.1.1400': attribute type 11 has an invalid length. [ 190.429808][T10761] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1400'. [ 190.574515][T10802] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 190.592948][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 190.625838][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 190.725950][T10807] macvtap1: entered promiscuous mode [ 190.741561][T10807] vlan0: entered promiscuous mode [ 190.768336][T10807] macvtap1: entered allmulticast mode [ 190.777317][T10807] vlan0: entered allmulticast mode [ 190.792507][T10807] veth0_vlan: entered allmulticast mode [ 190.865070][T10805] netlink: 'syz.2.1411': attribute type 29 has an invalid length. [ 191.220798][T10838] bridge0: entered promiscuous mode [ 191.298964][T10853] netlink: 'syz.2.1424': attribute type 2 has an invalid length. [ 191.649641][T10878] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 191.694002][T10878] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 192.106823][T10913] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 192.989140][T10970] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 193.016234][T10969] netlink: 'syz.3.1457': attribute type 6 has an invalid length. [ 193.568279][T11014] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 193.623673][T11014] team0: Port device geneve0 added [ 193.740177][T11023] netlink: 'syz.4.1474': attribute type 83 has an invalid length. [ 193.750533][T11028] __nla_validate_parse: 72 callbacks suppressed [ 193.750551][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'. [ 193.781371][T11028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1476'. [ 194.116990][T11052] tipc: New replicast peer: 255.255.255.255 [ 194.123562][T11052] tipc: Enabled bearer , priority 10 [ 194.261953][T11062] netlink: 'syz.2.1485': attribute type 9 has an invalid length. [ 194.312154][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481236][T11065] netlink: 'syz.4.1487': attribute type 32 has an invalid length. [ 194.612950][T11073] hsr0 speed is unknown, defaulting to 1000 [ 194.724425][T11088] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 195.011086][T11106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 195.189702][T11120] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 195.262235][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1501'. [ 195.342093][T11120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.359078][T11120] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 195.434188][T11133] pim6reg: entered allmulticast mode [ 195.463226][T11129] tipc: Enabled bearer , priority 0 [ 195.506661][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1501'. [ 195.566737][T11134] syzkaller0: entered promiscuous mode [ 195.572291][T11134] syzkaller0: entered allmulticast mode [ 195.661357][T11129] tipc: Resetting bearer [ 195.688898][T11128] tipc: Resetting bearer [ 195.769483][T11128] tipc: Disabling bearer [ 195.915268][T11160] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 195.999680][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 196.014317][T11171] netlink: 'syz.1.1514': attribute type 29 has an invalid length. [ 196.022256][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 196.031744][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 196.061452][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 196.228803][T11180] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 196.230389][T11183] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 196.379008][T11068] Bluetooth: hci1: command 0x0406 tx timeout [ 196.385610][T11068] Bluetooth: hci0: command 0x0406 tx timeout [ 196.389991][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 196.391624][T11068] Bluetooth: hci4: command 0x0406 tx timeout [ 196.474673][T11160] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.482464][T11160] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.092357][T11178] pim6reg: entered allmulticast mode [ 197.122809][T11182] pim6reg: left allmulticast mode [ 197.151722][T11180] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 197.237195][ T9536] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.257467][ T9536] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.284452][ T9536] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.341841][ T9536] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.362785][T11222] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 197.372621][T11222] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 197.397493][T11229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1525'. [ 197.432412][ T9536] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.447504][ T9536] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.480717][ T9536] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.490114][ T9536] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.528728][T11237] netlink: 'syz.3.1527': attribute type 11 has an invalid length. [ 197.631771][T11251] netlink: 'syz.1.1530': attribute type 21 has an invalid length. [ 198.588133][T11308] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 198.750665][T11310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.778257][T11310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.872455][T11332] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 198.999709][T11340] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 199.001311][T11335] __nla_validate_parse: 7 callbacks suppressed [ 199.001326][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 199.062008][T11310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.081415][T11310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.085262][T11347] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.114518][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 199.191183][T11310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.211548][T11310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.318592][T11310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.352435][T11310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.385765][T11352] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.425743][T11352] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.535746][T11360] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.548755][T11368] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 199.553661][T11360] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.724662][T11372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.758302][T11372] bond3: (slave bond4): making interface the new active one [ 199.771307][T11372] bond3: (slave bond4): Enslaving as an active interface with an up link [ 199.795978][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 199.808139][T11366] bond3: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.821824][T11366] bond3: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 199.838861][T11384] veth0: entered promiscuous mode [ 199.946018][ T9536] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.962203][ T9536] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.010166][T11382] veth0: left promiscuous mode [ 200.046918][ T9536] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.058499][ T9536] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.107292][ T9536] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.135437][ T9536] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.195138][ T9539] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.215211][ T9539] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.369592][T11416] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 200.661436][T11444] vlan0: entered promiscuous mode [ 200.669992][T11444] vlan0: entered allmulticast mode [ 200.675562][T11444] hsr_slave_1: entered allmulticast mode [ 200.741317][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1586'. [ 200.753694][T11453] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 200.764241][T11453] netlink: 'syz.3.1586': attribute type 2 has an invalid length. [ 200.797748][T11454] pim6reg1: entered promiscuous mode [ 200.803242][T11454] pim6reg1: entered allmulticast mode [ 