last executing test programs: 3.559095069s ago: executing program 3 (id=5810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000000408010800000000000000000000000006090640933c0003002f0000"], 0x24}}, 0x0) 3.367632774s ago: executing program 3 (id=5812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003904000000000800000000000001d9a42ac9c07773758f05dfe4186705f785ddf305d96052ec8d5d060a1e1481f5ea9b4ad4e5a8733a357098e5413de33319e3672f07151d3b61a8e118c290cd60bca91add6e9d2a1a8acac891902a6bdbc7fb86d6bdc8f30e810c5c5b9f283722db2c46868377e31b415fd3ac0c827e620b21c715dae0795a5a70dde3f601e307f02ccce584ae34c8a0bc3c92200e50caba5f0aefb77ee76664784e85cc3414ceeb943f7aaac7b51eba614d7f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}}, 0x0) 3.267116348s ago: executing program 3 (id=5815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 2.651655898s ago: executing program 0 (id=5824): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.443643189s ago: executing program 0 (id=5828): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x1007, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x140a, 0xa03, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x140a, 0xa03, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001, 0x1}, 0x20) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) 2.393309565s ago: executing program 2 (id=5830): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0xffff}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x1, 0x4, {0xb}}, 0x14}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x58, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff0, 0x12}}}}, [@NL80211_ATTR_IE={0x36, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @cf={0x4, 0x6, {0xfd, 0xb, 0xd7b4, 0x9}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x4a, @device_b, 0x0, @value, 0x5, 0x2, @device_b, 0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x11eac000) 2.255585068s ago: executing program 4 (id=5831): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x4, 0x8, 0xd5, 0x1, 0x53f]}, &(0x7f0000000000)=0x54) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="a069eec9aaaaaaaaaaaaaaaa86dd6000008000142c00fe8000000000f4ff00000000000000bbfe8000000000000000000000000000aa2b000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 2.199349649s ago: executing program 3 (id=5832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x8919, &(0x7f0000000000)=0x10) r2 = socket$inet6(0xa, 0x80003, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000280)="65dc8940b5e01c0ccfa807679400e1091670851e2f6a6be94fe60fc2618c8ba14e1e2186fae2500b3cfb33721cfab197d6d487e2dbcfb28254f076aabadca10dd40cec1a5319a0510b65bf396588181785a535a1f9fc1bc6dbc75d5da27adb20f69a89d36e35d65c1a6a53e3fa", 0x6d}], 0x1}}], 0x1, 0x38ca1fccc9b6ef99) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131218010ff"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) 2.163196733s ago: executing program 0 (id=5833): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x350759, 0x92}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) 1.89197757s ago: executing program 2 (id=5835): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x1c}], 0x1}, 0x0) 1.648117897s ago: executing program 2 (id=5837): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)='Y\x00\x00\x00\x00\x00', 0x6) r1 = socket(0x10, 0x80002, 0xffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) connect$ax25(r1, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) listen(r1, 0x8) 1.331603951s ago: executing program 2 (id=5838): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000040), 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507d}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8, 0xb, 0x80000001}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x3}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) 1.330138147s ago: executing program 3 (id=5839): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x20c, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0xff7f, 0x4, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d0}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2d}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe213}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x836}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x12000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001840)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="f5ba077ab02c3d14c8f99caf361b3353d155c1ebceb368b62e5ec0eefc88690887ea1ce42fe11f20e35dddb305ab95120b4abb4bec7a2f045676ff7ea97558d4f0f5e1a2f1c1a9c6249d734d3a2596419582cd7509187b9b512dd5c98f51b746d3c4aad24ea8d243686b78428a8bd6d447d3b6b4ae1e37035c9aa5b83841ecfeeef96cf0c577a5a713ff71ff9aeef35cd5982393592beac34a4312405cae77ee543c6bf88cfd0abe41cfc96bdbfa9b07adf4fa140cadefebf2c0fbb33ea56ebac8ee9bdacb9228ac82", 0xc9}], 0x1, &(0x7f0000000500)=[{0xd0, 0x109, 0x5, "99f78be5257e293ff3aa7ee9eab907ecaae45d8bac6c837c2f74e7fe600c0aa720669fd97ca58eba470126a9ae0a597e36b8f96ebab004109a0862befd49ca44a57641e717e2e4c70306b1d5bf28fc6727845717d888d4c7ee711d52f6fd3796d55b6041e86b6b8100ddfea8872735b6ca7d23780ff8a7cb58fb2ca4777c2d4c665ad55c0a76a69e185f730902989793e198ef5fc6bac8035d56974c68195d29be9ad1e109d2caf6e67828a40078404a87fc041ed6f8f7c5f943900ab68dca49"}, {0xf8, 0x10f, 0x6, "0ab426cc076b58dd9a58e7b78484057b596574ee0a951b19971e893d3fc55f7d5ade8b45769376e09c177f5eeb4f36d06d2a826aed4a096ac51c273373097cb4c5fa6d0b6e65ceb4e9632ff8373ec944ac51c6ce206ea979587a67d7f17c8601c2c4d19b296d9e697ee3dbb30acdce87db32cf1abd0d8366ffb59574c74cca50483dc70b1379f17c547835b1dc049d9e4a5a48da99562513d33747594b49953a28edace2d245689b7a71318355f9a39dfcdffdbe58e7f2767eceed315b35944eb6331f28a86a602f53710c4091d9f2e9b535f4d04bff4910f7b04ec343310ce441b43198fa7c49a1"}, {0x1010, 0x2b, 0x1000, "9d7f6e5099e93871aca74e7310bf675f288224d3c7476bd72a2fe58206a90a6f2176083bcbd83f0338c396ddd984850f6013c81599a65011923964ae96d27a41cfb7a0d84d25c9da1b48e293f11d69371bc1226766514ce98dc637592918f8fba48ca6ae2c1d81184a53cb2a2deb4922e642d18c8333f6bdd8de481959912979961a5878889775770c9aade6ba057d0fbd28c79dab563991c383ccad707c617af65ff1d0af1c8735144fc6443a839f80a4cbd67bbe7d3988fab78af3ac0874f716bf3d9dfbca46aaea563c8e9fece4397ff142f63df70cb47de96c4ee1a2166b53f00894dfa4bf755df1387284a127cf38228a31a3293637b2692fd0d8aae2e01aff907e3d079b4a0a25a3bced725682fb444bc64cc68eb0eed9f3b4cee51c72d5ce203c333a506d6fc2c2c61bf609d12ae97a66926225a81c95ec5477aa658fe22b09af8dc24b5089d383ebaa9bf1513ac77c991bde2f7f67e5917d5dddf8b0355847d450700672b694318f36c371dfb32811ac2a8583f50654e9e744c409d25f26073009de1181024f72bef9f5a8a8d882698e48f6c1f8e1fae5b6507f21a543313243517150a69d31e99b6259e091732e9dba155c6e4e0434be70bd93fd065795475c7d80410a242424285c2aeb50aa208d0b24d7fc15c5a864bff59fa17aae463e0c478534d4bf91625dca361b4b1c30f5a6322aff084ff7475d8558d96f28846c206ccb17e31a84ae976c521b146370f9341c3ae69808620c96336c4043b4577ae01402faadd8964454e3215628b367a81226e96f453ebbc20cd612a658956d1b864ad3175641171236f56f59fa9e608b12a250a53b3e7c43d2ca1d9f8fd0a8171683544fdb26b559a13dc53d2032592c0e1bbb4730a29b17383941339256bc64dc856a88bbb99d31c26ccad46ae5273ba1d759efa3bb67fd099174377760785bb7b312d0dc40c48dd7d3bab63d67659898949e5bdd6dd48b12b45a55841e1addcad79675b9a1d05feb5b06b5e4492821cb8f733e1ae96c3d7eb986a4826a029915a39a4e09b0728e1ec573ae5fa275e3ea628117f8588c3fd2da2cb112ab0e01a5c3ba5f1358163b82e125d87d3afe002b9da554119aa4775a9fe14931d3a10ef5fe62e5d1ef45f1ac8218a6bf35f64eb7d721b6789644e526f6fa8daa18bbfb87b7e55ecd36762d46aefde1df7a209fbeb0810bc9bf70e8eae0d85074fa2edfc9193d9bb060e139314421a09ad41c6f64dc11043db51a6a27875a3713ee539560496b29b7f26461322f43125d7cd022f63faa12a551a6f1a96cd259b796efd6c96322aa79763f53a7a483c5713edc117795e29138c2d242eab5cb6bec96ae39e8089a1111729f64c1d6253909ad2fc6074f5a8b7c0d8ab7a4b065d9140a50592baaa1f541695b2b3773612e7c04d490e20b649230039628df9ee618f190d4b9355bb327b4294128a12cbabe244049c81601310864471686f916df2b2f13825a7dabdeb07835bfccd4858a31f35260ad32ccfb78aa795304e64b249254067403963d0cf57609f8a2af5c1246aada0e622eb2b6eeadc47ed4b39f876d0963e7400c8ac864254d6e07543dfbecb3e4f462fc0300d5a4136d786c9e856454f24efc8367d7beddd4fa6e4e49dd82ea7a9766bc49b9b16772b5713744d59ba8ca98576dca560154bd63dce618c5ccf8172101781a095de8f5ba111dc54313961a56f395cbe5beb8ee1b737faff2eb9e45c2bd54a34fcbb3ac89d79e0209b890c5120b4b71d81645193f4c246e85cfbf3c46f231849945b1a86664bdababd98ef4608b44f4dc41d2f5916dfb9a55247f57286c4ed3b7909588b554dcfb823fdc3e1d13a0ac77eaaa34a702e200cbc37458354eeaf1e9f999e5733d865a2a0d9cf6eb7650cc1b05291d0872c959fa8335caea5e651754044d0348cb7ddc0d24f1b8dbb325e912c946c40001b5d87805a8086412deb1ded9ffc9c4c9a735862dbf55f2e9615ee9d1c4e90419fb8444449a4b4106d4a51e4f5522b9206548d6889ba6761e1da2a886e8dea0fb1f3525b516c86a5608eed61fc1c4a54ebdbf6939c727f7eb1bb5b5b9beca2eeb563e65dee8b389bbd0a6d02374d35843fbdae705daf2da2306c0cc07be180dbb06e215663461e8094bf6847e68ec0be8b9f6c83c66ae130f55532e12bbf0fb0e0941711d176b06d72126851403a4377b22c70541ba2e901175e9e4c80334ed762a02358ced0b052563fb38f4f835ec4bb347d9e0cec5b260f88be72a62f411aab1e888a6127086ce81b55f4c09bf45e710b071ec130a831fba183e082e8f2be9f8389a32653a81f1b556f276115c4af9179404a7192a62e1bebc62570fbe96994e32677a80200225b65cd7934a17eeea651f17994b0e4ed743e19a95584dc4697d788e8063a908a5d1d490554b66b3549ba7a22f19fe0976e1d053fb6d2fccfa8bb8ab1d1ebc8af3ef1b8a59cd2b429b89dba3bad136b00d22a765adf76f41a78cd95cd1807159976cbf72347a73894500dc7ebe31ccb955d3a1f8d83bcbc8f1017fc3c15488b08b2a5fb11708760218d44d5408376e5e9ba306e53e021f18b72b15b3a4867dece5b4c4b498748c0b8c7933bac552ff1751973b127d0d388210ba3817981c15b7e3e592d098d3c959cf565cc1179b72fccac25df631419a2c418265d5f1433c77d1f371a9d391e3e308e57a787670834d219e2c419caab85f2df9e35879004e794cd2a8b5fb3c83fb1df3783f03706c9653f2d26100b05289b74360a34c64356db4ee98e6e898a11942458b9c7f393f5c2d8ee39dd61a4b67682c13ac4a377d10e728bfaa52c532f8733011e66b7211a6eb52d8ec4f43d1453e1fce203d06123d84b240f6bacfb190a7ef6361f877f790763914465a121a6fa97a259294869b23c143a9c0b99de11986b16ab88ae84b73cb41e01970e1366158573a2b3dbbc0292f42742959115b631391121b8d9661a0f3a581cc73b08248126e8f9aef273a0962471bb97a6918203b0682747d472f240d3713a58c88ced86210c879d983a2491df14872fad678154f0888a78f20d44decbad83aac077f5a0e0a1a06658176a8b01dd6203ad196041374d3c3273eb3ae71d8bad318f04e2eac057c1f5174f73a1808511e6abff63a9a68b54cb757e75528cc2da11478c48b117adfbd02baba3112848059ae3364457ffd31bbc575995ecfa48a17ba115ccb46a5988c668c75365c482a6c366631bbab5e37676b4c54ea81664dd54f08941a0d1f7ee4c4a1809c614ac96a91c0c56e0a501c54ab939011049297a52de86adca53e5c87d747723f62e7cc3ae69b24d1eb33faf5fd736bcd4cd6a72221c95303f0edeee49cffeff80cb317b546e73ac748eeec4dcbbce08fdd033ff4f545320a22bac943c905f7bb4f6ce82bad028ae7acb065d0b048e13eed23d786751aee304164bb2c2d0c0db902b16f71af39130bd342c5e0596599c73fec2f532e7254a6be4b8c6bdf3cf5969303a952a6e14a1d8409c793bbc370c2fc75ff836004ec38bc003da790f3ceb9499a760133f85ccd718cf2552d8608dccf3ec61d046793923f6256aabb14eee631775a86543d0d79bebfe59bfcd222c8292fa92a1d89f0e9ff0b0184cba1ba08d8194c366ef121d75f98bcfe1d03feae2b45e89f84dd282e9b1dfd678c28a3773ac43ce96b60e0dd0cb625c7fae8ed5e923ad31b7db7e163f1b95338fb10b0f07f8ccd61f1d259faf2534ee65c9390663121f971c76056e3416d8081d467e0a2d386c4f892d75fb8bb8d73542c1478c3fc2f85580de463e23ee7dca28b71711180614d3197d07d02c1538049c28fac005f837de3213181257a63ddb408936efb0f5ba6a9bd47928fad41c009b20f6103cea7a935da74baad2d4d82a0165e0d8db344e7f959d91a3b4044a7cdc76441ba7422d42309b2526bd78c9358d7a42fb9f9a55f00ef9a6ba60612257de86ec360bfeb4a7277a26bb97f3adf3610f40d3bd07b4e14ea13c38b51b457b8dbb3f6e2d505ba60ae337d33513f55bfb8d8341032ab9e96d3e922a82bccd8c3dc2687731bc4dcf6fbc72b2783a4438c546f1f4aa6bca60a82ae738cc12920bf854ffa3156cd621c6986ed661a71381387dc2ff2b1fb8c8b328dcf61345ec22c146479e4346b2cf2e1fcb305f718154a9c9f54dbaac9696cf431b54f1639dcd916f73ebde728836efaebd36defaf371c49b288b9b37639c3ca5bf9ca1466b0a870e8234bfe4f509beff052b54a7785890faacab06fb6d35638655b675d931d33e8f89cfab18aca5c1448095b9ffc70d5d9d41e446ce493835d1cbe26ad9c6cecbd706b6fa528f98e72434129f1927d05b9de055664683ef054c1bff0c346ce9afa80b609b0d0feae19d64b7f8b8f5ce8acaa6d407d4c06ed590b00eec044958345c1b4044ff9c9a3fe667b610a827794d7cb0db9ea754b30340841e9e768403f5f7638487950e6c39373977397c2adec603f57d24ba203d10e8b5d4dffd76f5517868a5a37999b11685bbb6a7e31c54f54b8dbb3a970559752c1dac0bb1de00f3389fde6167ee4e624d694a7086a72d7e9c7e7be4ab489754153e6c6c13e9593afd918badbade80124203f3b3895e8850f508bf7d2c348e2724fa90e42bdccb19e886dc7dff50fe03a9c48994e3936a9a45a091d5cfebb622d924bcaaf2046336586d57dc8e9c7b4b5df4238898a5175802c6c7aca4bd1b6d605d2ee6ab29c2f151ae1d3fe0d9e19650e6fed3d46e7e5f8080e6a4d98c9588733118cc4335d234dee65e262516f0fa0ab76d87a539d6c27747aada9aff9b83d690c827330ff5f039a2bcca535e8c2d29fc2c024c69f51336cb108c4c764d1d756fee928ef7a899f57222dd80503b2048bbeaf8c5496282e4c96bd06d6306efa8b03e73757f4a275dc2bf7788567505f7de95e64ffa9347f52d3a4a2bc886794976255d02829f726e4f93d8badd1f3fc2fb90038fa511d70dfcbcab567381b8ef3827399fbc1fce98935bf62ffb629df2654a02657086850f363189148620412f0eb5ed32a134ca1e318f145df6db64e01003b79e73c8fe6ed3f89f401ad9210afa9569f3a33c15ea3776bca1ae7c1a628bb1d66ef3babd9e0ca518ad163d67ec076cc815b79d0de9503bff518f5dea1908fb189350837f86b32d1c6f5d5cc2c5ed22375e7405add93e31fd5a23d6cfb7f93fe15f136b93e09f18f34e3263c8492908506f2619ad1ea7562d8c2767da722d6897984d827340c98a079dff35cbd05797ef421d8dbe9e250e6b6cf792ed576ec0e69aeeccc6d8295166dc3b59b58a067d0c7a53e08abb79b4cf589801bda2c0afa187e148a377eb744e08e7ee07e5a7cb8d7a75068a3fa3903635078a176495e01a55f4a16b4c53cdf2fb79608ebbae610be07673bf14ed97996762f86daa698f3c94501fc1388a163a6cf54ae0934c8c1790f7aeb69ffa71b36dc02d1b350eae1eb87bf4312e99a4a2e12fd5a104f37fddb32a1da3347a8aa4799b19e72c75ac406b7051d2be8b25fbdb07b2270ec5b3ed1cf696ebdcee8faba8eaa8bab6e965caec65cc086490eae6ba7581472ce6dfdb0b1214bd320ddf09cd2fc8b4bf380cecbedd759a2df54c3fba21bfeb1b8af9bbdd6a8251599effaf2e8ef930833ddf3d2918eff50648ff995b087b797e1f9603e690eef66984f3a4c5586883b1a608b9766f772755dc05f14595a5771d91632ea9308b4e25aac8f4ae441836b3d0a090d6ed07eb43ab840d993bf732c7a3095589a02c0f2e0"}, {0x50, 0x107, 0xfffff800, "e68dc4f37c361eddc41d3dfc681cf23c28e10dc62d1077c251ddc33500bcca2deaca35c95c826ff891c535c484dcac83a9cc48a8fd49e43cdc8064"}, {0xc0, 0x109, 0x7fff, "9ec48e5d262eee1904a60043d9f83e2a67c9247127d5250d5f4f5bfd57dcfc6720ba3a54c43696e188ba63feb5d8c85368ff3c2debd4edec5dfa2b9e7167c100a87b4cc1c0012944bdb6eea59f49dcf081bc8e416a38d0c60da190486ab5f0c8b51bf2db5753db12ec6c933484659bd31c83362bdf0e5175224cf85828841e72920b1acb9f677ef801c85cebbf99228bd7027a48628fb6c2ba3cc07afa256f3e41fe88e5bcfe2ae54a"}, {0x58, 0x88, 0x4c10, "44666f4288f72a781b326096eda5dff04e70e69d2911e806b63ab8f0283715e7307d74a79851a7bc8e5741ab5a7c0da80c33d0e504382cadfb116eda233669e326c338"}], 0x1340}, 0xc11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001900)={0x19c, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000001b40)=""/107, &(0x7f0000001bc0)=0x6b) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x118, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f0000001f80)=0x4, 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000002cc0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002000)={0xc60, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x4, 0x4d, 0x9, 0x5, 0x8, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xd143, 0x1, 0x3, 0xd3b, 0x4, 0x4, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x25c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3b35, 0x7, 0x100, 0x6, 0x7, 0x0, 0x5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x1, 0x387, 0x7, 0x3, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7fff, 0x4, 0x0, 0x9, 0x400, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1}, {0x5}, {0x3, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x1}, {0x3}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xffff, 0x5, 0x101, 0x6, 0x9, 0x10, 0x9]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x3, 0x5, 0x7, 0xc, 0xddc6, 0x9]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x3, 0x9}, {0x2, 0x1}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x5}, {0x1, 0x2}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x8}, {0x4, 0x4}, {0x5, 0x3}, {}, {}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x2, 0x9}, {0x5}, {0x1}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x6, 0x4}, {0x6, 0xa}, {0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x3, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x8}, {0x4, 0x6}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x6, 0x7}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0xa}, {0x7}, {0x5, 0x7}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x4}, {0x6, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x3, 0x7}, {0x7, 0x6}, {0x2, 0x3}, {0x6, 0x7}, {}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x200, 0x7, 0x6, 0xf8, 0x3, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x9}, {0x3, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x7}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x3}, {0x7, 0x6}, {0x5, 0x9}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x5, 0x2}, {0x3, 0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x7, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x6f8, 0x0, 0x6, 0x401, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xb, 0x3, 0x16, 0x24, 0x48, 0x1b, 0x1b]}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x101, 0xfffe, 0x9, 0x1, 0x7db9, 0x0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {}, {0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x7}, {0x4, 0x1}, {0x6, 0x7}, {0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0xd}, {0x0, 