201.338307][T11460] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 201.360148][T11460] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1589'. [ 201.388927][T11460] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 201.399857][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1594'. [ 201.418571][T11466] nbd: socks must be embedded in a SOCK_ITEM attr [ 201.448254][T11460] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1589'. [ 201.460282][T11460] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1589'. [ 201.472196][T11475] netlink: 'syz.1.1595': attribute type 13 has an invalid length. [ 201.615188][T11479] bond3: option mode: unable to set because the bond device has slaves [ 201.651724][T11484] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 201.823048][T11495] sock: sock_set_timeout: `syz.4.1601' (pid 11495) tries to set negative timeout [ 201.862966][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1601'. [ 201.884319][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1601'. [ 202.092306][T11510] bond2: left promiscuous mode [ 202.110441][T11510] bridge0: port 3(bond2) entered disabled state [ 202.130393][T11514] netlink: 'syz.2.1607': attribute type 11 has an invalid length. [ 202.142985][T11510] bridge_slave_0: left allmulticast mode [ 202.154299][T11510] bridge_slave_0: left promiscuous mode [ 202.164659][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.464361][T11535] netlink: 'syz.1.1612': attribute type 33 has an invalid length. [ 202.494609][T11539] sock: sock_set_timeout: `syz.4.1614' (pid 11539) tries to set negative timeout [ 202.504276][T11537] syzkaller1: entered promiscuous mode [ 202.509893][T11537] syzkaller1: entered allmulticast mode [ 202.519089][T11539] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 202.562884][T11535] tipc: Enabling of bearer rejected, failed to enable media [ 203.348097][T11592] hsr0 speed is unknown, defaulting to 1000 [ 203.782620][T11627] openvswitch: netlink: Multiple metadata blocks provided [ 203.878235][T11621] tipc: Enabling of bearer rejected, media not registered [ 203.890446][T11621] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 203.911875][T11629] netlink: 'syz.3.1639': attribute type 14 has an invalid length. [ 204.081472][T11641] __nla_validate_parse: 9 callbacks suppressed [ 204.081489][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 204.195967][T11645] bridge_slave_1: left allmulticast mode [ 204.201661][T11645] bridge_slave_1: left promiscuous mode [ 204.212631][T11645] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.241576][T11645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 204.266256][T11655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1645'. [ 204.678946][T11678] hsr0 speed is unknown, defaulting to 1000 [ 204.821152][T11683] tun0: tun_chr_ioctl cmd 1074025675 [ 204.840498][T11683] tun0: persist disabled [ 204.913455][T11686] pim6reg: entered allmulticast mode [ 205.201176][T11696] tipc: Enabled bearer , priority 0 [ 205.223113][T11695] tipc: Disabling bearer [ 205.240307][ T5935] IPVS: starting estimator thread 0... [ 205.365132][T11698] IPVS: using max 32 ests per chain, 76800 per kthread [ 205.538431][T11713] ip6tnl0: Caught tx_queue_len zero misconfig [ 205.607969][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1669'. [ 205.698299][ T9539] IPVS: stop unused estimator thread 0... [ 205.798308][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 205.829409][T11736] validate_nla: 3 callbacks suppressed [ 205.829428][T11736] netlink: 'syz.2.1672': attribute type 4 has an invalid length. [ 205.885415][T11737] netlink: 'syz.2.1672': attribute type 4 has an invalid length. [ 206.870037][T11808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.103576][T11824] bond0: (slave bridge_slave_1): Releasing backup interface [ 207.129094][T11824] bridge_slave_1: left promiscuous mode [ 207.139216][T11824] bridge_slave_1: left allmulticast mode [ 207.188164][T11824] batadv1: left allmulticast mode [ 207.207354][T11824] batadv1: left promiscuous mode [ 207.224553][T11824] bridge0: port 1(batadv1) entered disabled state [ 207.249493][T11824] bond3: (slave bond4): Releasing backup interface [ 207.290577][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1700'. [ 207.307039][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 207.370176][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1700'. [ 207.442301][T11841] tipc: Enabling of bearer rejected, failed to enable media [ 207.539799][T11846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'. [ 207.541897][T11845] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1705'. [ 207.830894][T11859] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1707'. [ 207.963586][T11867] ªªªªªª: renamed from vlan0 [ 208.274716][T11889] geneve2: left promiscuous mode [ 208.293796][T11889] ip6erspan0: left promiscuous mode [ 208.314024][T11889] bond2: left promiscuous mode [ 208.451170][T11899] wireguard: wg2: Could not create IPv4 socket [ 208.709342][T11915] netlink: 'syz.3.1729': attribute type 21 has an invalid length. [ 208.723903][T11915] netlink: 'syz.3.1729': attribute type 21 has an invalid length. [ 208.881139][T11931] tipc: Enabled bearer , priority 10 [ 208.921156][T11931] tipc: Enabling of bearer rejected, failed to enable media [ 209.268667][T11947] sctp: [Deprecated]: syz.1.1736 (pid 11947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.268667][T11947] Use struct sctp_sack_info instead [ 209.293456][ T9539] tipc: Subscription rejected, illegal request [ 209.397852][T11957] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 209.528287][T11968] __nla_validate_parse: 6 callbacks suppressed [ 209.528304][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 209.609007][T11970] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 209.673418][T11974] tipc: Enabled bearer , priority 0 [ 209.692947][T11974] syzkaller0: entered promiscuous mode [ 209.698738][T11974] syzkaller0: entered allmulticast mode [ 209.724454][T11978] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 209.729671][T11977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1748'. [ 209.749845][T11974] tipc: Resetting bearer [ 210.051866][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1752'. [ 210.061662][T11997] gre0: entered allmulticast mode [ 210.372932][T12013] netlink: 'syz.3.1761': attribute type 6 has an invalid length. [ 210.392616][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1760'. [ 210.409047][T11971] tipc: Resetting bearer [ 210.429348][T11971] tipc: Disabling bearer [ 210.571112][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.587699][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 210.640214][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.803828][T12034] hsr0 speed is unknown, defaulting to 1000 [ 211.220266][T12059] batadv0: entered promiscuous mode [ 211.284041][T12059] batadv0: left promiscuous mode [ 211.329199][T12056] tipc: Enabling of bearer rejected, already enabled [ 211.590432][T12074] tipc: Enabled bearer , priority 0 [ 211.727602][T12082] syzkaller0: entered promiscuous mode [ 211.733170][T12082] syzkaller0: entered allmulticast mode [ 211.740525][T12082] tipc: Resetting bearer [ 211.769334][T12083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.776908][T12084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1780'. [ 211.792554][T12083] bond0: (slave rose0): Enslaving as an active interface with an up link [ 211.822174][T12079] pim6reg1: entered promiscuous mode [ 211.824071][T12083] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 211.838969][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 211.891049][T12079] pim6reg1: entered allmulticast mode [ 211.913687][T12072] tipc: Resetting bearer [ 212.062257][T12102] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 212.082528][T12102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1783'. [ 212.158150][T12104] netlink: 'syz.3.1782': attribute type 4 has an invalid length. [ 212.234828][T12110] netlink: 'syz.3.1782': attribute type 4 has an invalid length. [ 212.319498][T12111] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1782'. [ 