0x2}, {0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x5, 0x7}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0x8139, 0x80, 0x8, 0x1, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x101, 0x0, 0x3, 0x37, 0x2450, 0x3]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3a7, 0x6, 0x7f, 0x7, 0x6, 0x0, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbf0d, 0xc000, 0x5, 0x800, 0x9000, 0x3, 0x3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x24, 0xb, 0x9, 0x3, 0xb, 0xb, 0xc, 0x5, 0x60, 0x1b, 0x3, 0x30, 0xb, 0x4, 0x6, 0x24, 0x16, 0x12, 0x60, 0xc, 0xb, 0x18, 0x1b, 0x5, 0x16, 0xb, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd, 0x0, 0x0, 0x4, 0x6, 0xff4f, 0x890f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x1, 0x5, 0x8000, 0x5, 0x8efa, 0xfa9]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xdbf, 0x1, 0x4, 0x1de, 0xf001, 0x9, 0x8]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x6, 0x60, 0x30, 0x60, 0xc, 0x56, 0x4, 0x1, 0x59, 0xb, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9d, 0x24, 0x5, 0xffff, 0x8, 0x7, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x4, 0x7, 0x80, 0x5, 0x8, 0xf3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe2, 0x4c, 0xfffa, 0x5, 0x3, 0x3, 0x100]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x4}, {0x6, 0x4}, {0x3, 0x6}, {0x6, 0x9}, {0x5, 0x8}, {0x3, 0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x5}, {0x2, 0x6}, {0x4}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x3}, {}, {0x6, 0x9}, {0x1, 0x1}, {0x7}, {0x6, 0x7}, {0x5, 0x3}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x2, 0x89, 0x7, 0x5, 0xfffa, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xee, 0x2, 0x8, 0x8, 0x200, 0x2f, 0xe, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0xffff, 0x7, 0x4, 0x12a, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x1, 0x7, 0x8, 0x0, 0xfffb, 0x4]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x3, 0x4, 0x2, 0x30, 0x6c, 0x0, 0x18, 0x16, 0x16, 0x1b, 0xb, 0x66, 0x24, 0x24, 0xc, 0x4, 0xc]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x206c, 0x58, 0x7f, 0xa, 0x8, 0x8000, 0xc0, 0xb]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5, 0x1b, 0x1b, 0x36, 0x48, 0x60, 0x9]}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x3}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x8}, {0x0, 0x9}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x3}, {0x2}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x0, 0x9}, {0x0, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xb, 0x0, 0x80, 0x3, 0x5, 0x80]}}]}]}, @NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0xc, 0x48, 0x4, 0x9, 0x30, 0x2, 0x16, 0x2, 0x48, 0x16, 0x1b, 0x12, 0x30, 0x18, 0x12, 0xb, 0x48, 0x5, 0x6c, 0x24, 0xc, 0x6c, 0x30, 0xc, 0xb, 0x16, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3011, 0xf46, 0xb, 0x5, 0x9, 0xec5, 0xf7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x18, 0x9, 0x4, 0x18, 0x4, 0x24, 0x16, 0x6c, 0x12, 0x0, 0x30, 0xb, 0x60, 0x4, 0x3, 0x19, 0x36, 0x36, 0x1b, 0x1, 0x6c, 0x0, 0x48, 0x9, 0x1b, 0x48, 0x0, 0xc]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x0, 0x9, 0x30, 0xc, 0x16, 0x48, 0x1b, 0x1, 0x36, 0x4, 0x6, 0x6, 0x24, 0x3c, 0x60, 0x9, 0x6, 0x36, 0x24, 0x5, 0x48, 0x24, 0x12, 0x12, 0x12, 0x12, 0x9, 0x9, 0x30, 0x68]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x6, 0x60, 0x5, 0x16, 0x24, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfc00, 0x8, 0x2565, 0x8b0c, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x308, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x30, 0x9, 0x9, 0x6, 0x1b, 0xc, 0x36, 0x30, 0x18, 0x9, 0x6c, 0x3, 0xb, 0x24, 0x6c, 0x3, 0x0, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x14c, 0x7, 0x1, 0xb0, 0xfe00, 0x9d, 0xe]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0xa}, {0x3, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x5, 0x4}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x7}, {0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x1}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x8}, {0x6, 0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x5}, {0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x2, 0x9}, {0x6, 0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x6}, {0x2, 0x7}, {0x7, 0xe}, {0x5, 0xa}, {0x3, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff8, 0x40, 0x6, 0x0, 0x9, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x7}, {0x2, 0x2}, {0x6, 0x9}, {0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x0, 0x4}, {0x4}, {0x6, 0xa}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x1}, {0x0, 0x5}, {0x7, 0x3}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x5, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x1}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x81, 0x7, 0x1, 0x5, 0x0, 0xd41]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x5, 0x18, 0x6c, 0x1b, 0x24, 0x12, 0x3, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9583, 0xd069, 0x8, 0xff1e, 0x2, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6de7, 0x8, 0x1, 0x5, 0x319, 0x0, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd4ab, 0x80, 0xfffa, 0x3, 0x1, 0xa65d, 0x8000, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1bc, 0x6c, 0xc, 0x81, 0x1, 0xffff, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x4, 0x2, 0x10, 0x2, 0xc, 0xfffe]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x7}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x6}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x7, 0xa}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x5}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x7, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x3, 0x6}, {0x6, 0x5}, {0x2, 0x5}, {0x2, 0x4}, {0x3, 0x9}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0x5}, {0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x7}, {0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x3}, {0x0, 0x5}, {0x5, 0x2}, {0x7, 0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0xc, 0xf68bfd32cb624ebf, 0x6c, 0x48, 0x60, 0xc, 0x18, 0x48, 0x48, 0xc, 0x2, 0x18, 0x9, 0x4, 0xccbc84a8e9cbc11a, 0x3, 0x18, 0x24]}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9ce, 0x7, 0x7ff, 0x7, 0x1000, 0x8, 0x702f, 0x101]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x0, 0x9, 0x4, 0x4, 0x9, 0x60, 0x4, 0x12, 0x1, 0x1, 0x6, 0x6, 0x30, 0x24, 0x6c, 0x6, 0x24, 0x1b, 0xc, 0x0, 0x12, 0xb, 0x60, 0xb]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x4, 0x6c, 0x12, 0x24, 0x12, 0x36, 0x3, 0x60, 0x4, 0x60, 0x30, 0x3, 0x1, 0x24, 0x0, 0x30, 0x33, 0x2, 0x9, 0x1, 0x16, 0x2, 0x6, 0xb]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x71, 0x4, 0x16, 0x6, 0x16, 0x16, 0x24, 0x6, 0x24, 0x1b, 0x4, 0x2, 0xc, 0x30921646de837edb, 0x6c, 0x16, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0xc, 0x3, 0x1000, 0x80, 0xe764, 0xe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x89, 0x6000, 0x9, 0x7, 0x64c, 0x7f, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x2, 0x3, 0xfe01, 0xacc, 0xfff9, 0xd6c, 0xffff]}}]}]}, @NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x6, 0x4, 0x1d, 0x3, 0x8, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x8}, {0x7, 0x2}, {0x4, 0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x1}, {0x3, 0x4}, {0x4, 0x5}, {}, {0x0, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x2, 0x1}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x6}, {0x1, 0x3}, {0x2, 0xa}, {0x4, 0x5}, {0x5, 0x2}, {0x3, 0x9}, {0x3, 0x6}, {0x3}, {0x0, 0x4}, {0x0, 0x2}, {0x7}, {0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x9}, {0x4, 0x4}, {}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x2}, {0x3}, {0x0, 0x2}, {0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x0, 0x1d}, {0x4, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd9d, 0x4, 0x0, 0xfffb, 0x3, 0x2, 0x8b2c, 0x9]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8f, 0x0, 0x2, 0x8, 0x6, 0x5, 0x7, 0xd]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x6}, {0x1, 0x6}, {0x7, 0x9}, {0x0, 0x1a}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x4}, {0x3, 0x2}, {0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x5}, {}, {0x2}, {0x0, 0x7}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x4}, {0x2, 0x9}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x3}, {}, {0x1, 0x3}, {0x4, 0x5}, {0x6, 0x1}, {0x3}, {0x5, 0x2}, {0x5, 0x9}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x7}, {0x2, 0x5}, {0x2, 0x2}, {0x1}, {0x7, 0x3}, {0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x1}, {0x5, 0xa}, {0x6, 0x2}, {0x2, 0x5}, {0x4, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x73, 0x16, 0x3c, 0xc, 0x9, 0x24, 0x30, 0x24, 0x24, 0x3, 0x4, 0x18, 0x1b, 0x9, 0x30, 0x18, 0x1, 0x18, 0x60, 0x25, 0x60, 0x18, 0x2]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xfff7, 0xf8b0, 0x8, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x5}, {0x4, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x3, 0xa}, {0x1, 0x5}, {0x7}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0x3}, {0x4}, {0x2, 0x3}, {0x6, 0x4}, {0x7}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x5, 0x3}, {0x7, 0x2}, {0x7, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xa4, 0x1000, 0x400, 0x9, 0x7, 0x3f, 0xff01]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x7fff, 0x200, 0x8, 0x1ff, 0x3ff, 0x1000, 0x3e45]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x4, 0x7}, {0x7, 0x8}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x4}, {0x4, 0x8}, {0x7, 0x4}, {0x3, 0x8}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x5}, {0x0, 0x1}, {0x2, 0x6}, {0x5}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x4, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x97a, 0x3ff, 0x34ff, 0x5, 0x1, 0x1, 0x2]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x7}, {0x4, 0x8}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {}, {0x7}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x9}, {0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0x2}, {0x5}, {0x7, 0xa}, {0x7, 0x4}, {0x1, 0x3}, {0x5, 0x9}, {0x7, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x3, 0x6}, {0x7, 0x5}, {0x6, 0x3}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x108, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0xa}, {0x7, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x12}, {0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x2, 0x7}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x4}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x7, 0x7fff, 0x11, 0x8, 0x0, 0xdf, 0x4]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x36, 0x12, 0x1, 0x9, 0x1, 0x3, 0x24, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x40, 0x0, 0x9, 0x2, 0x3, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0x4, 0x800, 0x2, 0xacaf, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x5}, {0x1, 0x4}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x6}, {0x5, 0x4}, {0x5, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x8}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0xf7ee, 0x2, 0x8000, 0x7, 0x9, 0x0, 0x917]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa85, 0x7, 0x6, 0x4, 0xa, 0xffff, 0x200]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xc60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20041840) recvmsg(r7, &(0x7f0000002f40)={&(0x7f0000002d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d80)=""/67, 0x43}], 0x1, &(0x7f0000002e40)=""/197, 0xc5}, 0x80000023) recvfrom$inet(r7, &(0x7f0000002f80)=""/213, 0xd5, 0x120, &(0x7f0000003080)={0x2, 0x4e23, @empty}, 0x10) readv(r7, &(0x7f0000003540)=[{&(0x7f00000030c0)=""/174, 0xae}, {&(0x7f0000003180)=""/16, 0x10}, {&(0x7f00000031c0)=""/21, 0x15}, {&(0x7f0000003200)=""/178, 0xb2}, {&(0x7f00000032c0)=""/20, 0x14}, {&(0x7f0000003300)=""/1, 0x1}, {&(0x7f0000003340)=""/56, 0x38}, {&(0x7f0000003380)=""/247, 0xf7}, {&(0x7f0000003480)=""/134, 0x86}], 0x9) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x68044) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x500800}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x53}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000003800), &(0x7f0000003840)=0xc) pipe(&(0x7f0000003880)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003900), r2) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x18, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1044}, 0x8000) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a40), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000003b40)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a80)={0x4c, r11, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000) pipe(&(0x7f0000003b80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000003bc0)={0x0, 0x3}, &(0x7f0000003c00)=0x8) 1.298851141s ago: executing program 0 (id=5840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0xfffffff0, 0x9, 0x2, 0x100, 0x4, 0x8e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x6, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x8, 0x4, 0x4, @private0, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x8000, 0x2, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x595b951ee7c8a2f, 0x3, 0x5, {{0x25, 0x4, 0x2, 0x2, 0x94, 0x66, 0x0, 0x8, 0x2f, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "705614"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x67, 0x1, 0x3, [{@multicast1, 0x2}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x1000}, {@remote, 0x9}, {@private=0xa010101, 0x9}]}, @cipso={0x86, 0x34, 0x3, [{0x0, 0xd, "b59ab1feed441571a2d77b"}, {0x2, 0x12, "82b44c9ca223cdea258abae16f7292aa"}, {0x0, 0x6, "aef33e6e"}, {0x2, 0x9, "c91653a3b6e280"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=@delchain={0x46b0, 0x65, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xffff}, {0x6, 0x10}, {0x8, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x4644, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x1, 0xeacd, 0x504, 0x8, {0x40, 0x2, 0x811d, 0x1, 0x4, 0x400}, {0x9, 0x2, 0x1, 0x2, 0x0, 0xffffffff}, 0x1ff, 0x0, 0xa}}]}, @TCA_CGROUP_EMATCHES={0x12d4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb0, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x1}, {0xffffffffffffffff, 0x5}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffff, 0x3, 0x4}, {0x1, 0x1, 0x2, 0x8000}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff9}, {0x5, 0x9, 0x8, 0x2, 0x1, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x4edd}, {0x31, 0x9, 0x3, 0x4, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xe05, 0x2, 0x3}, {0x4, 0x7, 0x1, "3eeb4ba9533ae2"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd99, 0x8, 0x6}, {0x0, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfff, 0x1, 0x1}, {0xfffffff8, 0x7, 0x5, 0x1, 0xf}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x81, 0x8, 0x1}, {0xffffffffffffffff, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x78, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x4, 0x1}, {0x1ff, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='G']}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x39, 0x3, [@TCF_META_TYPE_VAR="4a9c61bca1c2fb5a", @TCF_META_TYPE_VAR="7410a39c3cfdcacacb", @TCF_META_TYPE_VAR="640a452accd00f47", @TCF_META_TYPE_VAR="e346", @TCF_META_TYPE_VAR="beaba29966", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='x]O', @TCF_META_TYPE_VAR="25729e091e38", @TCF_META_TYPE_VAR='0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000700)={0x20, r4, 0x1, 0x70bd27, 0x25dfdc02, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x40) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x1) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c06010502"], 0x5) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200)={0x0, 0x0, 0x1000}, 0x10}, 0x94) 1.055710397s ago: executing program 4 (id=5842): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x40d, 0x321, 0x4000, 0x7, 0x6, 0x9, 0x1, 0x9, r2}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r3, 0xfffffffb}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x2b5}, 0x8) 1.055427332s ago: executing program 0 (id=5843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000001f4ffffffff9800000008000300", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2409}], @key_params=[@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "48d303b043"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "778003d61c6e630de81a4a973a"}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "11a38b1d889531aa"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xac}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) 1.008332268s ago: executing program 4 (id=5844): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x80, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) 936.172131ms ago: executing program 4 (id=5845): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8929, &(0x7f0000000440)="8d557fd094c38f748ec33512ef3a") (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 751.691647ms ago: executing program 4 (id=5846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000340)={'sit0\x00', r3, 0x10, 0x7, 0x2, 0x3, {{0x3e, 0x4, 0x1, 0x2, 0xf8, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x5, 0x8, "85bdb41675c7"}, {0x4, 0xe, "5f0007fbc827281a7abb84a2"}, {0x0, 0x7, "80f133f0e6"}, {0x2, 0x5, "3af76b"}, {0x6, 0x7, "e2ca027e44"}, {0x2, 0x3, "d9"}]}, @cipso={0x86, 0x84, 0x3, [{0x5, 0xe, "5fe950730c64daaad3c174fd"}, {0x2, 0x11, "ecb2de91567984b87a0babf9ec84b0"}, {0x5, 0x9, "1862937930d44d"}, {0x5, 0xa, "89f3e52fed1ab14d"}, {0x2, 0xb, "8278f4de6a6e5690ed"}, {0x2, 0x10, "bf59010a3a3ede5a7446bbce2aa9"}, {0x7, 0x12, "c5ffe18d8adf1dfe8acd6374c6ca00b6"}, {0x2, 0x12, "2ad6a52373b542cf4c8d50715aa22fa5"}, {0x1, 0xa, "fcdfb53b22b629d7"}, {0x0, 0x3, "e1"}]}, @ssrr={0x89, 0x2b, 0x2f, [@dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @remote]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 740.023398ms ago: executing program 1 (id=5847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r2, 0x8, 0x30}, 0xc) getgid() (async) syz_emit_ethernet(0x41, &(0x7f0000000100)={@random="fb57e76be621", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@arp={0x806, @generic={0x8, 0x88be, 0x6, 0xc, 0x2, @local, "6b939085b7ed245862b0f081", @link_local, "cb51450484a66f825c02c66c61dc06"}}}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x10, 0xffffffffffffffff, 0x4000) 718.173491ms ago: executing program 4 (id=5848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r1) r3 = socket(0x1e, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x16, @broadcast, 0x4e20, 0x1, 'wrr\x00', 0x18, 0x4, 0x69}, 0x2c) sendto(r3, 0x0, 0x0, 0x40000, &(0x7f0000000000)=@generic={0x1e, "ce33be0d44c60b14d87167d49396208e01367b3d90e5a933e1b2aee80d2c71d4e268223ed7dac20eccf4a0847aae138d9155f11f9f8fa070942cefc3a2910c9acb202d7f68a62b9aa78bb1327d24a0c44f4b9640cdcb14560949aa7a1fc3a33c332a4c409d1ddb96443400bd5f7f533e1de8c9663df1912afbe896cdad4f"}, 0x80) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8953, &(0x7f0000000c40)={'wg1\x00', {0x2, 0x0, @empty}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 591.67323ms ago: executing program 1 (id=5849): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1, 0x8, 0xfffffffe, 0x9, 0xf65, 0x9, 0xfffffffb}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) 519.111501ms ago: executing program 1 (id=5850): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x55, [@remote, @initdev={0xac, 0x1e, 0xfe, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x28}, 0x0) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000010000000000000000000000003000500000000000200ebbc7d6b95f9c9f57223369b419476850000ac1e0001000000000000001b2602e4ef90000300060000000000020000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000d70e"], 0x80}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x55, [@remote, @initdev={0xac, 0x1e, 0xfe, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x28}, 0x0) (async) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000010000000000000000000000003000500000000000200ebbc7d6b95f9c9f57223369b419476850000ac1e0001000000000000001b2602e4ef90000300060000000000020000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000d70e"], 0x80}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async) accept$alg(r2, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) 411.595137ms ago: executing program 1 (id=5851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) socket$inet6(0xa, 0xa, 0x100) 311.673387ms ago: executing program 3 (id=5852): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r1], 0x54}}, 0x800) 171.492625ms ago: executing program 1 (id=5853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 138.914484ms ago: executing program 2 (id=5854): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) clock_gettime(0x0, &(0x7f00000032c0)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}}, 0x4c084) recvmmsg(r0, &(0x7f00000031c0)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f00000001c0)=""/208, 0xd0}], 0x2, &(0x7f00000002c0)=""/171, 0xab}, 0x9}, {{&(0x7f0000000380)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/228, 0xe4}, {&(0x7f0000000600)=""/238, 0xee}, {&(0x7f0000000700)=""/236, 0xec}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000400)=""/41, 0x29}], 0x5, &(0x7f0000000900)=""/4096, 0x1000}, 0xa083}, {{&(0x7f0000001900)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001980)=""/129, 0x81}, {&(0x7f0000001a40)=""/192, 0xc0}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/146, 0x92}, {&(0x7f0000002bc0)=""/47, 0x2f}, {&(0x7f0000002c00)=""/54, 0x36}, {&(0x7f0000002c40)=""/158, 0x9e}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/91, 0x5b}, {&(0x7f0000002dc0)=""/83, 0x53}], 0xa}, 0x4}, {{&(0x7f0000002f00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f80)=""/151, 0x97}, {&(0x7f0000003040)=""/128, 0x80}, {&(0x7f00000030c0)=""/8, 0x8}, {&(0x7f0000003100)=""/68, 0x44}], 0x4}, 0x8}], 0x4, 0x2022, &(0x7f0000003300)={r3, r4+10000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000003340)=ANY=[@ANYBLOB="050000000000000071119700000000008510000002000000850000000000000095003300000000009500a50500000001000000d705e3f8dd64c6bec602000000f7181245"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 79.620017ms ago: executing program 0 (id=5855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r3}, &(0x7f0000000340)=0x8) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0x439b, 0x4) sendmmsg$inet6(r4, &(0x7f0000000980)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000140)="ed0e5033237ed5e7f9aaafc2491d6b509aa295f1ffc6d7f69386bfa4a0e96045c8d892412f2e0a262ab4d0a479dc652794ad29a950e411ead8a73e9563f8716d7c0bb776e179a9b35d6b1827a25be3fe9c86a6b937dabf1f23099e6bfc7bc41bfb848070033b48d1255cb95bd5ac634f06c8bb73631ae812a2cc5c900eb4a276d09481f38dec3375c090922226d615faf70381c575cc5eea584874efa4eebfcbf15c115925b83668749928c25f1fb1ac48a7b83406aead3b38ee90d3f25f274c39fa15e6d8d09eadddf46f28ee641fcb39a0e0cffb891211de5c4be8d00ff5eeecf687c838a8e1cdd826e9431406645c8f53667c") sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x20040000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r7, 0x34de5000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x4, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x0, 0xff, 0x1764ccb8eeb04587, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 1 (id=5856): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x40008011}, 0x8004) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000480)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): ting new IBSS network, BSSID 50:50:50:50:50:50 [ 373.302199][T17875] IPVS: length: 187 != 8 [ 373.310575][T17876] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 373.336373][T12295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.355512][T17876] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 373.376266][T17876] __nla_validate_parse: 4 callbacks suppressed [ 373.376288][T17876] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3440'. [ 373.395074][T12295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.825890][T17899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 373.875535][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 373.903601][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3447'. [ 373.952828][T17906] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3448'. [ 374.078094][T17912] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3448'. [ 374.192342][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 374.362832][T17906] sit0: entered promiscuous mode [ 374.390443][T17906] netlink: 'syz.3.3448': attribute type 1 has an invalid length. [ 374.414763][T17906] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3448'. [ 374.607075][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3451'. [ 374.810681][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3456'. [ 374.826824][T17930] netlink: 'syz.2.3456': attribute type 21 has an invalid length. [ 375.264273][T17952] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 375.331612][T17953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.347937][T17953] team0: Port device bond1 added [ 375.575044][T17964] bond2: entered promiscuous mode [ 375.582469][T17964] bond2: entered allmulticast mode [ 375.594587][T17964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.815380][T17980] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 376.582906][T18014] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 377.276338][T18051] openvswitch: netlink: IPv4 tun info is not correct [ 377.539178][T18063] bridge_slave_0: left allmulticast mode [ 377.562740][T18063] bridge_slave_0: left promiscuous mode [ 377.587498][T18063] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.670489][T18063] bridge_slave_1: left allmulticast mode [ 377.690637][T18063] bridge_slave_1: left promiscuous mode [ 377.703443][T18063] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.777021][T18063] bond0: (slave bond_slave_0): Releasing backup interface [ 377.824444][T18063] bond0: (slave bond_slave_1): Releasing backup interface [ 377.860521][T18063] team0: Port device team_slave_0 removed [ 377.887857][T18063] team0: Port device team_slave_1 removed [ 377.905415][T18063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.930214][T18063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.960402][T18063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.974895][T18063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.019510][T18064] team0: Mode changed to "activebackup" [ 378.104965][T18072] tipc: Enabled bearer , priority 0 [ 378.331888][T18087] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 378.420452][T18089] netlink: 'syz.4.3504': attribute type 4 has an invalid length. [ 378.653436][T18101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 378.760913][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.775563][T18099] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.783236][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.805043][ T24] IPVS: starting estimator thread 0... [ 378.811419][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.828265][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.855516][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.880757][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.905443][T18110] IPVS: using max 23 ests per chain, 55200 per kthread [ 378.916888][T18114] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 378.935607][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.964882][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 378.984092][T18105] netlink: 'syz.3.3510': attribute type 3 has an invalid length. [ 379.069915][T18120] lo: entered promiscuous mode [ 379.130125][T18120] lo: entered allmulticast mode [ 379.144931][T18120] tunl0: entered promiscuous mode [ 379.150197][T18120] tunl0: entered allmulticast mode [ 379.200673][T18120] gre0: entered promiscuous mode [ 379.215979][T18120] gre0: entered allmulticast mode [ 379.234798][ T8825] tipc: Node number set to 2507162250 [ 379.265870][T18120] gretap0: entered promiscuous mode [ 379.271428][T18120] gretap0: entered allmulticast mode [ 379.291632][T18120] gretap0: refused to change device tx_queue_len [ 379.334779][T18120] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 379.568965][T18126] __nla_validate_parse: 8 callbacks suppressed [ 379.568987][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 379.601117][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 379.610391][T18140] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 379.827621][T18143] openvswitch: netlink: Actions may not be safe on all matching packets [ 379.946945][T18145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3517'. [ 380.199920][T18151] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3519'. [ 380.267114][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3520'. [ 380.344433][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3520'. [ 380.460822][T18161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 380.972598][T18179] team0: Device vti0 is of different type [ 381.181944][T18182] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3528'. [ 381.227803][T18184] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 381.300588][T18185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3529'. [ 381.300588][T18186] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3529'. [ 381.886500][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3535'. [ 382.752789][T18236] sch_fq: defrate 0 ignored. [ 383.097252][T12305] veth0_to_bond: left promiscuous mode [ 383.514163][T18257] xt_HMARK: proto mask must be zero with L3 mode [ 383.556551][T18263] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 383.751531][ T24] IPVS: starting estimator thread 0... [ 383.810731][T18275] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 383.884909][T18270] IPVS: using max 27 ests per chain, 64800 per kthread [ 384.201824][T18290] validate_nla: 49 callbacks suppressed [ 384.201846][T18290] netlink: 'syz.1.3562': attribute type 5 has an invalid length. [ 384.232064][T18295] xt_ipcomp: unknown flags B [ 384.497992][T18301] tipc: Enabled bearer , priority 0 [ 384.506727][T18301] syzkaller0: entered promiscuous mode [ 384.512262][T18301] syzkaller0: entered allmulticast mode [ 384.528385][T18301] syzkaller0: mtu less than device minimum [ 384.551505][T18299] tipc: Resetting bearer [ 384.584526][T18299] tipc: Disabling bearer [ 384.813610][T18309] veth1_to_hsr: entered promiscuous mode [ 384.852875][T18307] veth1_to_hsr: left promiscuous mode [ 385.463991][T18330] __nla_validate_parse: 9 callbacks suppressed [ 385.464015][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'. [ 385.505529][T18330] netlink: 'syz.4.3576': attribute type 3 has an invalid length. [ 385.679227][T18339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.767546][T18340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3580'. [ 386.168542][T18368] openvswitch: netlink: IPv4 tunnel dst address is zero [ 386.774176][T18387] vxcan1: entered allmulticast mode [ 386.795099][T18388] vxcan1: left allmulticast mode [ 386.864161][T18390] xt_l2tp: wrong L2TP version: 0 [ 386.917972][T18388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3590'. [ 387.523571][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 387.626395][T18419] sit0: left promiscuous mode [ 387.661953][T18419] D: renamed from syzkaller0 [ 387.708872][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3601'. [ 387.915255][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 388.025382][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3601'. [ 388.067973][T18443] IPVS: length: 65 != 24 [ 388.389271][T18455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.524481][T18468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3609'. [ 388.900644][T18482] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 388.916199][T18483] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3614'. [ 388.954084][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3614'. [ 388.985925][T18483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3614'. [ 389.046085][T18490] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 414.064372][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 414.081723][T18501] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.091464][T18501] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.101016][T18501] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.110299][T18501] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.146951][T18506] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3619'. [ 414.217259][T18512] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 414.247266][T18512] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 414.258188][T18514] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3625'. [ 414.282820][T18517] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3625'. [ 414.342861][T18520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3626'. [ 414.359223][T18520] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 414.372429][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 414.411566][T18522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'. [ 414.728841][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 414.754154][T18537] x_tables: duplicate underflow at hook 3 [ 414.773981][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'. [ 414.993663][T18546] openvswitch: netlink: Port 808452096 exceeds max allowable 65535 [ 415.487522][T18573] IPVS: Unknown mcast interface: pim6reg1 [ 415.540367][T18580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3647'. [ 415.678061][T18586] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 415.744445][T18586] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 415.823767][T18594] xt_hashlimit: size too large, truncated to 1048576 [ 416.238429][T18604] netlink: 'syz.1.3652': attribute type 1 has an invalid length. [ 416.248260][T18605] netlink: 'syz.1.3652': attribute type 1 has an invalid length. [ 416.325920][T18579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.445832][T18613] tipc: Enabled bearer , priority 0 [ 416.524552][T18614] syzkaller0: entered promiscuous mode [ 416.534384][T18614] syzkaller0: entered allmulticast mode [ 416.549175][T18614] tipc: Resetting bearer [ 416.701416][T11580] tipc: Resetting bearer [ 416.719812][T18614] tipc: Resetting bearer [ 418.979772][T18614] tipc: Disabling bearer [ 419.004130][T18630] tipc: Enabling of bearer rejected, failed to enable media [ 419.386556][T18667] __nla_validate_parse: 3 callbacks suppressed [ 419.386578][T18667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3674'. [ 419.431413][T18668] netlink: 'syz.1.3673': attribute type 1 has an invalid length. [ 419.480093][T18668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.513277][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'. [ 419.530089][T18674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.538224][T18674] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 419.552223][T18674] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 