212.332824][T12111] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 213.611175][T12072] tipc: Disabling bearer [ 213.675600][T12098] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 214.042928][T12137] hsr0 speed is unknown, defaulting to 1000 [ 214.147717][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1789'. [ 214.684737][T12179] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1797'. [ 215.156455][T12210] team0: Device wireguard0 is of different type [ 215.281906][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 215.292038][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 215.465555][T12234] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 215.587188][T12246] netlink: 'syz.3.1811': attribute type 27 has an invalid length. [ 215.613009][T12246] netlink: 'syz.3.1811': attribute type 4 has an invalid length. [ 215.651757][T12246] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1811'. [ 215.782269][T12241] netlink: 'syz.4.1812': attribute type 5 has an invalid length. [ 215.947989][T12268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1819'. [ 216.201529][T12287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1825'. [ 216.221428][T12287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1825'. [ 216.231280][T12287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1825'. [ 216.261413][T12289] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.343729][T12287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1825'. [ 216.469518][T12306] netlink: 'syz.2.1832': attribute type 83 has an invalid length. [ 216.527664][T12310] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 216.541520][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 216.861030][T12331] gretap0: entered promiscuous mode [ 216.866133][T12335] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 216.923572][T12331] 0ªî{X¹¦: renamed from gretap0 [ 216.931050][T12331] 0ªî{X¹¦: left promiscuous mode [ 216.937917][T12331] 0ªî{X¹¦: entered allmulticast mode [ 216.946243][T12331] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 217.026022][T12334] vlan0: entered allmulticast mode [ 217.038554][T12334] bridge0: entered allmulticast mode [ 217.069138][T12338] PF_CAN: dropped non conform CAN XL skbuff: dev type 272, len 40 [ 217.168654][T12353] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 217.176479][T12353] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 217.523512][T12376] bridge7: entered promiscuous mode [ 217.530912][T12376] bridge7: entered allmulticast mode [ 217.601100][T12381] openvswitch: netlink: IPv6 tunnel dst address is zero [ 217.606002][T12384] IPv6: sit4: Disabled Multicast RS [ 217.614539][T12384] sit4: entered allmulticast mode [ 217.749982][T12392] Bluetooth: MGMT ver 1.23 [ 217.870790][T12401] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 217.880080][T12401] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 218.061953][T12415] tipc: New replicast peer: 255.255.255.255 [ 218.068860][T12415] tipc: Enabled bearer , priority 10 [ 218.166340][T12420] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 218.572365][T12428] sock: sock_set_timeout: `syz.3.1871' (pid 12428) tries to set negative timeout [ 218.686937][T12431] lo: Caught tx_queue_len zero misconfig [ 218.947584][T12444] netlink: 'syz.4.1877': attribute type 21 has an invalid length. [ 219.041562][T12448] tipc: Enabled bearer , priority 10 [ 219.058840][T12450] tipc: Enabling of bearer rejected, already enabled [ 219.298016][T12467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.379853][T12467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.415506][T12467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.465298][T12467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.515933][T12467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.593104][T12474] hsr0 speed is unknown, defaulting to 1000 [ 219.762439][T12489] netlink: 'syz.4.1890': attribute type 4 has an invalid length. [ 219.809488][T12494] __nla_validate_parse: 11 callbacks suppressed [ 219.809506][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 219.970107][T12474] netlink: 'syz.1.1886': attribute type 13 has an invalid length. [ 219.997985][T12474] netlink: 'syz.1.1886': attribute type 17 has an invalid length. [ 220.110863][T12474] syz_tun: left allmulticast mode [ 220.155412][T11212] tipc: Node number set to 1029381092 [ 220.239186][T12524] : renamed from bridge_slave_0 (while UP) [ 220.604020][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 220.666324][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1908'. [ 220.779557][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1909'. [ 221.243290][T12575] netlink: 'syz.0.1915': attribute type 29 has an invalid length. [ 221.304888][T12577] netlink: 'syz.0.1915': attribute type 29 has an invalid length. [ 221.313918][T12577] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1915'. [ 221.568634][T12580] syzkaller1: entered promiscuous mode [ 221.581195][T12580] syzkaller1: entered allmulticast mode [ 222.003881][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 222.035755][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'. [ 222.069621][T12603] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1924'. [ 222.130483][T12615] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 222.186390][T12615] batman_adv: batadv0: Adding interface: team0 [ 222.224352][T12615] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.291196][T12615] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 222.447609][T12633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1928'. [ 222.570006][T12646] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 222.570287][T12636] hsr0 speed is unknown, defaulting to 1000 [ 223.033890][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 223.911181][T12704] validate_nla: 2 callbacks suppressed [ 223.911202][T12704] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 224.024759][T12704] 8021q: adding VLAN 0 to HW filter on device bond10 [ 224.089711][T12705] bond10: (slave gretap1): making interface the new active one [ 224.110942][T12720] netlink: 'syz.1.1952': attribute type 39 has an invalid length. [ 224.111812][T12705] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 224.836040][T12766] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 224.858754][T12766] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 224.875123][T12766] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 224.893872][T12766] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 224.918848][T12766] tipc: Resetting bearer [ 225.036739][T12782] __nla_validate_parse: 3 callbacks suppressed [ 225.036756][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 225.135114][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 225.193234][T12785] C: renamed from lo (while UP) [ 225.424254][T12776] lec:lec_atm_close: lec0: Shut down! [ 225.622086][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1980'. [ 225.700458][T12812] netlink: 'syz.2.1980': attribute type 29 has an invalid length. [ 225.824914][T12823] netlink: 'syz.4.1983': attribute type 10 has an invalid length. [ 225.839530][T12824] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1986'. [ 225.862681][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 225.865898][T12823] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 225.883948][T12824] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1986'. [ 225.900132][T12823] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 226.076878][T12840] net_ratelimit: 62 callbacks suppressed [ 226.076900][T12840] openvswitch: netlink: Invalid VLAN frame [ 226.260242][T12854] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 226.264633][T12855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1993'. [ 226.382500][T12860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'. [ 226.423567][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 226.611736][T12879] netlink: 'syz.3.2000': attribute type 5 has an invalid length. [ 226.633314][T12879] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 226.641748][T12879] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2000'. [ 