419.660233][T18677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.686365][T18668] gretap1: entered promiscuous mode [ 419.699485][T18668] bond1: (slave gretap1): making interface the new active one [ 419.710462][T18668] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 419.961635][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 419.970889][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'. [ 419.981960][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'. [ 420.078237][T18701] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 420.087190][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3682'. [ 420.102373][T18701] netlink: 'syz.3.3682': attribute type 1 has an invalid length. [ 420.125688][T18701] netlink: 'syz.3.3682': attribute type 2 has an invalid length. [ 420.495051][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 420.844448][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3694'. [ 420.954584][T18743] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 420.964015][T18745] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3698'. [ 421.446251][T18764] netlink: 'syz.3.3701': attribute type 1 has an invalid length. [ 421.539964][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 421.646848][T18773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.121814][T18782] bond0 (unregistering): Released all slaves [ 423.055107][T18834] tipc: Resetting bearer [ 423.422927][T18834] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.432977][T18834] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.444179][T18834] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.453347][T18834] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.729509][T18860] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 423.786957][T18871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.794361][T18871] IPv6: NLM_F_CREATE should be set when creating new route [ 423.801727][T18871] IPv6: NLM_F_CREATE should be set when creating new route [ 423.914111][T18876] netlink: 'syz.1.3742': attribute type 10 has an invalid length. [ 424.028609][T18876] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 424.074434][T18884] x_tables: duplicate underflow at hook 1 [ 424.186052][T18886] xt_cgroup: path and classid specified [ 424.212977][T18886] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.310312][T18886] bridge_slave_1 (unregistering): left allmulticast mode [ 424.333482][T18886] bridge_slave_1 (unregistering): left promiscuous mode [ 424.350081][T18886] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.442721][T18892] hsr_slave_0: left promiscuous mode [ 424.451584][T18892] hsr_slave_1: left promiscuous mode [ 424.628687][T18902] syz_tun: entered promiscuous mode [ 424.656337][T18902] batadv_slave_0: entered promiscuous mode [ 424.680979][T18902] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 424.720949][T18902] Cannot create hsr debugfs directory [ 424.766018][T18902] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 424.788824][T18902] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.831905][T18917] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 424.874998][T18902] hsr1: entered allmulticast mode [ 424.880126][T18902] syz_tun: entered allmulticast mode [ 424.925358][T18902] batadv_slave_0: entered allmulticast mode [ 424.963923][T18922] netlink: zone id is out of range [ 424.971163][T18922] netlink: zone id is out of range [ 424.977010][T18922] netlink: zone id is out of range [ 424.982176][T18922] netlink: zone id is out of range [ 424.987500][T18922] netlink: zone id is out of range [ 424.992666][T18922] netlink: zone id is out of range [ 424.998818][T18922] netlink: zone id is out of range [ 425.071289][T18927] : renamed from hsr0 (while UP) [ 425.080983][T18928] netlink: 'syz.3.3760': attribute type 1 has an invalid length. [ 425.119548][T18926] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 425.127560][T18926] __nla_validate_parse: 16 callbacks suppressed [ 425.127579][T18926] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3761'. [ 425.150184][T18926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.212857][T18928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.297404][T18931] gretap1: entered promiscuous mode [ 425.322134][T18931] bond2: (slave gretap1): making interface the new active one [ 425.366941][T18931] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 425.396102][T18937] macvlan2: entered promiscuous mode [ 425.401497][T18937] macvlan2: entered allmulticast mode [ 425.409050][T18937] bond2: entered promiscuous mode [ 425.418744][T18937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.427034][T18937] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 425.447611][T18937] bond2: left promiscuous mode [ 425.519305][T18949] netlink: 'syz.2.3765': attribute type 6 has an invalid length. [ 425.629390][T18951] netlink: 'syz.4.3766': attribute type 10 has an invalid length. [ 425.648750][T18951] veth0_vlan: entered allmulticast mode [ 425.659044][T18951] veth0_vlan: left promiscuous mode [ 425.690079][T18951] veth0_vlan: entered promiscuous mode [ 425.708381][T18955] netlink: 'syz.0.3767': attribute type 17 has an invalid length. [ 425.725466][T18951] team0: Device veth0_vlan failed to register rx_handler [ 425.742692][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 425.754468][T18955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3767'. [ 425.786734][T18960] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 425.828504][T18962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3770'. [ 426.169896][T18971] bridge_slave_0: left allmulticast mode [ 426.209409][T18971] bridge_slave_0: left promiscuous mode [ 426.219577][T18971] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.279614][T18971] bond0: (slave bond_slave_0): Releasing backup interface [ 426.321725][T18971] bond0: (slave bond_slave_1): Releasing backup interface [ 426.442480][T18971] team0: Port device team_slave_0 removed [ 426.535411][T18971] team0: Port device team_slave_1 removed [ 426.545861][T18971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.584273][T18971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.618662][T18971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.650280][T18971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.690941][T18971] bond0: (slave wlan1): Releasing backup interface [ 426.744344][T18971] team0: Port device bond1 removed [ 427.047974][T19006] Unsupported ieee802154 address type: 0 [ 427.340019][T19024] netlink: 'syz.0.3786': attribute type 10 has an invalid length. [ 427.506298][T19031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3789'. [ 427.516463][T19033] bridge0: port 3(gretap0) entered blocking state [ 427.516565][T19033] bridge0: port 3(gretap0) entered disabled state [ 427.532157][T19033] gretap0: entered allmulticast mode [ 427.556039][T19033] gretap0: entered promiscuous mode [ 427.561945][T19033] bridge0: port 3(gretap0) entered blocking state [ 427.568600][T19033] bridge0: port 3(gretap0) entered forwarding state [ 427.650241][T19043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3793'. [ 427.689500][T19044] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 427.710923][T19044] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 427.721390][T19044] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 427.811252][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3794'. [ 428.057279][T19061] net_ratelimit: 397 callbacks suppressed [ 428.057302][T19061] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 428.072689][T19061] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20001 [ 428.186964][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3801'. [ 428.624283][T19092] netlink: 'syz.3.3809': attribute type 3 has an invalid length. [ 428.735738][T19091] veth3: entered promiscuous mode [ 428.932006][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3814'. [ 429.342834][T19126] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3818'. [ 429.491810][T19137] tipc: New replicast peer: 255.255.255.255 [ 429.504378][T19137] tipc: Enabled bearer , priority 10 [ 429.613348][T19144] x_tables: duplicate underflow at hook 1 [ 429.622867][T19144] netlink: 'syz.4.3826': attribute type 12 has an invalid length. [ 429.978853][ T51] Bluetooth: hci1: link tx timeout [ 429.984579][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 430.270058][T19181] __nla_validate_parse: 4 callbacks suppressed [ 430.270074][T19181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 430.290202][T19183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3838'. [ 430.319239][T19181] 8021q: VLANs not supported on ip6_vti0 [ 431.041687][T19207] netlink: 'syz.2.3847': attribute type 21 has an invalid length. [ 431.073530][T19207] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 432.056377][T19261] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 432.076511][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 432.114474][T19264] x_tables: duplicate underflow at hook 1 [ 432.168510][T19264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3859'. [ 432.226829][T19261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.245240][T19274] x_tables: duplicate underflow at hook 1 [ 432.293736][T19267] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 432.520909][T19291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3865'. [ 432.551561][T19291] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3865'. [ 432.732174][T19282] syzkaller0: entered promiscuous mode [ 432.754193][T19282] syzkaller0: entered allmulticast mode [ 432.784453][T19309] netlink: 'syz.0.3866': attribute type 1 has an invalid length. [ 432.838553][T19313] netlink: 'syz.2.3869': attribute type 10 has an invalid length. [ 435.364465][T19325] netlink: 'syz.2.3873': attribute type 4 has an invalid length. [ 435.387847][T19330] sch_fq: defrate 0 ignored. [ 435.565349][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3879'. [ 435.588997][T19334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 435.603008][T19342] No such timeout policy "syz0" [ 435.801628][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3881'. [ 435.876002][T19348] xt_CT: No such helper "netbios-ns" [ 436.082612][T19367] netlink: 'syz.0.3887': attribute type 1 has an invalid length. [ 436.133585][T19367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.142586][T19371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3889'. [ 436.152704][T19367] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3887'. [ 436.162284][T19367] gretap1: entered promiscuous mode [ 436.168428][T19368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3888'. [ 436.191439][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3888'. [ 436.210450][T19374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3889'. [ 436.309385][T19377] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 436.440942][T19385] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3892'. [ 436.995997][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3897'. [ 437.046499][T19408] xt_CT: No such helper "netbios-ns" [ 437.096335][T19379] Can't find ip_set type hash:ip,maa [ 437.252667][T19419] netlink: 'syz.0.3899': attribute type 83 has an invalid length. [ 437.388594][T19428] netlink: 'syz.3.3903': attribute type 20 has an invalid length. [ 437.415201][T19428] netlink: 'syz.3.3903': attribute type 20 has an invalid length. [ 437.426828][T19428] netlink: 'syz.3.3903': attribute type 10 has an invalid length. [ 437.451824][T19428] batman_adv: batadv0: Adding interface: team0 [ 437.459767][T19428] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.485517][T19428] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 437.976501][T19455] netlink: 'syz.2.3911': attribute type 11 has an invalid length. [ 438.405019][T19481] delete_channel: no stack [ 438.437070][T19473] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 438.952244][T19513] netlink: 'syz.3.3929': attribute type 3 has an invalid length. [ 439.195156][T19520] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 439.271507][T19523] veth0: entered promiscuous mode [ 439.351422][T19525] bond1: entered promiscuous mode [ 439.360051][T19525] bond1: entered allmulticast mode [ 439.377389][T19525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.523475][T19521] veth0: left promiscuous mode [ 439.782278][T19552] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.791356][T19552] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.800189][T19552] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.809070][T19552] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.894134][T19562] netlink: 'syz.4.3943': attribute type 2 has an invalid length. [ 440.148809][T19574] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 440.569283][T19596] Bluetooth: MGMT ver 1.23 [ 440.591082][T19597] netlink: 'syz.2.3953': attribute type 4 has an invalid length. [ 440.615675][T19600] netlink: 'syz.2.3953': attribute type 4 has an invalid length. [ 440.647990][T19596] lo: entered promiscuous mode [ 440.654521][T19596] netlink: 'syz.2.3953': attribute type 2 has an invalid length. [ 440.663396][T19596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.699192][T19597] netlink: 'syz.2.3953': attribute type 2 has an invalid length. [ 440.708187][T19597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.013853][T19612] __nla_validate_parse: 10 callbacks suppressed [ 441.013875][T19612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3959'. [ 441.132845][T19624] syzkaller1: entered promiscuous mode [ 441.140661][T19624] syzkaller1: entered allmulticast mode [ 441.344077][T19636] veth0: entered promiscuous mode [ 441.353469][T19635] veth0: left promiscuous mode [ 441.524285][T19641] tc_dump_action: action bad kind [ 441.533693][T19644] tc_dump_action: action bad kind [ 441.610815][T19646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3970'. [ 441.631674][T19646] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 441.640146][T19646] netlink: 'syz.3.3970': attribute type 1 has an invalid length. [ 441.911312][T19655] IPVS: Error joining to the multicast group [ 441.999715][T19662] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3976'. [ 442.170825][T19668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3979'. [ 442.263302][T19670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3980'. [ 442.336120][T12078] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 442.560025][T19680] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3980'. [ 442.796896][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3985'. [ 443.300254][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'. [ 443.335710][T19705] sctp: [Deprecated]: syz.2.3988 (pid 19705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.335710][T19705] Use struct sctp_sack_info instead [ 443.418977][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3986'. [ 443.557838][T19716] bond0: (slave bond_slave_1): Releasing backup interface [ 444.344120][T19757] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4001'. [ 444.600072][T19771] xt_time: unknown flags 0x4 [ 444.749585][T19763] xt_CT: No such helper "netbios-ns" [ 444.811562][T19778] netlink: 'syz.4.4007': attribute type 1 has an invalid length. [ 444.832329][T19780] pim6reg: entered allmulticast mode [ 444.851764][T19780] pim6reg: left allmulticast mode [ 444.862478][T19778] netlink: 'syz.4.4007': attribute type 1 has an invalid length. [ 445.784109][T19822] xt_CT: No such helper "netbios-ns" [ 446.068084][T19848] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 446.209798][T19857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.363005][T19867] __nla_validate_parse: 11 callbacks suppressed [ 446.363026][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 446.410467][T19872] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 446.939187][T19889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.983833][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4039'. [ 447.079944][T19895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4041'. [ 447.496877][T19916] netlink: 'syz.1.4046': attribute type 1 has an invalid length. [ 447.540857][T19916] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4046'. [ 447.563961][T11580] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.582595][T19916] gretap0: left allmulticast mode [ 447.587925][T19916] gretap0: left promiscuous mode [ 447.593123][T19916] bridge0: port 3(gretap0) entered disabled state [ 447.630169][T19916] bond0: (slave syz_tun): Releasing backup interface [ 447.682622][T19916] bridge_slave_0: left allmulticast mode [ 447.710671][T19916] bridge_slave_0: left promiscuous mode [ 447.731192][T19916] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.793382][T19916] bridge_slave_1: left allmulticast mode [ 447.810226][T19916] bridge_slave_1: left promiscuous mode [ 447.822976][T19916] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.868200][T19916] bond0: (slave bond_slave_0): Releasing backup interface [ 447.937863][T19916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.947852][T19916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.970717][T19916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.989217][T19916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.015821][T19936] can: request_module (can-proto-0) failed. [ 448.036262][T19916] bond1: (slave gretap1): Releasing active interface [ 448.058152][T19922] tipc: Started in network mode [ 448.067119][T19922] tipc: Node identity , cluster identity 4711 [ 448.083022][T19922] tipc: Failed to set node id, please configure manually [ 448.090811][T19922] tipc: Enabling of bearer rejected, failed to enable media [ 448.098572][T19947] netlink: 'syz.0.4052': attribute type 10 has an invalid length. [ 448.121190][T19947] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 448.408594][T19957] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 448.830489][T19979] netlink: 'syz.0.4060': attribute type 10 has an invalid length. [ 448.873348][T19975] xt_CT: No such helper "pptp" [ 449.061747][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4065'. [ 449.141599][T19999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4065'. [ 449.236581][T19979] veth0_macvtap: left promiscuous mode [ 449.300175][T19999] team_slave_1: entered allmulticast mode [ 449.472727][T20006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4066'. [ 449.619002][T20013] xt_nfacct: accounting object `syz1' does not exists [ 449.883336][T20022] xt_TCPMSS: Only works on TCP SYN packets [ 450.283886][T20040] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4079'. [ 450.297022][T20040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.636397][T20054] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 451.010953][T20065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4085'. [ 451.100766][ T30] audit: type=1800 audit(1752966080.159:6): pid=20066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4084" name="memory.events" dev="tmpfs" ino=1053 res=0 errno=0 [ 451.323436][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'. [ 451.365958][T20076] 8021q: VLANs not supported on wlan0 [ 451.663277][T20091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4092'. [ 451.785175][T20091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4092'. [ 451.994941][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 452.116124][T20109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4098'. [ 452.862650][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4105'. [ 453.009524][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 453.043859][T20146] netlink: 'syz.4.4109': attribute type 10 has an invalid length. [ 453.072432][T20146] batman_adv: batadv0: Adding interface: team0 [ 453.090335][T20146] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.126795][T20146] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 453.235139][T20153] netlink: 'syz.3.4112': attribute type 16 has an invalid length. [ 453.268687][T20153] netlink: 'syz.3.4112': attribute type 3 has an invalid length. [ 453.278254][T20153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4112'. [ 453.681913][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 454.006948][T20185] tipc: Started in network mode [ 454.012840][T20185] tipc: Node identity 9e7f92608a11, cluster identity 4711 [ 454.015883][T20191] xt_hashlimit: overflow, rate too high: 0 [ 454.024939][T20185] tipc: Enabled bearer , priority 0 [ 454.046410][T20185] syzkaller0: entered promiscuous mode [ 454.052065][T20185] syzkaller0: entered allmulticast mode [ 454.130839][T20185] tipc: Resetting bearer [ 454.151102][T20185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.192507][T20184] tipc: Resetting bearer [ 454.232656][T20198] netlink: 'syz.2.4128': attribute type 10 has an invalid length. [ 454.289577][T20184] tipc: Disabling bearer [ 454.385201][T20198] batman_adv: batadv0: Adding interface: team0 [ 454.392029][T20198] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.448401][T20198] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 454.494112][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 454.525887][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 454.561088][T20206] nbd: must specify a device to reconfigure [ 454.567767][T20207] nbd: must specify a device to reconfigure [ 454.574127][T20206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4131'. [ 454.600840][T20206] tipc: Enabled bearer , priority 0 [ 454.609935][T20206] syzkaller0: entered promiscuous mode [ 454.617968][T20206] syzkaller0: entered allmulticast mode [ 454.713676][T20205] tipc: Resetting bearer [ 454.836044][T20205] tipc: Disabling bearer [ 454.897574][T20228] netlink: 'syz.3.4136': attribute type 1 has an invalid length. [ 455.082008][T20237] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 455.557166][T20266] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 455.603549][T20253] lo: left promiscuous mode [ 455.767665][T20271] netlink: 'syz.4.4147': attribute type 18 has an invalid length. [ 455.877447][T20253] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 456.111678][T20279] netlink: 'syz.4.4148': attribute type 1 has an invalid length. [ 456.123701][T20279] netlink: 'syz.4.4148': attribute type 10 has an invalid length. [ 456.185736][T20279] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 456.192562][T20283] netlink: 'syz.0.4149': attribute type 1 has an invalid length. [ 456.228377][T20279] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 456.285816][T20287] veth1_macvtap: left promiscuous mode [ 456.488942][T20295] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 456.507039][T20298] netlink: 'syz.3.4156': attribute type 2 has an invalid length. [ 456.753008][T20309] __nla_validate_parse: 4 callbacks suppressed [ 456.753032][T20309] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4157'. [ 457.006788][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 457.068237][T20324] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4161'. [ 457.121551][T20328] sctp: [Deprecated]: syz.4.4163 (pid 20328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.121551][T20328] Use struct sctp_sack_info instead [ 457.123839][T20320] xt_CT: No such helper "netbios-ns" [ 457.270693][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 457.320661][T20334] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4165'. [ 457.335032][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 457.443509][T20342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4168'. [ 457.508133][T20346] IPv6: NLM_F_REPLACE set, but no existing node found! [ 457.580010][T20345] dvmrp1: entered allmulticast mode [ 457.726474][T20359] veth1_macvtap: entered promiscuous mode [ 457.754977][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 457.841682][T20366] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4175'. [ 457.913237][T20359] veth1_macvtap (unregistering): left promiscuous mode [ 458.334366][T20344] dvmrp1: left allmulticast mode [ 458.473713][T20392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4182'. [ 458.709413][T20403] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 458.762747][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4186'. [ 458.798969][T20408] batman_adv: batadv0: Removing interface: team0 [ 458.836657][T20408] team0: Device gtp0 is up. Set it down before adding it as a team port [ 458.938810][T20416] validate_nla: 3 callbacks suppressed [ 458.938838][T20416] netlink: 'syz.0.4189': attribute type 16 has an invalid length. [ 458.971056][T20414] netlink: 'syz.4.4188': attribute type 5 has an invalid length. [ 459.199184][T20424] netlink: 'syz.4.4192': attribute type 4 has an invalid length. [ 459.383014][T20427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.392600][T20434] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 459.419050][T20434] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 459.445610][T20434] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 459.468792][T20434] netlink: 'syz.4.4194': attribute type 2 has an invalid length. [ 459.592201][T20439] netlink: 'syz.0.4196': attribute type 29 has an invalid length. [ 459.623058][T20439] netlink: 'syz.0.4196': attribute type 29 has an invalid length. [ 459.705301][T20439] sctp: [Deprecated]: syz.0.4196 (pid 20439) Use of int in max_burst socket option deprecated. [ 459.705301][T20439] Use struct sctp_assoc_value instead [ 459.733472][T20444] delete_channel: no stack [ 459.818032][T20449] unsupported nla_type 58 [ 460.247753][T20476] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 460.328874][T20482] netlink: 'syz.3.4210': attribute type 10 has an invalid length. [ 460.417425][T20439] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 460.501338][T20487] openvswitch: netlink: Flow actions attr not present in new flow. [ 460.761945][T20497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.795718][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 461.388818][T20518] xt_CT: No such helper "netbios-ns" [ 461.494169][T20524] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 461.546754][T20524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.616015][T20538] C: renamed from lo [ 461.732394][T20538] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 461.845136][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 462.060581][T20555] __nla_validate_parse: 13 callbacks suppressed [ 462.060602][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4230'. [ 462.372959][T20569] tipc: Enabled bearer , priority 0 [ 462.558716][T20569] syzkaller0: entered promiscuous mode [ 462.591322][T20569] syzkaller0: entered allmulticast mode [ 462.607665][T20569] tipc: Resetting bearer [ 462.623506][T20566] tipc: Resetting bearer [ 462.644322][T20591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 462.668446][T20592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 462.744144][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4243'. [ 463.920747][ T5856] Bluetooth: hci0: command 0x080f tx timeout [ 465.104381][T20566] tipc: Disabling bearer [ 465.116308][T20608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4243'. [ 465.503443][T20644] validate_nla: 2 callbacks suppressed [ 465.503464][T20644] netlink: 'syz.3.4252': attribute type 3 has an invalid length. [ 465.676550][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4253'. [ 465.767960][T20652] tipc: Enabled bearer , priority 0 [ 465.778157][T20652] syzkaller0: entered promiscuous mode [ 465.783809][T20652] syzkaller0: entered allmulticast mode [ 465.831233][T20652] tipc: Resetting bearer [ 465.859494][T20651] tipc: Resetting bearer [ 465.970678][T20651] tipc: Disabling bearer [ 466.225922][T20677] netlink: 'syz.0.4260': attribute type 3 has an invalid length. [ 466.244045][T20677] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4260'. [ 466.464521][T20690] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4263'. [ 466.916012][T20708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4270'. [ 467.041560][ T2152] IPVS: starting estimator thread 0... [ 467.063399][T20710] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 467.137324][T20716] IPVS: using max 23 ests per chain, 55200 per kthread [ 467.296524][T20729] syzkaller1: entered promiscuous mode [ 467.302404][T20729] syzkaller1: entered allmulticast mode [ 467.675971][T20749] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4283'. [ 467.801785][T20752] digital: digital_start_poll: Unknown protocol [ 468.564501][T20783] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4295'. [ 469.504002][T20816] syz_tun: entered promiscuous mode [ 469.536295][T20816] batadv_slave_0: entered promiscuous mode [ 469.556035][T20816] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 469.567074][T20816] hsr0: entered allmulticast mode [ 469.575041][T20816] syz_tun: entered allmulticast mode [ 469.585314][T20816] batadv_slave_0: entered allmulticast mode [ 469.622977][T20822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4307'. [ 469.769695][T20828] netlink: 'syz.3.4309': attribute type 1 has an invalid length. [ 469.786749][T20834] netlink: 'syz.3.4309': attribute type 1 has an invalid length. [ 469.821186][T20828] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4309'. [ 469.923054][T20842] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4310'. [ 470.044555][T20847] delete_channel: no stack [ 470.538472][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 470.665404][T20875] netlink: 'syz.2.4322': attribute type 8 has an invalid length. [ 470.712571][T20874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4322'. [ 470.789318][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4326'. [ 470.981291][T20893] netlink: 'syz.3.4327': attribute type 1 has an invalid length. [ 471.058208][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'. [ 471.292709][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 471.306414][T20908] netlink: 'syz.2.4332': attribute type 21 has an invalid length. [ 471.320881][T20908] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.452907][T20899] xt_CT: No such helper "netbios-ns" [ 471.867078][T20925] ipt_ECN: cannot use operation on non-tcp rule [ 471.892903][ T30] audit: type=1804 audit(1752966100.959:7): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4337" name="/newroot/274/cgroup.controllers" dev="tmpfs" ino=1403 res=1 errno=0 [ 471.931346][ T30] audit: type=1800 audit(1752966100.999:8): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4337" name="cgroup.controllers" dev="tmpfs" ino=1403 res=0 errno=0 [ 471.961902][T20925] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 471.971647][T20925] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.475185][T20953] openvswitch: netlink: Key type 7184 is out of range max 32 [ 472.691519][T20964] __nla_validate_parse: 3 callbacks suppressed [ 472.691538][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4347'. [ 472.845503][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 473.125262][ T5856] Bluetooth: hci3: command 0x041b tx timeout [ 473.141702][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 473.288599][T20985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4356'. [ 473.867878][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4370'. [ 473.932355][T21039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4369'. [ 474.028371][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4370'. [ 474.043739][T21043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4370'. [ 474.378510][T21058] netlink: 'syz.4.4375': attribute type 21 has an invalid length. [ 474.559336][T21071] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 474.582095][T21070] xt_cluster: node mask cannot exceed total number of nodes [ 474.777132][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4382'. [ 474.819532][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 474.888384][T21082] x_tables: duplicate underflow at hook 3 [ 475.422368][T21121] wg2: entered promiscuous mode [ 475.430772][T21121] wg2: entered allmulticast mode [ 475.473273][T21126] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 475.840704][T21141] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 476.421902][T21172] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 476.635934][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 476.775128][T21182] macvlan0: entered promiscuous mode [ 476.787187][T21182] macvlan0: entered allmulticast mode [ 476.892391][T21190] netlink: 'syz.3.4416': attribute type 83 has an invalid length. [ 477.122847][T21200] delete_channel: no stack [ 477.366814][ T24] IPVS: starting estimator thread 0... [ 477.434949][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 477.481962][T21213] IPVS: using max 24 ests per chain, 57600 per kthread [ 477.488742][T21220] netlink: 'syz.3.4426': attribute type 1 has an invalid length. [ 477.505513][T21220] netlink: 'syz.3.4426': attribute type 1 has an invalid length. [ 477.519221][T21219] netlink: 'syz.3.4426': attribute type 1 has an invalid length. [ 477.551753][T21219] netlink: 'syz.3.4426': attribute type 1 has an invalid length. [ 477.913256][T21238] __nla_validate_parse: 11 callbacks suppressed [ 477.913279][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4430'. [ 477.981294][T21238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4430'. [ 478.164020][T21248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4435'. [ 478.362833][T21259] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 478.541262][T21268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4440'. [ 478.589104][T21264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4439'. [ 478.719883][T21268] vlan0: entered allmulticast mode [ 478.739490][T21268] veth1: entered allmulticast mode [ 478.878098][T21274] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 478.891341][T21274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4442'. [ 478.900408][ T3481] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.640801][T21312] delete_channel: no stack [ 479.662958][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 479.694802][T21314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.843010][T21317] sctp: [Deprecated]: syz.4.4453 (pid 21317) Use of int in max_burst socket option. [ 479.843010][T21317] Use struct sctp_assoc_value instead [ 479.902791][T21323] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 479.945737][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4454'. [ 479.983709][T21324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4454'. [ 480.076845][T21328] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.085819][T21328] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.094889][T21328] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.103701][T21328] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.181129][T21333] netlink: 'syz.1.4459': attribute type 1 has an invalid length. [ 