227.047045][T12910] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 227.087984][T12910] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 227.437522][T12936] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 227.512715][T12940] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 227.575405][T12944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.766843][T12956] sctp: [Deprecated]: syz.3.2020 (pid 12956) Use of int in maxseg socket option. [ 227.766843][T12956] Use struct sctp_assoc_value instead [ 228.214041][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.221998][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.461757][T12997] netlink: 'syz.2.2029': attribute type 21 has an invalid length. [ 228.672861][ T9541] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 228.812287][T13016] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 228.842113][T13016] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 229.539811][T13065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.603781][T13069] netlink: 'syz.4.2046': attribute type 10 has an invalid length. [ 229.776765][T13082] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 229.795166][T13082] netlink: 'syz.0.2048': attribute type 2 has an invalid length. [ 229.802958][T13082] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 229.957707][T13099] team0: entered promiscuous mode [ 229.962829][T13099] team_slave_0: entered promiscuous mode [ 229.979800][T13099] team_slave_1: entered promiscuous mode [ 229.994078][T13099] geneve0: entered promiscuous mode [ 230.069111][T13099] sctp: [Deprecated]: syz.2.2053 (pid 13099) Use of int in max_burst socket option. [ 230.069111][T13099] Use struct sctp_assoc_value instead [ 230.084724][T13108] __nla_validate_parse: 9 callbacks suppressed [ 230.084820][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2055'. [ 230.117189][T13096] team0: left promiscuous mode [ 230.132281][T13096] team_slave_0: left promiscuous mode [ 230.159102][T13096] team_slave_1: left promiscuous mode [ 230.177028][T13096] geneve0: left promiscuous mode [ 230.372500][T13119] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2058'. [ 230.377202][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 230.797261][T13138] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 230.822740][T13138] netlink: 'syz.3.2064': attribute type 2 has an invalid length. [ 231.188401][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 231.199540][T13156] geneve1: default FDB implementation only supports local addresses [ 231.339425][T13164] netlink: 'syz.0.2069': attribute type 6 has an invalid length. [ 231.419966][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 231.766254][T13181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2074'. [ 231.776151][T13180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2074'. [ 232.080780][T13208] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 232.139830][T13212] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 232.182069][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 232.340842][T13230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2083'. [ 232.980352][T13248] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2089'. [ 233.328122][T13269] tipc: Enabling of bearer rejected, failed to enable media [ 233.349597][T13271] wg2: entered promiscuous mode [ 233.359529][T13271] wg2: entered allmulticast mode [ 233.814823][T13299] tipc: Enabling of bearer rejected, already enabled [ 234.017509][T13315] erspan0: entered allmulticast mode [ 234.102616][T13321] syzkaller1: entered promiscuous mode [ 234.122664][T13321] syzkaller1: entered allmulticast mode [ 234.212946][T13329] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 234.384384][T13337] netlink: 'syz.0.2111': attribute type 4 has an invalid length. [ 234.443937][T13336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.921146][T13353] netlink: 'syz.2.2113': attribute type 16 has an invalid length. [ 234.958048][T13353] netlink: 'syz.2.2113': attribute type 17 has an invalid length. [ 234.999770][T13353] gre0: left allmulticast mode [ 235.116838][T13353] 1ªî{X¹¦: left allmulticast mode [ 235.145699][T13353] ip_vti0: left promiscuous mode [ 235.157677][T13353] ip_vti0: left allmulticast mode [ 235.224638][T13353] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.343952][T13353] batman_adv: batadv0: Interface activated: team0 [ 235.385067][T13353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.401387][T13375] __nla_validate_parse: 7 callbacks suppressed [ 235.401403][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 236.030144][T13408] netlink: 'syz.1.2133': attribute type 32 has an invalid length. [ 236.064780][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 236.100911][T13408] (unnamed net_device) (uninitialized): option coupled_control: invalid value (47) [ 236.153453][T13414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2135'. [ 236.200472][T13417] netlink: 'syz.3.2136': attribute type 11 has an invalid length. [ 236.216599][T13419] netem: incorrect ge model size [ 236.228915][T13417] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2136'. [ 236.239729][T13419] netem: change failed [ 236.256490][T13419] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.379761][T13430] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2136'. [ 236.411049][T13424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2139'. [ 236.597087][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 236.860631][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 236.945704][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 236.994603][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 237.030242][T13464] tipc: Enabling of bearer rejected, failed to enable media [ 237.109974][T13463] delete_channel: no stack [ 237.192478][T13470] netlink: 'syz.4.2151': attribute type 11 has an invalid length. [ 237.443302][T13466] batman_adv: batadv0: Interface deactivated: team0 [ 237.706352][T13466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.723813][T13466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.038551][T13482] gtp0: entered promiscuous mode [ 238.058597][T13482] gtp0: entered allmulticast mode [ 238.079891][ T9536] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.115457][ T9536] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.126537][ T9536] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.134901][ T9536] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.193077][ T9536] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.215023][ T9536] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.239106][ T9536] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.256749][ T9536] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.300006][T13499] bridge7: entered promiscuous mode [ 238.315447][T13499] bridge7: entered allmulticast mode [ 238.772957][T13546] sit0: entered promiscuous mode [ 238.793436][T13546] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 238.864124][T13542] bridge0: entered promiscuous mode [ 238.870779][T13542] bridge0: entered allmulticast mode [ 239.758197][T13613] syzkaller1: entered promiscuous mode [ 239.773792][T13613] syzkaller1: entered allmulticast mode [ 240.194449][T13644] netlink: 'syz.2.2198': attribute type 20 has an invalid length. [ 240.217855][T13644] netlink: 'syz.2.2198': attribute type 20 has an invalid length. [ 240.250068][T13644] syzkaller1: entered promiscuous mode [ 240.263297][T13644] syzkaller1: entered allmulticast mode [ 240.517155][T13657] __nla_validate_parse: 81 callbacks suppressed [ 240.517174][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 240.554305][T13657] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2201'. [ 240.906539][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 240.954342][T13693] tipc: Enabling of bearer rejected, failed to enable media [ 241.183943][T13706] netlink: 'syz.4.2219': attribute type 21 has an invalid length. [ 241.230014][T13706] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 243.275502][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 243.299404][T13758] hsr_slave_0: left promiscuous mode [ 243.317632][T13758] hsr_slave_1: left promiscuous mode [ 243.334380][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 243.365389][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2233'. [ 243.410249][ T9536] nci: nci_rx_work: unknown MT 0x1 [ 243.411592][T13764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.432288][T13778] netlink: 'syz.1.2235': attribute type 83 has an invalid length. [ 243.450222][T13778] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 243.460939][ T5922] hsr0 speed is unknown, defaulting to 1000 [ 243.491214][ T5922] infiniband syz1: ib_query_port failed (-19) [ 243.521996][T13762] geneve3: entered promiscuous mode [ 243.530385][T13762] geneve3: entered allmulticast mode [ 243.555324][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.585965][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.618796][T13771] netlink: 'syz.0.2232': attribute type 29 has an invalid length. [ 243.652356][T13787] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2238'. [ 243.664886][T13781] netlink: 'syz.0.2232': attribute type 29 has an invalid length. [ 243.676882][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.694321][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.892612][T13798] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2242'. [ 243.920945][T13800] Unknown options in mask b7f2 [ 244.092564][T13815] sock: sock_set_timeout: `syz.4.2249' (pid 13815) tries to set negative timeout [ 244.098532][T13808] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 244.140624][T13808] team0: Device macvtap1 is already an upper device of the team interface [ 244.424663][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 244.439449][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2254'. [ 244.852827][T13866] netlink: 'syz.3.2262': attribute type 2 has an invalid length. [ 244.960836][T13868] netlink: 'syz.4.2263': attribute type 13 has an invalid length. [ 244.969740][T13868] macvtap0: entered allmulticast mode [ 244.990072][T13868] macvtap0: refused to change device tx_queue_len [ 245.247486][T13878] IPVS: Scheduler module ip_vs_sip not found [ 245.388117][T13891] sctp: [Deprecated]: syz.4.2269 (pid 13891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.388117][T13891] Use struct sctp_sack_info instead [ 245.495408][ T5864] Bluetooth: hci0: command tx timeout [ 245.896646][T13932] IPVS: length: 157 != 24 [ 245.962144][T13940] __nla_validate_parse: 3 callbacks suppressed [ 245.962163][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2283'. [ 246.054437][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2283'. [ 246.072395][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 246.205642][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 246.361512][T13944] vlan0 (unregistering): left allmulticast mode [ 246.368005][T13944] veth0_vlan (unregistering): left allmulticast mode [ 246.374691][T13944] vlan0 (unregistering): left promiscuous mode [ 246.660102][T13965] netlink: 'syz.3.2291': attribute type 10 has an invalid length. [ 246.849480][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2289'. [ 246.955836][T13965] bond0: (slave team0): Releasing backup interface [ 246.975965][T13965] bridge0: port 2(team0) entered blocking state [ 246.994120][T13965] bridge0: port 2(team0) entered disabled state [ 247.003625][T13965] team0: entered allmulticast mode [ 247.017915][T13965] team_slave_0: entered allmulticast mode [ 247.023887][T13965] team_slave_1: entered allmulticast mode [ 247.039379][T13965] team0: entered promiscuous mode [ 247.049920][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 247.069495][T13965] team_slave_0: entered promiscuous mode [ 247.077926][T13965] team_slave_1: entered promiscuous mode [ 247.087190][T13976] chnl_net:caif_netlink_parms(): no params data found [ 247.234582][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2296'. [ 247.260778][T13989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2297'. [ 247.345116][T13992] netlink: 'syz.4.2299': attribute type 5 has an invalid length. [ 247.365995][T13992] netlink: 'syz.4.2299': attribute type 4 has an invalid length. [ 247.394895][T13998] netlink: 'syz.1.2301': attribute type 10 has an invalid length. [ 247.499287][T13998] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 247.544663][T13998] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 247.628487][T13998] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.754040][T14016] netlink: 'syz.3.2304': attribute type 1 has an invalid length. [ 247.792660][T14016] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 247.811224][T14016] netlink: 'syz.3.2304': attribute type 4 has an invalid length. [ 247.885188][T14016] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2304'. [ 247.963155][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 247.996924][T13996] veth9: entered promiscuous mode [ 248.301881][T14041] netlink: 'syz.3.2311': attribute type 9 has an invalid length. [ 248.350729][T14043] tipc: Enabled bearer , priority 0 [ 248.372898][T14043] syzkaller0: entered promiscuous mode [ 248.389813][T14043] syzkaller0: entered allmulticast mode [ 248.452040][T14042] tipc: Resetting bearer [ 248.550946][T14042] tipc: Disabling bearer [ 248.838169][T14079] netlink: 'syz.0.2324': attribute type 3 has an invalid length. [ 249.262722][T14101] tipc: Enabled bearer , priority 0 [ 249.270110][T14102] tipc: Enabling of bearer rejected, already enabled [ 249.282332][T14100] tipc: Disabling bearer [ 249.793192][T14136] netlink: 'syz.0.2338': attribute type 1 has an invalid length. [ 250.106203][T14153] chnl_net:caif_netlink_parms(): no params data found [ 250.942961][ T5864] Bluetooth: hci2: command 0x0405 tx timeout [ 251.214243][T14231] sock: sock_timestamping_bind_phc: sock not bind to device [ 251.246072][T14240] __nla_validate_parse: 13 callbacks suppressed [ 251.246092][T14240] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2366'. [ 251.358191][T14240] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2366'. [ 251.372995][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 251.633805][T14258] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.819147][T14274] validate_nla: 1 callbacks suppressed [ 251.819167][T14274] netlink: 'syz.4.2374': attribute type 6 has an invalid length. [ 251.853537][T14274] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2374'. [ 252.045814][T14294] netlink: 'syz.0.2380': attribute type 10 has an invalid length. [ 252.334065][T14317] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2388'. [ 252.609221][T14345] sctp: [Deprecated]: syz.0.2393 (pid 14345) Use of int in maxseg socket option. [ 252.609221][T14345] Use struct sctp_assoc_value instead [ 252.978686][T14369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.010154][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 253.055680][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 253.173237][T14382] netlink: 'syz.2.2402': attribute type 10 has an invalid length. [ 253.199397][T14385] tipc: Enabled bearer , priority 0 [ 253.220104][T14384] syzkaller0: entered promiscuous mode [ 253.241055][T14384] syzkaller0: entered allmulticast mode [ 253.259887][T14387] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.288042][T14385] Bluetooth: MGMT ver 1.23 [ 253.292528][T14385] Bluetooth: hci1: too big key_count value 32778 [ 253.326169][T14388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.438725][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 253.496279][T14402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2407'. [ 253.514286][T14400] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2408'. [ 253.609692][T14410] netlink: 'syz.2.2411': attribute type 12 has an invalid length. [ 253.666721][T14383] tipc: Resetting bearer [ 253.711313][T14383] tipc: Disabling bearer [ 253.789116][T14420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.976606][T14433] tipc: Enabled bearer , priority 0 [ 253.998548][T14433] syzkaller0: entered promiscuous mode [ 254.014270][T14433] syzkaller0: entered allmulticast mode [ 254.052036][T14437] openvswitch: netlink: IP