480.228439][T21333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.253625][T21333] bond4: (slave geneve2): making interface the new active one [ 480.263855][T21333] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 480.291560][T21333] bond4: entered promiscuous mode [ 480.298012][T21333] geneve2: entered promiscuous mode [ 480.325854][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4457'. [ 481.031805][T21380] netlink: 'syz.1.4471': attribute type 7 has an invalid length. [ 481.065655][T12305] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 481.638392][T21410] veth0_to_bridge: mtu less than device minimum [ 482.160751][T21439] xt_hashlimit: size too large, truncated to 1048576 [ 482.281050][T21442] geneve2: entered promiscuous mode [ 482.306312][T21442] geneve2: entered allmulticast mode [ 482.440578][T21444] netlink: zone id is out of range [ 482.445893][T21444] netlink: zone id is out of range [ 482.451188][T21444] netlink: zone id is out of range [ 482.456659][T21444] netlink: zone id is out of range [ 482.463821][T21456] netlink: 'syz.0.4498': attribute type 1 has an invalid length. [ 482.496217][T21444] netlink: zone id is out of range [ 482.515303][T21444] netlink: zone id is out of range [ 482.528772][T21451] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 482.634864][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 482.707466][T21459] bond6: (slave gretap2): making interface the new active one [ 482.723686][T21459] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 482.874289][T21472] netlink: 'syz.3.4501': attribute type 1 has an invalid length. [ 483.112061][T21487] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 483.157745][T21491] __nla_validate_parse: 5 callbacks suppressed [ 483.157767][T21491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4507'. [ 483.312941][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 483.688709][T21516] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 483.854097][T21520] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4516'. [ 484.043547][T21528] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4520'. [ 484.420462][T21550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4526'. [ 484.432657][T21550] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4526'. [ 484.610789][T21557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4527'. [ 484.619064][T21556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4529'. [ 484.779308][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4532'. [ 484.820375][T21568] net_ratelimit: 398 callbacks suppressed [ 484.820396][T21568] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 484.982238][T21575] unknown channel width for channel at 909000KHz? [ 484.992525][T21575] unknown channel width for channel at 909000KHz? [ 485.005306][T21575] unknown channel width for channel at 909000KHz? [ 485.096930][T21580] netlink: 404 bytes leftover after parsing attributes in process `syz.4.4536'. [ 485.897162][T21623] netlink: 'syz.1.4551': attribute type 10 has an invalid length. [ 487.263436][T21674] vlan2: entered allmulticast mode [ 487.290916][T21674] team0: entered allmulticast mode [ 487.303538][T21674] team_slave_0: entered allmulticast mode [ 487.310806][T21674] team_slave_1: entered allmulticast mode [ 487.324397][T21674] team0: Device vlan2 is already an upper device of the team interface [ 487.404206][T21679] pim6reg: entered allmulticast mode [ 487.420806][T21679] pim6reg: left allmulticast mode [ 487.860831][T21700] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 488.015906][T21706] netlink: 'syz.1.4573': attribute type 2 has an invalid length. [ 488.427494][T21712] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 489.875762][T21768] __nla_validate_parse: 11 callbacks suppressed [ 489.875785][T21768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4592'. [ 490.029153][T21775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.039692][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4592'. [ 490.111850][T21769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.202909][T21769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.234899][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.724386][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4599'. [ 490.732743][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4600'. [ 490.776210][T21790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4600'. [ 490.786252][T21791] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 490.841147][T21791] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 491.064210][T21800] netlink: 'syz.0.4603': attribute type 10 has an invalid length. [ 491.081468][T21800] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 491.464272][T21811] !€ÿ: renamed from bond0 [ 491.563487][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4609'. [ 491.601040][T21814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4609'. [ 491.726934][T21819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4610'. [ 491.754825][T21820] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 492.105826][T21839] netlink: 'syz.2.4617': attribute type 179 has an invalid length. [ 492.209115][T21844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4618'. [ 492.528189][T21856] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4624'. [ 492.546119][T21859] netlink: 'syz.1.4623': attribute type 1 has an invalid length. [ 492.757923][T21859] bond6 (unregistering): Released all slaves [ 492.835871][T21860] ip6tnl1: entered promiscuous mode [ 492.861688][T21860] ip6tnl1: entered allmulticast mode [ 492.897425][T21861] ip6tnl1: entered promiscuous mode [ 492.904495][T21861] ip6tnl1: entered allmulticast mode [ 493.395404][T21887] netlink: 'syz.1.4632': attribute type 4 has an invalid length. [ 493.686910][T21892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.112066][T21928] netlink: 'syz.1.4641': attribute type 10 has an invalid length. [ 494.128455][T21928] dummy0: entered promiscuous mode [ 494.147824][T21928] bridge0: port 1(dummy0) entered blocking state [ 494.169290][T21928] bridge0: port 1(dummy0) entered disabled state [ 494.180195][T21928] dummy0: entered allmulticast mode [ 494.191571][T21928] dummy0: left allmulticast mode [ 494.202497][T21935] nft_compat: unsupported protocol 0 [ 494.240075][T21928] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 494.383992][T21944] netlink: 'syz.0.4645': attribute type 83 has an invalid length. [ 494.797510][T21965] netlink: 'syz.4.4654': attribute type 21 has an invalid length. [ 494.913503][T21970] xt_bpf: check failed: parse error [ 495.130421][T21976] __nla_validate_parse: 9 callbacks suppressed [ 495.130445][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4658'. [ 495.215745][T21982] x_tables: duplicate entry at hook 3 [ 495.330386][T21992] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.4664'. [ 495.344055][T21992] netlink: 1096 bytes leftover after parsing attributes in process `syz.0.4664'. [ 495.347047][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4665'. [ 495.387602][T21995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4667'. [ 495.565498][T21999] batman_adv: batadv0: Adding interface: dummy0 [ 495.578273][T22001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4669'. [ 495.587652][T21999] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 495.609510][T21999] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 495.928088][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 495.940088][T22026] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 496.001026][T22028] netlink: 'syz.0.4677': attribute type 10 has an invalid length. [ 496.008065][T22026] xt_TCPMSS: Only works on TCP SYN packets [ 496.182930][T22037] netlink: 34 bytes leftover after parsing attributes in process `syz.1.4680'. [ 496.253723][T22041] netlink: 'syz.0.4682': attribute type 5 has an invalid length. [ 496.365245][T22048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.579571][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4685'. [ 496.738818][T22067] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 496.804165][T22069] openvswitch: netlink: IP tunnel TTL not specified. [ 497.438178][T22105] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 497.677166][T22109] xt_CT: No such helper "netbios-ns" [ 498.220988][T22155] netlink: 'syz.4.4714': attribute type 3 has an invalid length. [ 498.258500][T22155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4714'. [ 498.402345][T22162] tap0: tun_chr_ioctl cmd 2148553947 [ 498.445166][T22162] tap0: tun_chr_ioctl cmd 1074025677 [ 498.456087][T22162] tap0: linktype set to 4 [ 498.595461][T22169] netlink: 'syz.4.4716': attribute type 11 has an invalid length. [ 498.789679][T22177] veth0_to_bond: entered allmulticast mode [ 498.818240][T22176] netlink: 'syz.1.4718': attribute type 11 has an invalid length. [ 498.838356][T22177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.927729][T22175] xt_CT: No such helper "netbios-ns" [ 499.113685][T22189] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 499.162262][T22196] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.171166][T22196] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.181433][T22196] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.190297][T22196] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.220837][T22196] vxlan0: entered promiscuous mode [ 499.231799][T22196] vxlan0: entered allmulticast mode [ 499.253719][T22200] veth0: entered promiscuous mode [ 499.267235][T22203] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 499.286239][T22199] veth0: left promiscuous mode [ 499.633088][T22225] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 499.720792][T22230] netlink: 'syz.0.4737': attribute type 4 has an invalid length. [ 499.841665][T22228] xt_CT: No such helper "netbios-ns" [ 499.980153][T22244] sctp: [Deprecated]: syz.0.4741 (pid 22244) Use of int in max_burst socket option. [ 499.980153][T22244] Use struct sctp_assoc_value instead [ 499.984439][T22243] IPVS: Unknown mcast interface: vcan0 [ 500.026123][T22245] sctp: [Deprecated]: syz.0.4741 (pid 22245) Use of int in max_burst socket option. [ 500.026123][T22245] Use struct sctp_assoc_value instead [ 500.119204][T22248] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 500.239371][T22253] tipc: Enabled bearer , priority 0 [ 500.239496][T22254] __nla_validate_parse: 11 callbacks suppressed [ 500.239516][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4744'. [ 500.248616][T22253] syzkaller0: entered promiscuous mode [ 500.308954][T22253] syzkaller0: entered allmulticast mode [ 500.672230][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'. [ 500.807563][T22251] tipc: Resetting bearer [ 500.832392][T22276] xt_CT: No such helper "netbios-ns" [ 500.906240][T22251] tipc: Disabling bearer [ 501.153300][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 501.167773][T22300] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4755'. [ 501.180780][T22304] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4757'. [ 501.188686][T22300] netlink: 'syz.2.4755': attribute type 5 has an invalid length. [ 501.452651][T22316] netlink: 'syz.1.4760': attribute type 1 has an invalid length. [ 501.468257][T22310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4760'. [ 501.485263][T22318] tipc: Enabled bearer , priority 0 [ 501.506951][T22318] syzkaller0: entered promiscuous mode [ 501.532913][T22318] syzkaller0: entered allmulticast mode [ 501.559062][T22323] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 501.584902][T22323] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 501.694459][T22318] tipc: Resetting bearer [ 501.750711][T22317] tipc: Resetting bearer [ 501.775704][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4765'. [ 501.853399][T22335] xt_CT: No such helper "netbios-ns" [ 501.892654][T22317] tipc: Disabling bearer [ 502.255946][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4774'. [ 502.271725][T22363] netlink: 'syz.3.4774': attribute type 5 has an invalid length. [ 502.326617][T22363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4774'. [ 502.428078][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4775'. [ 502.508386][T22367] netlink: 'syz.0.4775': attribute type 1 has an invalid length. [ 503.021916][T22405] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 503.042652][T22391] xt_CT: No such helper "netbios-ns" [ 503.105328][T22409] C: left promiscuous mode [ 503.110045][T22409] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 503.633852][T22443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.252971][T22472] sock: sock_set_timeout: `syz.0.4798' (pid 22472) tries to set negative timeout [ 504.463700][T22469] xt_CT: No such helper "netbios-ns" [ 504.964907][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 505.340387][T22505] __nla_validate_parse: 13 callbacks suppressed [ 505.340408][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4804'. [ 505.824103][T22483] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.835270][T22483] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.844293][T22483] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.854272][T22483] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.047951][T22483] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.057625][T22483] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.066628][T22483] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.075718][T22483] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.357886][T22495] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.367002][T22495] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.376134][T22495] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.384977][T22495] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.438027][T22496] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 506.793420][T22525] syzkaller1: entered promiscuous mode [ 506.817466][T22525] syzkaller1: entered allmulticast mode [ 506.909965][T22532] x_tables: ip_tables: osf match: only valid for protocol 6 [ 507.088777][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 507.193777][T22537] xt_CT: No such helper "netbios-ns" [ 507.488360][T22556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.058842][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'. [ 508.093178][T22606] xt_CT: No such helper "netbios-ns" [ 508.112304][T22596] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 508.113380][T22610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4830'. [ 508.140514][T22610] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4830'. [ 508.254962][T22610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4830'. [ 508.285562][T22610] 8021q: VLANs not supported on ip6_vti0 [ 508.321757][T22610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4830'. [ 508.375040][T22617] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4832'. [ 508.466106][T22623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4835'. [ 508.541182][T22631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4837'. [ 508.787828][T22641] netlink: 'syz.4.4841': attribute type 3 has an invalid length. [ 508.953704][T22653] macvlan0: left promiscuous mode [ 508.966050][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 508.983294][T22653] macvlan0: left allmulticast mode [ 509.401894][T22675] netlink: 'syz.3.4853': attribute type 12 has an invalid length. [ 509.670803][T22684] syzkaller0: entered promiscuous mode [ 509.691134][T22684] syzkaller0: entered allmulticast mode [ 509.773484][T22693] Bluetooth: MGMT ver 1.23 [ 511.354824][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 511.837275][ T5856] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 511.859760][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 512.481785][T22723] __nla_validate_parse: 12 callbacks suppressed [ 512.481807][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4869'. [ 512.770082][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4875'. [ 513.099989][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 513.401070][T22767] gre0: left promiscuous mode [ 513.439110][T22767] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 513.481406][T22769] netlink: 'syz.3.4884': attribute type 10 has an invalid length. [ 513.499661][T22769] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 513.507740][T22775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4885'. [ 513.516197][T22774] tipc: Started in network mode [ 513.535005][T22774] tipc: Node identity , cluster identity 4711 [ 513.551866][T22774] tipc: Failed to obtain node identity [ 513.574723][T22774] tipc: Enabling of bearer rejected, failed to enable media [ 514.493730][T22823] netlink: 'syz.4.4908': attribute type 10 has an invalid length. [ 514.510854][T22823] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 514.530907][T22823] batman_adv: batadv0: Removing interface: team0 [ 514.563840][T22823] team0: Port device wlan1 added [ 515.639632][T22879] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4933'. [ 515.677740][T22881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4934'. [ 515.854878][T22888] netlink: 'syz.3.4936': attribute type 3 has an invalid length. [ 515.888489][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 515.930867][T22888] netlink: 'syz.3.4936': attribute type 3 has an invalid length. [ 515.961795][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 516.237569][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4945'. [ 