tunnel dst address not specified [ 254.099092][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.108766][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.126161][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.153792][T14433] tipc: Resetting bearer [ 254.179299][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.224656][T14448] netlink: 'syz.2.2425': attribute type 12 has an invalid length. [ 254.234670][T14448] netlink: 'syz.2.2425': attribute type 29 has an invalid length. [ 254.271954][T14448] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 254.282461][T14448] tipc: Resetting bearer [ 254.299485][T14450] syzkaller1: entered promiscuous mode [ 254.305500][T14450] syzkaller1: entered allmulticast mode [ 254.538267][T14455] netlink: 'syz.1.2427': attribute type 9 has an invalid length. [ 254.683777][T14462] batman_adv: batadv0: Removing interface: team0 [ 254.700383][T14462] team0 (unregistering): Port device team_slave_0 removed [ 254.713029][T14462] team0 (unregistering): Port device team_slave_1 removed [ 254.746740][T14462] team0 (unregistering): Port device geneve0 removed [ 254.934440][ T13] tipc: Resetting bearer [ 254.949039][T14428] tipc: Resetting bearer [ 255.027022][T14428] tipc: Disabling bearer [ 255.045450][T14485] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 255.438014][T14513] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 255.452804][T14513] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 255.590573][T14530] tipc: Enabling of bearer rejected, failed to enable media [ 255.786945][T14548] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 255.857797][T14548] bond5: entered promiscuous mode [ 255.863468][T14548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.008386][T14551] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.035325][T14551] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 256.048311][T14551] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 256.064798][T14551] bond5: (slave wireguard0): making interface the new active one [ 256.072866][T14551] wireguard0: entered promiscuous mode [ 256.080462][T14551] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 256.284056][T14576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.291831][T14579] erspan0: entered promiscuous mode [ 256.297724][T14579] erspan0: entered allmulticast mode [ 256.348890][T14576] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.413110][T14578] __nla_validate_parse: 9 callbacks suppressed [ 256.413128][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 256.480305][T14578] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2456'. [ 256.501500][T14578] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2456'. [ 256.517148][T14596] tipc: Enabling of bearer rejected, already enabled [ 256.545540][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 257.568142][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 257.591305][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 257.611318][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'. [ 257.737928][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 257.750273][T14671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.779370][T14655] dvmrp1: entered allmulticast mode [ 257.898334][T14675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2483'. [ 258.020610][T14684] batadv_slave_0: entered allmulticast mode [ 258.028845][T14684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2486'. [ 258.039720][T14683] batadv_slave_0: left allmulticast mode [ 258.627093][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 259.160984][T14785] tipc: Enabling of bearer rejected, already enabled [ 259.172413][T14777] syzkaller0: tun_chr_ioctl cmd 35092 [ 259.178344][T14786] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 259.206450][T14786] tipc: Resetting bearer [ 260.061063][T14842] macsec0: entered promiscuous mode [ 260.081084][T14842] veth1_macvtap: entered allmulticast mode [ 260.096169][T14842] veth1_macvtap: entered promiscuous mode [ 260.110264][T14842] macsec0: left promiscuous mode [ 260.120159][T14842] veth1_macvtap: left promiscuous mode [ 260.305550][T14857] netlink: 'syz.0.2530': attribute type 2 has an invalid length. [ 260.530085][T14867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.614689][T14882] netlink: 'syz.3.2536': attribute type 21 has an invalid length. [ 260.628244][T14882] netlink: 'syz.3.2536': attribute type 4 has an invalid length. [ 260.637884][T14882] netlink: 'syz.3.2536': attribute type 5 has an invalid length. [ 260.650239][T14882] netlink: 'syz.3.2536': attribute type 21 has an invalid length. [ 260.704634][T14867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.731652][T14882] netlink: 'syz.3.2536': attribute type 4 has an invalid length. [ 260.740524][T14882] netlink: 'syz.3.2536': attribute type 5 has an invalid length. [ 260.777789][T14886] syzkaller0: entered allmulticast mode [ 260.976140][T14867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.090228][T14867] bond0: (slave netdevsim0): Releasing backup interface [ 261.107287][T14867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.202359][T14903] tipc: Resetting bearer [ 261.292166][T14903] veth1_vlan (unregistering): left allmulticast mode [ 261.446522][T14903] tipc: Disabling bearer [ 261.546548][ T9539] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.556592][ T9539] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.587014][ T9539] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.600270][ T9536] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.623185][T14923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.678376][ T5958] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.740305][ T5958] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.861976][T14942] openvswitch: netlink: Flow key attr not present in new flow. [ 261.880832][T14933] veth9: entered allmulticast mode [ 261.907063][T14945] __nla_validate_parse: 17 callbacks suppressed [ 261.907083][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 261.923076][ T5958] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.968686][ T9536] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.066504][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 262.089489][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'. [ 262.107554][T14951] syzkaller0: entered promiscuous mode [ 262.131407][T14951] syzkaller0: entered allmulticast mode [ 262.320422][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2555'. [ 262.369533][T14977] pim6reg: entered allmulticast mode [ 262.447124][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 262.489924][T14981] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2561'. [ 262.522454][T14988] 0ªî{X¹¦: left allmulticast mode [ 262.562772][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.586536][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.604411][T14988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.606340][T14994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2566'. [ 262.630990][ T9539] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 262.641181][ T9539] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 262.653645][ T9539] bond0: now running without any active interface! [ 262.954576][T15019] netlink: 'syz.1.2573': attribute type 3 has an invalid length. [ 263.050515][T15026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.087255][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2574'. [ 263.391026][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 263.512733][T15055] netlink: 'syz.1.2581': attribute type 1 has an invalid length. [ 263.579759][T15055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.615571][T15061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.622833][T15061] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.635748][T15061] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 263.735504][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 263.876511][T15081] netlink: 'syz.4.2591': attribute type 1 has an invalid length. [ 264.414609][T15098] syzkaller0: entered promiscuous mode [ 264.420485][T15098] syzkaller0: entered allmulticast mode [ 266.156808][T15131] tipc: Enabled bearer , priority 0 [ 266.279710][T15131] tipc: Disabling bearer [ 266.448290][T15163] openvswitch: netlink: Unknown key attributes 2 [ 266.644860][T15174] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 266.660624][T15174] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 266.738992][T15180] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 267.212561][T15212] netlink: 'syz.2.2627': attribute type 4 has an invalid length. [ 267.336450][T15225] IPVS: ip_vs_edit_dest(): server weight less than zero [ 267.710745][T15247] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 267.824651][T15259] netlink: 'syz.0.2643': attribute type 15 has an invalid length. [ 267.828743][T15247] 8021q: adding VLAN 0 to HW filter on device bond12 [ 267.833032][T15259] __nla_validate_parse: 7 callbacks suppressed [ 267.833048][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2643'. [ 267.881989][T15247] bond12: (slave gretap2): making interface the new active one [ 267.891148][T15247] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 268.340654][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 268.356642][T15293] netlink: 'syz.1.2654': attribute type 16 has an invalid length. [ 268.364485][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2654'. [ 268.717791][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2663'. [ 268.891150][T15325] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.941387][T15331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.959313][T15331] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 268.976994][T15331] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 268.999010][T15348] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2666'. [ 269.173297][T15359] macsec3: entered promiscuous mode [ 269.179471][T15359] macsec3: entered allmulticast mode [ 269.279562][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 269.295241][T15373] tipc: Resetting bearer [ 269.296065][T15370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2672'. [ 269.314601][T15373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.319094][T15375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2674'. [ 269.338426][T15376] tipc: Resetting bearer [ 269.351942][T15376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.369400][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2672'. [ 269.369621][T15372] sch_tbf: peakrate 218 is lower than or equals to rate 4294967288 ! [ 269.379499][T15370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2672'. [ 269.566142][T15386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.829011][T15412] tipc: Enabling of bearer rejected, failed to enable media [ 270.411798][T15458] tipc: Enabled bearer , priority 0 [ 270.533788][T15458] syzkaller0: entered promiscuous mode [ 270.541282][T15458] syzkaller0: entered allmulticast mode [ 270.650342][T15467] tipc: Resetting bearer [ 270.910122][T15498] tipc: Enabled bearer , priority 0 [ 270.951167][T15500] xt_socket: unknown flags 0x50 [ 271.024228][T15498] syzkaller0: entered promiscuous mode [ 271.052966][T15498] syzkaller0: entered allmulticast mode [ 271.073771][T15498] tipc: Resetting bearer [ 271.103344][T15502] bond3: (slave macvlan0): Error -98 calling set_mac_address [ 271.120513][T15507] tipc: Resetting bearer [ 271.628634][T15542] netlink: 'syz.2.2718': attribute type 5 has an invalid length. [ 271.644276][T15539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.950378][T15504] tipc: Resetting bearer [ 272.957102][T15457] tipc: Resetting bearer [ 272.978006][T15457] tipc: Disabling bearer [ 272.992532][ T59] tipc: Resetting bearer [ 273.005627][T15496] tipc: Resetting bearer [ 273.068872][T15496] tipc: Disabling bearer [ 273.290515][T15559] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 273.322115][T15566] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 273.346405][T15569] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 273.395537][T15569] tipc: Enabling of bearer rejected, failed to enable media [ 273.409269][T15568] tipc: Enabling of bearer rejected, failed to enable media [ 273.572249][T15579] __nla_validate_parse: 6 callbacks suppressed [ 273.572268][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 273.636742][T15588] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 273.806761][T15600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 273.852496][T15604] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 273.860770][T15600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 274.167967][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 274.302854][T15642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2748'. [ 274.312169][T15642] openvswitch: netlink: Flow key attr not present in new flow. [ 274.326276][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 274.375748][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2749'. [ 274.549711][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2752'. [ 274.630969][T15609] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 274.788758][T15681] netlink: 'syz.4.2759': attribute type 1 has an invalid length. [ 274.857568][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2758'. [ 274.903038][T15688] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2758'. [ 275.633722][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.643444][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.661684][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.674038][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.682304][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.729194][T15715] sit0: entered promiscuous mode [ 275.748793][T15715] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 276.173313][T15737] netlink: 'syz.1.2773': attribute type 1 has an invalid length. [ 276.231461][T15710] chnl_net:caif_netlink_parms(): no params data found [ 276.304560][T15741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.325627][T15742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.367578][T15741] veth0: entered promiscuous mode [ 276.442008][T15740] veth0: left promiscuous mode [ 276.509740][T15710] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.528548][T15710] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.546415][T15710] bridge_slave_0: entered allmulticast mode [ 276.554781][T15710] bridge_slave_0: entered promiscuous mode [ 276.584183][T15710] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.614230][T15710] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.629900][T15710] bridge_slave_1: entered allmulticast mode [ 276.641560][T15710] bridge_slave_1: entered promiscuous mode [ 276.757910][T15769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.789391][T15710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.828548][T15710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.886026][T15775] netlink: 'syz.2.2782': attribute type 1 has an invalid length. [ 276.987416][T15710] team0: Port device team_slave_0 added [ 277.009024][T15710] team0: Port device team_slave_1 added [ 277.115124][T15710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.137302][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.222380][T15710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.257948][T15710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.268888][T15710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.328839][T15710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.541893][T15710] hsr_slave_0: entered promiscuous mode [ 277.575716][T15710] hsr_slave_1: entered promiscuous mode [ 277.582389][T15710] debugfs: 'hsr0' already exists in 'hsr' [ 277.592861][T15710] Cannot create hsr debugfs directory [ 277.671356][T15814] geneve2: entered promiscuous mode [ 277.695387][T15814] geneve2: entered allmulticast mode [ 277.755009][ T5864] Bluetooth: hci3: command tx timeout [ 277.819411][T15826] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 277.862572][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 277.897536][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 277.966011][ T36] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 277.974349][ T36] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 278.264381][T15859] netlink: 'syz.4.2802': attribute type 6 has an invalid length. [ 278.394345][T15855] syzkaller1: entered promiscuous mode [ 278.401602][T15855] syzkaller1: entered allmulticast mode [ 278.557292][T15863] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 278.607616][T15866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.691371][T15869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.860643][T15887] C: renamed from lo [ 278.929380][T15889] sctp: [Deprecated]: syz.0.2808 (pid 15889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.929380][T15889] Use struct sctp_sack_info instead [ 279.068044][T15900] netlink: 'syz.1.2810': attribute type 4 has an invalid length. [ 279.103500][T15903] __nla_validate_parse: 9 callbacks suppressed [ 279.103518][T15903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2811'. [ 279.142020][T15710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.169637][T15710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.221451][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 279.235149][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 279.270003][T15710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.311851][T15710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.325939][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2813'. [ 279.452264][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2815'. [ 279.559596][T15931] tipc: Enabled bearer , priority 0 [ 279.579532][T15931] syzkaller0: entered promiscuous mode [ 279.601681][T15931] syzkaller0: entered allmulticast mode [ 279.651510][T15931] tipc: Resetting bearer [ 279.663290][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 279.677977][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2818'. [ 279.687369][T15936] netlink: 'syz.4.2818': attribute type 14 has an invalid length. [ 279.712497][T15936] netlink: 'syz.4.2818': attribute type 13 has an invalid length. [ 279.731405][T15710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.774610][T15930] tipc: Resetting bearer [ 279.817745][ T5864] Bluetooth: hci3: command tx timeout [ 279.830470][T15930] tipc: Disabling bearer [ 279.858647][T15948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.897150][T15710] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.928255][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.935432][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.000882][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.008105][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.126445][T15965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.332719][T15974] netlink: 'syz.0.2831': attribute type 1 has an invalid length. [ 280.350223][T15974] tipc: Enabled bearer , priority 0 [ 280.364626][T15974] syzkaller0: entered promiscuous mode [ 280.371514][T15974] syzkaller0: entered allmulticast mode [ 280.378807][T15974] tipc: Resetting bearer [ 280.411971][T15978] team0: Device gre2 is up. Set it down before adding it as a team port [ 280.435200][T13489] skbuff: skb_under_panic: text:ffffffff8a121dc7 len:794726036 put:794725940 head:ffff88805408b000 data:ffff888024aa220c tail:0xa0 end:0x6c0 dev:team0 [ 280.460546][T13489] ------------[ cut here ]------------ [ 280.466392][T13489] kernel BUG at net/core/skbuff.c:211! [ 280.484588][T13489] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 280.490885][T13489] CPU: 0 UID: 0 PID: 13489 Comm: kworker/0:14 Not tainted syzkaller #0 PREEMPT(full) [ 280.500443][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.510507][T13489] Workqueue: mld mld_ifc_work [ 280.515218][T13489] RIP: 0010:skb_panic+0x157/0x160 [ 280.520263][T13489] Code: c7 00 08 94 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 8e 0c f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.539917][T13489] RSP: 0018:ffffc900044df458 EFLAGS: 00010282 [ 280.546090][T13489] RAX: 0000000000000094 RBX: dffffc0000000000 RCX: 895ddc2fcaf53100 [ 280.554073][T13489] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 280.562051][T13489] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 280.570031][T13489] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807ce94290 [ 280.578013][T13489] R13: ffff88805408b000 R14: ffff888024aa220c R15: 00000000000000a0 [ 280.579600][T15983] netlink: 'syz.4.2835': attribute type 5 has an invalid length. [ 280.586000][T13489] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 280.586022][T13489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.586033][T13489] CR2: 000000110c352a90 CR3: 00000000312c0000 CR4: 00000000003526f0 [ 280.586048][T13489] Call Trace: [ 280.586056][T13489] [ 280.586064][T13489] ? ipgre_header+0x67/0x290 [ 280.586089][T13489] ? ipgre_header+0x67/0x290 [ 280.586105][T13489] skb_push+0xc3/0xe0 [ 280.586126][T13489] ipgre_header+0x67/0x290 [ 280.586147][T13489] ? __pfx_ipgre_header+0x10/0x10 [ 280.586167][T13489] neigh_connected_output+0x286/0x460 [ 280.586193][T13489] ip6_finish_output2+0x11fb/0x16a0 [ 280.586211][T13489] ? ip6_finish_output2+0x701/0x16a0 [ 280.586229][T13489] ? ip6_mtu+0x7d/0x3f0 [ 280.586249][T13489] ? __pfx_ip6_finish_output2+0x10/0x10 [ 280.586265][T13489] ? ip6_mtu+0x7d/0x3f0 [ 280.586285][T13489] ? ip6_mtu+0x321/0x3f0 [ 280.586305][T13489] ? ip6_finish_output+0x2ef/0x4e0 [ 280.586328][T13489] NF_HOOK+0x9e/0x380 [ 280.586350][T13489] ? NF_HOOK+0x101/0x380 [ 280.586371][T13489] ? __pfx_NF_HOOK+0x10/0x10 [ 280.586391][T13489] ? __pfx_dst_output+0x10/0x10 [ 280.586408][T13489] ? icmp6_dst_alloc+0x3a5/0x420 [ 280.586427][T13489] ? icmp6_dst_alloc+0x3a5/0x420 [ 280.586448][T13489] mld_sendpack+0x800/0xd80 [ 280.586469][T13489] ? mld_sendpack+0x1de/0xd80 [ 280.586483][T13489] ? __pfx_mld_sendpack+0x10/0x10 [ 280.586505][T13489] mld_ifc_work+0x83e/0xd60 [ 280.586525][T13489] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.586547][T13489] ? process_scheduled_works+0x9ef/0x17b0 [ 280.586565][T13489] process_scheduled_works+0xae1/0x17b0 [ 280.586590][T13489] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.586609][T13489] worker_thread+0x8a0/0xda0 [ 280.757915][T13489] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.764243][T13489] ? __kthread_parkme+0x7b/0x200 [ 280.769172][T13489] kthread+0x70e/0x8a0 [ 280.773226][T13489] ? __pfx_worker_thread+0x10/0x10 [ 280.778320][T13489] ? __pfx_kthread+0x10/0x10 [ 280.782897][T13489] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.788085][T13489] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.793273][T13489] ? __pfx_kthread+0x10/0x10 [ 280.797854][T13489] ret_from_fork+0x439/0x7d0 [ 280.802431][T13489] ? __pfx_ret_from_fork+0x10/0x10 [ 280.807528][T13489] ? __switch_to_asm+0x39/0x70 [ 280.812277][T13489] ? __switch_to_asm+0x33/0x70 [ 280.817024][T13489] ? __pfx_kthread+0x10/0x10 [ 280.821599][T13489] ret_from_fork_asm+0x1a/0x30 [ 280.826354][T13489] [ 280.829355][T13489] Modules linked in: [ 280.834440][T13489] ---[ end trace 0000000000000000 ]--- [ 280.840770][T13489] RIP: 0010:skb_panic+0x157/0x160 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.846008][T13489] Code: c7 00 08 94 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 8e 0c f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.866226][T13489] RSP: 0018:ffffc900044df458 EFLAGS: 00010282 [ 280.872498][T13489] RAX: 0000000000000094 RBX: dffffc0000000000 RCX: 895ddc2fcaf53100 [ 280.880603][T13489] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 280.888747][T13489] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004 [ 280.897089][T13489] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807ce94290 [ 280.905266][T13489] R13: ffff88805408b000 R14: ffff888024aa220c R15: 00000000000000a0 [ 280.913333][T13489] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 280.924593][T13489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.985409][T13489] CR2: 00007f7ab8861f98 CR3: 00000000312c0000 CR4: 00000000003526f0 [ 280.993521][T13489] Kernel panic - not syncing: Fatal exception [ 280.999860][T13489] Kernel Offset: disabled [ 281.004169][T13489] Rebooting in 86400 seconds..