516.265362][T22905] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4945'. [ 516.451852][T22913] openvswitch: netlink: Message has 20 unknown bytes. [ 516.472102][T22913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.653721][T22927] netlink: 'syz.0.4955': attribute type 6 has an invalid length. [ 516.667005][T22928] netlink: 'syz.1.4956': attribute type 1 has an invalid length. [ 518.172385][T22980] tipc: Started in network mode [ 518.195348][T22980] tipc: Node identity ac14142f, cluster identity 4711 [ 518.209142][T22983] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 518.233243][T22980] tipc: New replicast peer: 0.0.0.0 [ 518.245587][T22980] tipc: Enabled bearer , priority 10 [ 518.268416][T22984] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 518.302826][T22993] __nla_validate_parse: 8 callbacks suppressed [ 518.302846][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4981'. [ 518.584487][T23005] : renamed from veth0_vlan (while UP) [ 518.760406][T23014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4988'. [ 518.960167][T23026] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 518.991378][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'. [ 519.255058][ T8818] tipc: Node number set to 2886997039 [ 519.765109][T23053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'. [ 519.938194][T23059] netlink: 'syz.0.5003': attribute type 18 has an invalid length. [ 519.987038][T23059] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.995544][T23059] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.003780][T23059] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.012497][T23059] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.073991][T23063] tipc: Enabled bearer , priority 0 [ 520.082071][T23063] syzkaller0: entered promiscuous mode [ 520.095500][T23063] syzkaller0: entered allmulticast mode [ 520.192617][T23063] tipc: Resetting bearer [ 520.316587][T23062] tipc: Resetting bearer [ 520.375620][T23062] tipc: Disabling bearer [ 520.418735][T23084] netlink: 'syz.4.5009': attribute type 11 has an invalid length. [ 521.081731][T23110] netlink: 'syz.3.5020': attribute type 1 has an invalid length. [ 521.176204][T23111] bond3: (slave gretap2): making interface the new active one [ 521.185370][T23111] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 521.218348][T23115] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5019'. [ 521.613433][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5027'. [ 521.888020][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5031'. [ 522.123186][T23155] pim6reg1: entered promiscuous mode [ 522.132997][T23155] pim6reg1: entered allmulticast mode [ 522.545637][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5036'. [ 523.196064][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5043'. [ 523.487383][T23194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 523.504173][T23193] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.5046'. [ 523.692574][T23204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5051'. [ 523.765183][T23213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5050'. [ 523.777236][T23213] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5050'. [ 523.812421][T23218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5053'. [ 523.823699][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5053'. [ 524.265912][T23232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5057'. [ 525.067817][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5066'. [ 525.078204][T23258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5066'. [ 525.206993][T23263] netlink: 'syz.4.5067': attribute type 4 has an invalid length. [ 525.277758][T23266] tipc: Started in network mode [ 525.291218][T23266] tipc: Node identity c686e5492c62, cluster identity 4711 [ 525.305241][T23266] tipc: Enabled bearer , priority 0 [ 525.326159][T23269] netlink: 'syz.0.5070': attribute type 8 has an invalid length. [ 525.331056][T23270] syzkaller0: entered promiscuous mode [ 525.350075][T23270] syzkaller0: entered allmulticast mode [ 525.473260][T23266] tipc: Resetting bearer [ 525.500968][T23265] tipc: Resetting bearer [ 525.563133][T23265] tipc: Disabling bearer [ 525.800011][T23289] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 525.865438][T23291] netlink: 'syz.1.5077': attribute type 13 has an invalid length. [ 526.038610][T23301] netlink: 'syz.3.5082': attribute type 1 has an invalid length. [ 526.073302][T23304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.194250][T23310] macvlan3: entered promiscuous mode [ 526.247402][T23310] macvlan3: entered allmulticast mode [ 526.279698][T23310] bond4: entered promiscuous mode [ 526.292553][T23310] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 526.309501][T23310] bond4: left promiscuous mode [ 527.093010][T23357] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 527.279363][T23363] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 527.783343][T23393] netlink: 'syz.1.5107': attribute type 10 has an invalid length. [ 528.210335][T23425] netlink: 'syz.4.5112': attribute type 1 has an invalid length. [ 528.918076][T23426] bond0 (unregistering): Released all slaves [ 529.080787][T23442] __nla_validate_parse: 10 callbacks suppressed [ 529.080810][T23442] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5115'. [ 529.132618][T23442] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5115'. [ 529.156137][T23442] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5115'. [ 529.382086][T12309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.417006][T12309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.586234][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5122'. [ 529.659466][T23480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5125'. [ 529.971439][T23497] netlink: 'syz.2.5128': attribute type 1 has an invalid length. [ 530.088574][T23497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.163450][T23503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5129'. [ 530.201789][T23500] vlan2: entered allmulticast mode [ 530.224953][T23500] geneve1: entered allmulticast mode [ 530.225171][T23507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5129'. [ 530.278512][T23500] bond0: (slave vlan2): making interface the new active one [ 530.313137][T23500] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 530.392575][T23513] netlink: 576 bytes leftover after parsing attributes in process `syz.1.5129'. [ 530.396429][T23514] netlink: 'syz.4.5131': attribute type 10 has an invalid length. [ 530.465465][T23514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.503977][T23514] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 530.649051][T23519] tipc: Enabling of bearer rejected, failed to enable media [ 530.668613][T23519] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5134'. [ 530.678300][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5134'. [ 530.947141][T23539] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 530.949414][T23537] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 531.386533][T23561] tipc: Enabled bearer , priority 0 [ 531.394269][T23561] syzkaller0: entered promiscuous mode [ 531.400076][T23561] syzkaller0: entered allmulticast mode [ 531.421553][T23563] unsupported nlmsg_type 40 [ 531.431103][T23561] tipc: Resetting bearer [ 531.442964][T23560] tipc: Resetting bearer [ 531.471674][T23560] tipc: Disabling bearer [ 532.166299][T23590] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 532.800728][ T5856] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 533.117565][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 534.250846][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 534.895976][T23616] netlink: 'syz.1.5168': attribute type 10 has an invalid length. [ 534.926481][T23616] dummy0: left promiscuous mode [ 535.166493][T23624] __nla_validate_parse: 7 callbacks suppressed [ 535.166517][T23624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5171'. [ 535.416269][T23638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.120656][T23668] dvmrp0: entered allmulticast mode [ 536.148588][T23668] dvmrp0: left allmulticast mode [ 536.596396][T23690] tipc: Enabled bearer , priority 0 [ 536.616491][T23690] syzkaller0: entered promiscuous mode [ 536.622585][T23690] syzkaller0: entered allmulticast mode [ 536.757852][T23690] tipc: Resetting bearer [ 536.805845][T23689] tipc: Resetting bearer [ 536.868570][T23689] tipc: Disabling bearer [ 537.052007][T23724] netlink: 'syz.2.5209': attribute type 16 has an invalid length. [ 537.067760][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5207'. [ 537.081634][T23724] netlink: 'syz.2.5209': attribute type 17 has an invalid length. [ 537.254081][T23739] No such timeout policy "syz0" [ 537.366928][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 537.378926][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 537.388922][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 537.435881][T23742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 537.457301][T23742] netlink: 'syz.0.5212': attribute type 11 has an invalid length. [ 537.483914][T23743] netlink: 'syz.0.5212': attribute type 11 has an invalid length. [ 537.722437][T23762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5219'. [ 537.818705][T23762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5219'. [ 538.564352][T23809] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5229'. [ 538.608237][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5229'. [ 538.796650][T23824] netlink: 'syz.3.5235': attribute type 10 has an invalid length. [ 538.830615][T23824] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 539.155015][T23841] sch_fq: defrate 0 ignored. [ 539.161184][T23840] sch_fq: defrate 0 ignored. [ 539.163349][T23839] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 539.298763][T23845] netlink: 'syz.2.5240': attribute type 10 has an invalid length. [ 539.307203][T23846] netlink: 'syz.2.5240': attribute type 10 has an invalid length. [ 539.454984][T23852] FAULT_INJECTION: forcing a failure. [ 539.454984][T23852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.510815][T23852] CPU: 0 UID: 0 PID: 23852 Comm: syz.0.5243 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 539.510852][T23852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 539.510876][T23852] Call Trace: [ 539.510885][T23852] [ 539.510896][T23852] dump_stack_lvl+0x189/0x250 [ 539.510929][T23852] ? __pfx____ratelimit+0x10/0x10 [ 539.510953][T23852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.510980][T23852] ? __pfx__printk+0x10/0x10 [ 539.511010][T23852] ? __might_fault+0xb0/0x130 [ 539.511055][T23852] should_fail_ex+0x414/0x560 [ 539.511083][T23852] _copy_from_user+0x2d/0xb0 [ 539.511115][T23852] ___sys_sendmsg+0x158/0x2a0 [ 539.511153][T23852] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.511230][T23852] ? __fget_files+0x2a/0x420 [ 539.511249][T23852] ? __fget_files+0x3a0/0x420 [ 539.511281][T23852] __sys_sendmmsg+0x227/0x430 [ 539.511323][T23852] ? __pfx___sys_sendmmsg+0x10/0x10 [ 539.511354][T23852] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 539.511412][T23852] ? ksys_write+0x22a/0x250 [ 539.511445][T23852] ? __pfx_ksys_write+0x10/0x10 [ 539.511483][T23852] __x64_sys_sendmmsg+0xa0/0xc0 [ 539.511518][T23852] do_syscall_64+0xfa/0x3b0 [ 539.511541][T23852] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.511563][T23852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.511584][T23852] ? clear_bhb_loop+0x60/0xb0 [ 539.511611][T23852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.511637][T23852] RIP: 0033:0x7f88d9d8e9a9 [ 539.511657][T23852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.511675][T23852] RSP: 002b:00007f88dab6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 539.511705][T23852] RAX: ffffffffffffffda RBX: 00007f88d9fb5fa0 RCX: 00007f88d9d8e9a9 [ 539.511721][T23852] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000003 [ 539.511735][T23852] RBP: 00007f88dab6b090 R08: 0000000000000000 R09: 0000000000000000 [ 539.511748][T23852] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.511761][T23852] R13: 0000000000000000 R14: 00007f88d9fb5fa0 R15: 00007ffd50a3e7d8 [ 539.511796][T23852] [ 539.883930][T23860] xt_CT: No such helper "snmp" [ 540.000050][T23865] !: renamed from dummy0 [ 540.126937][T23877] xt_connbytes: Forcing CT accounting to be enabled [ 540.333369][T23896] FAULT_INJECTION: forcing a failure. [ 540.333369][T23896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.354433][T23896] CPU: 0 UID: 0 PID: 23896 Comm: syz.3.5258 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 540.354466][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 540.354481][T23896] Call Trace: [ 540.354491][T23896] [ 540.354500][T23896] dump_stack_lvl+0x189/0x250 [ 540.354532][T23896] ? __pfx____ratelimit+0x10/0x10 [ 540.354562][T23896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.354587][T23896] ? __pfx__printk+0x10/0x10 [ 540.354640][T23896] should_fail_ex+0x414/0x560 [ 540.354668][T23896] _copy_from_user+0x2d/0xb0 [ 540.354700][T23896] __copy_msghdr+0x3c5/0x5b0 [ 540.354739][T23896] ___sys_sendmsg+0x1a5/0x2a0 [ 540.354775][T23896] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.354850][T23896] ? __fget_files+0x2a/0x420 [ 540.354870][T23896] ? __fget_files+0x3a0/0x420 [ 540.354903][T23896] __sys_sendmmsg+0x227/0x430 [ 540.354944][T23896] ? __pfx___sys_sendmmsg+0x10/0x10 [ 540.354975][T23896] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 540.355030][T23896] ? ksys_write+0x22a/0x250 [ 540.355063][T23896] ? __pfx_ksys_write+0x10/0x10 [ 540.355089][T23896] ? rcu_is_watching+0x15/0xb0 [ 540.355122][T23896] __x64_sys_sendmmsg+0xa0/0xc0 [ 540.355157][T23896] do_syscall_64+0xfa/0x3b0 [ 540.355180][T23896] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.355202][T23896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.355224][T23896] ? clear_bhb_loop+0x60/0xb0 [ 540.355251][T23896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.355273][T23896] RIP: 0033:0x7efd7578e9a9 [ 540.355293][T23896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.355312][T23896] RSP: 002b:00007efd765b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 540.355334][T23896] RAX: ffffffffffffffda RBX: 00007efd759b5fa0 RCX: 00007efd7578e9a9 [ 540.355351][T23896] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000003 [ 540.355364][T23896] RBP: 00007efd765b0090 R08: 0000000000000000 R09: 0000000000000000 [ 540.355378][T23896] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.355391][T23896] R13: 0000000000000000 R14: 00007efd759b5fa0 R15: 00007ffffe705cb8 [ 540.355424][T23896] [ 540.459684][T23900] __nla_validate_parse: 5 callbacks suppressed [ 540.459722][T23900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5259'. [ 540.699357][T23910] netlink: 'syz.3.5261': attribute type 1 has an invalid length. [ 540.718695][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5261'. [ 540.728641][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5261'. [ 540.813724][T23913] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 541.132949][T23926] netlink: 'syz.0.5266': attribute type 10 has an invalid length. [ 541.162696][T23926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5266'. [ 541.204093][T23926] batadv0: entered promiscuous mode [ 541.239010][T23926] batadv0: entered allmulticast mode [ 541.246117][T23926] bridge0: port 1(batadv0) entered blocking state [ 541.255740][T23926] bridge0: port 1(batadv0) entered disabled state [ 541.267373][T23926] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 541.443345][T23940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5271'. [ 542.296659][T23985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'. [ 542.412199][T23989] netlink: 'syz.4.5286': attribute type 5 has an invalid length. [ 542.434150][T23992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5285'. [ 542.546941][T23994] netlink: 'syz.2.5287': attribute type 11 has an invalid length. [ 542.622429][T23994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5287'. [ 542.624415][T23999] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 542.642704][T23998] syzkaller1: entered promiscuous mode [ 542.648775][T23999] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 542.668110][T23998] syzkaller1: entered allmulticast mode [ 542.694815][T23994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5287'. [ 542.782207][T24008] openvswitch: netlink: Key type 267 is out of range max 32 [ 542.806060][T24008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5293'. [ 542.859275][T24008] bridge0: port 1(vlan2) entered blocking state [ 542.873726][T24008] bridge0: port 1(vlan2) entered disabled state [ 542.882245][T24008] vlan2: entered allmulticast mode [ 542.888388][T24008] bridge0: entered allmulticast mode [ 542.900077][T24008] vlan2: left allmulticast mode [ 542.905746][T24008] bridge0: left allmulticast mode [ 543.122078][T24023] macsec1: entered promiscuous mode [ 543.132948][T24023] bridge0: entered promiscuous mode [ 543.422546][T24034] tipc: Enabled bearer , priority 0 [ 543.436709][T24034] syzkaller0: entered promiscuous mode [ 543.442263][T24034] syzkaller0: entered allmulticast mode [ 543.455400][T24036] nbd: nbd0 already in use [ 543.602924][T24034] tipc: Resetting bearer [ 543.653408][T24033] tipc: Resetting bearer [ 543.682024][T24044] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 543.736295][T24033] tipc: Disabling bearer [ 543.843295][T24046] bond0: (slave vlan2): Releasing active interface [ 543.864394][T24049] xt_CT: No such helper "pptp" [ 543.880764][T24054] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 543.920179][T24053] vlan0: entered promiscuous mode [ 543.991084][T24053] team0: Port device vlan0 added [ 544.039085][T24055] tipc: Enabled bearer , priority 0 [ 544.153943][T24064] batman_adv: batadv0: adding TT local entry c6:0c:f9:bb:9b:5f to non-existent VLAN 1303 [ 544.339272][T24074] syzkaller1: entered promiscuous mode [ 544.365748][T24074] syzkaller1: entered allmulticast mode [ 544.723022][T24090] syz.4.5317: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 544.752623][T24090] CPU: 1 UID: 0 PID: 24090 Comm: syz.4.5317 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 544.752656][T24090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.752670][T24090] Call Trace: [ 544.752679][T24090] [ 544.752689][T24090] dump_stack_lvl+0x189/0x250 [ 544.752725][T24090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.752752][T24090] ? __pfx__printk+0x10/0x10 [ 544.752783][T24090] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 544.752812][T24090] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 544.752844][T24090] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 544.752877][T24090] warn_alloc+0x214/0x310 [ 544.752905][T24090] ? __pfx_warn_alloc+0x10/0x10 [ 544.752938][T24090] ? __get_vm_area_node+0x28f/0x300 [ 544.752971][T24090] ? xskq_create+0xbf/0x170 [ 544.752999][T24090] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 544.753155][T24090] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.753203][T24090] ? __kasan_kmalloc+0x93/0xb0 [ 544.753295][T24090] vmalloc_user_noprof+0xad/0xf0 [ 544.753331][T24090] ? xskq_create+0xbf/0x170 [ 544.753355][T24090] xskq_create+0xbf/0x170 [ 544.753381][T24090] xsk_init_queue+0xb0/0x110 [ 544.753405][T24090] xsk_setsockopt+0x4de/0x710 [ 544.753443][T24090] ? __pfx_xsk_setsockopt+0x10/0x10 [ 544.753482][T24090] ? __fget_files+0x2a/0x420 [ 544.753543][T24090] ? aa_sock_opt_perm+0x74/0x110 [ 544.753574][T24090] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 544.753601][T24090] ? __pfx_xsk_setsockopt+0x10/0x10 [ 544.753635][T24090] do_sock_setsockopt+0x17c/0x1b0 [ 544.753673][T24090] __x64_sys_setsockopt+0x13f/0x1b0 [ 544.753713][T24090] do_syscall_64+0xfa/0x3b0 [ 544.753736][T24090] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.753758][T24090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.753779][T24090] ? clear_bhb_loop+0x60/0xb0 [ 544.753806][T24090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.753827][T24090] RIP: 0033:0x7fe0fe38e9a9 [ 544.753846][T24090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.753866][T24090] RSP: 002b:00007fe0ff22b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.753889][T24090] RAX: ffffffffffffffda RBX: 00007fe0fe5b5fa0 RCX: 00007fe0fe38e9a9 [ 544.753905][T24090] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 544.753917][T24090] RBP: 00007fe0fe410d69 R08: 0000000000000004 R09: 0000000000000000 [ 544.753931][T24090] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 544.753945][T24090] R13: 0000000000000000 R14: 00007fe0fe5b5fa0 R15: 00007ffcc352fc38 [ 544.753980][T24090] [ 544.754488][T24090] Mem-Info: [ 545.032276][T24090] active_anon:7984 inactive_anon:0 isolated_anon:0 [ 545.032276][T24090] active_file:1673 inactive_file:40013 isolated_file:0 [ 545.032276][T24090] unevictable:768 dirty:70 writeback:0 [ 545.032276][T24090] slab_reclaimable:12015 slab_unreclaimable:120485 [ 545.032276][T24090] mapped:29232 shmem:1361 pagetables:1197 [ 545.032276][T24090] sec_pagetables:0 bounce:0 [ 545.032276][T24090] kernel_misc_reclaimable:0 [ 545.032276][T24090] free:1297721 free_pcp:11599 free_cma:0 [ 545.079594][T24090] Node 0 active_anon:31936kB inactive_anon:0kB active_file:6692kB inactive_file:159848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116928kB dirty:280kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14336kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 545.114232][T24090] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 545.146906][T24090] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 545.193254][T24090] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 545.200414][T24090] Node 0 DMA32 free:1260800kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31700kB inactive_anon:0kB active_file:6692kB inactive_file:158276kB unevictable:1536kB writepending:208kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:38680kB local_pcp:19316kB free_cma:0kB [ 545.261462][T24090] lowmem_reserve[]: 0 0 1 1 1 [ 545.277828][T24090] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 545.358105][T24090] lowmem_reserve[]: 0 0 0 0 0 [ 545.383366][T24090] Node 1 Normal free:3914624kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8128kB local_pcp:4160kB free_cma:0kB [ 545.453726][T24090] lowmem_reserve[]: 0 0 0 0 0 [ 545.470806][T24090] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 545.505439][T24117] __nla_validate_parse: 6 callbacks suppressed [ 545.505461][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'. [ 545.538102][T24090] Node 0 DMA32: 1713*4kB (UME) 653*8kB (UM) 291*16kB (UM) 331*32kB (UM) 179*64kB (UME) 77*128kB (UME) 39*256kB (UME) 18*512kB (UME) 9*1024kB (U) 6*2048kB (UME) 286*4096kB (UM) = 1260796kB [ 545.551145][T24117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'. [ 545.559405][T24090] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 545.611271][T24090] Node 1 Normal: 144*4kB (UME) 50*8kB (UME) 31*16kB (UME) 208*32kB (UME) 69*64kB (UME) 15*128kB (UME) 7*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3914624kB [ 545.652170][T24090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.663346][T24090] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 545.696647][T24090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.706962][T24090] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 545.769423][T24090] 43045 total pagecache pages [ 545.774214][T24090] 0 pages in swap cache [ 545.794106][T24090] Free swap = 124996kB [ 545.819913][T24090] Total swap = 124996kB [ 545.824257][T24090] 2097051 pages RAM [ 545.831893][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 545.846087][T24090] 0 pages HighMem/MovableOnly [ 545.856648][T24090] 425384 pages reserved [ 545.870976][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5333'. [ 545.877521][T24090] 0 pages cma reserved [ 545.890512][T24138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5335'. [ 545.903944][T24132] netlink: 'syz.2.5333': attribute type 14 has an invalid length. [ 545.921156][T24132] netlink: 'syz.2.5333': attribute type 13 has an invalid length. [ 546.443652][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'. [ 546.474164][T24172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5346'. [ 546.669360][T24179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5347'. [ 546.953917][T24193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5352'. [ 546.998747][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5353'. [ 547.184173][T24204] netlink: 'syz.3.5355': attribute type 7 has an invalid length. [ 547.444479][T24218] netlink: 'syz.2.5361': attribute type 29 has an invalid length. [ 547.485621][T24218] netlink: 'syz.2.5361': attribute type 29 has an invalid length. [ 547.727877][T24241] Cannot find add_set index 4 as target [ 547.816677][T24249] netlink: 'syz.3.5368': attribute type 10 has an invalid length. [ 547.989478][T24249] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 548.552504][T24276] tipc: Enabled bearer , priority 10 [ 548.690409][T24284] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20003 [ 548.732076][T24285] netlink: 'syz.1.5381': attribute type 33 has an invalid length. [ 548.842850][T24291] netlink: 'syz.4.5385': attribute type 10 has an invalid length. [ 548.874810][T24291] team0: Device veth0_vlan is of different type [ 549.391019][T24321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.665919][T22491] tipc: Node number set to 342790752 [ 549.902402][T24352] veth0: entered promiscuous mode [ 549.946768][T24355] veth0: left promiscuous mode [ 550.894473][T24402] xt_bpf: check failed: parse error [ 551.261749][T24419] netlink: 'syz.2.5423': attribute type 1 has an invalid length. [ 551.275195][T24419] __nla_validate_parse: 10 callbacks suppressed [ 551.275217][T24419] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5423'. [ 551.312261][T24419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5423'. [ 551.559557][T24429] netlink: 'syz.2.5428': attribute type 3 has an invalid length. [ 551.571676][T24429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5428'. [ 551.595606][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 552.192310][T24464] bridge5: entered promiscuous mode [ 552.209397][T24464] bridge5: entered allmulticast mode [ 553.022340][T24509] netlink: 'syz.1.5453': attribute type 1 has an invalid length. [ 553.035599][T24509] netlink: 'syz.1.5453': attribute type 1 has an invalid length. [ 553.074096][T24509] tipc: Enabled bearer , priority 0 [ 553.097234][T24509] syzkaller0: entered promiscuous mode [ 553.115396][T24509] syzkaller0: entered allmulticast mode [ 553.202212][T24509] tipc: Resetting bearer [ 553.227742][T24508] tipc: Resetting bearer [ 553.288351][T24508] tipc: Disabling bearer [ 553.829878][T24543] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5464'. [ 553.872901][T24546] netlink: 'syz.1.5465': attribute type 10 has an invalid length. [ 555.891361][T24545] vlan3: entered allmulticast mode [ 555.896655][T24545] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 555.918413][T24547] veth0: entered promiscuous mode [ 555.947971][T24552] veth0: left promiscuous mode [ 555.984212][T24566] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5468'. [ 556.028139][T24566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5468'. [ 556.152983][T24571] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 556.230386][T24571] gtp0: entered promiscuous mode [ 556.730147][T24601] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 556.799266][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5480'. [ 557.002833][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5483'. [ 557.031912][T24612] netlink: 'syz.4.5484': attribute type 1 has an invalid length. [ 557.062905][T24612] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5484'. [ 557.122745][T24612] nbd: couldn't find device at index 1048576 [ 557.132858][T24616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5482'. [ 557.342199][T24627] syzkaller1: entered promiscuous mode [ 557.350281][T24628] netlink: 'syz.2.5488': attribute type 10 has an invalid length. [ 557.358464][T24627] syzkaller1: entered allmulticast mode [ 557.369029][T24630] Bluetooth: MGMT ver 1.23 [ 557.768069][T24647] netlink: 'syz.2.5496': attribute type 29 has an invalid length. [ 557.785102][T24648] x_tables: unsorted underflow at hook 2 [ 557.792090][T24647] netlink: 'syz.2.5496': attribute type 29 has an invalid length. [ 558.344383][T24665] netlink: 'syz.1.5502': attribute type 21 has an invalid length. [ 558.690222][T24683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5506'. [ 559.747455][T24715] netlink: 'syz.2.5517': attribute type 32 has an invalid length. [ 559.772812][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5517'. [ 559.881779][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'. [ 559.891408][T24714] syzkaller0: entered promiscuous mode [ 559.899575][T24721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'. [ 559.905659][T24714] syzkaller0: entered allmulticast mode [ 559.917465][T24715] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 560.015238][T24729] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.210773][T24737] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 562.646771][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5525'. [ 562.703174][T24753] netlink: 'syz.4.5528': attribute type 1 has an invalid length. [ 562.833386][T24753] bond3: (slave bridge35): making interface the new active one [ 562.881421][T24753] bond3: (slave bridge35): Enslaving as an active interface with an up link [ 562.907610][T24762] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5531'. [ 562.991546][T24762] dvmrp0: entered allmulticast mode [ 563.130971][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5533'. [ 563.440980][T24782] netlink: 'syz.4.5538': attribute type 11 has an invalid length. [ 563.449218][T24782] netlink: 'syz.4.5538': attribute type 11 has an invalid length. [ 563.458043][T24782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5538'. [ 563.525214][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5540'. [ 563.728422][T24794] netlink: 'syz.4.5542': attribute type 3 has an invalid length. [ 564.064308][T24803] pim6reg: entered allmulticast mode [ 564.157796][T24813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5548'. [ 564.183982][T24813] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 564.274076][T24813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.294261][T24821] netlink: 'syz.0.5550': attribute type 1 has an invalid length. [ 564.545101][T24835] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5556'. [ 564.571525][T24837] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 565.060706][T24867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5564'. [ 565.079506][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5565'. [ 565.091279][T24867] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5564'. [ 565.135423][T24867] netlink: 'syz.0.5564': attribute type 5 has an invalid length. [ 565.146966][T24869] 8021q: adding VLAN 0 to HW filter on device bond6 [ 565.163543][T24870] macvlan0: entered promiscuous mode [ 565.169721][T24870] macvlan0: entered allmulticast mode [ 565.177873][T24870] bond6: (slave macvlan0): Opening slave failed [ 567.200988][T24910] tipc: Enabled bearer , priority 0 [ 567.229829][T24911] tipc: Enabling of bearer rejected, already enabled [ 567.298291][T24913] syzkaller0: entered promiscuous mode [ 567.322056][T24913] syzkaller0: entered allmulticast mode [ 567.371921][T24909] tipc: Resetting bearer [ 567.452390][T24909] tipc: Disabling bearer [ 567.698213][T24936] __nla_validate_parse: 6 callbacks suppressed [ 567.698234][T24936] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5584'. [ 567.709813][T24938] netlink: 'syz.2.5583': attribute type 1 has an invalid length. [ 567.773213][T24942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5583'. [ 568.274122][T24965] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 568.281869][T24965] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 568.386770][T24967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5594'. [ 569.267678][T25016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5612'. [ 569.331153][T25016] 8021q: adding VLAN 0 to HW filter on device bond9 [ 569.361619][T25020] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 569.428140][T25016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5612'. [ 569.477643][T25016] gretap1: entered promiscuous mode [ 569.540477][T25016] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 569.703066][T25034] netlink: 'syz.4.5615': attribute type 15 has an invalid length. [ 569.718716][T25034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5615'. [ 569.793546][T25039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5617'. [ 570.103179][T25048] vlan2: entered allmulticast mode [ 570.439547][T25057] openvswitch: netlink: IP tunnel dst address not specified [ 570.533988][T25065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.704188][T25071] x_tables: duplicate underflow at hook 3 [ 570.803546][T25075] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 570.835754][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5632'. [ 570.911161][T25086] x_tables: duplicate underflow at hook 1 [ 570.995041][T25086] 8021q: VLANs not supported on sit0 [ 571.101839][T25096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.216538][T25102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5639'. [ 571.227672][T25102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5639'. [ 571.411662][T25112] FAULT_INJECTION: forcing a failure. [ 571.411662][T25112] name failslab, interval 1, probability 0, space 0, times 1 [ 571.426128][T25112] CPU: 1 UID: 0 PID: 25112 Comm: syz.3.5643 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 571.426176][T25112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.426199][T25112] Call Trace: [ 571.426213][T25112] [ 571.426228][T25112] dump_stack_lvl+0x189/0x250 [ 571.426277][T25112] ? __pfx____ratelimit+0x10/0x10 [ 571.426305][T25112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.426332][T25112] ? __pfx__printk+0x10/0x10 [ 571.426368][T25112] ? __pfx___might_resched+0x10/0x10 [ 571.426392][T25112] ? fs_reclaim_acquire+0x7d/0x100 [ 571.426419][T25112] should_fail_ex+0x414/0x560 [ 571.426447][T25112] should_failslab+0xa8/0x100 [ 571.426481][T25112] kmem_cache_alloc_noprof+0x73/0x3c0 [ 571.426510][T25112] ? alloc_empty_file+0x55/0x1d0 [ 571.426538][T25112] alloc_empty_file+0x55/0x1d0 [ 571.426562][T25112] path_openat+0x107/0x3830 [ 571.426586][T25112] ? arch_stack_walk+0xfc/0x150 [ 571.426647][T25112] ? kasan_save_track+0x4f/0x80 [ 571.426673][T25112] ? kasan_save_track+0x3e/0x80 [ 571.426698][T25112] ? __kasan_slab_alloc+0x6c/0x80 [ 571.426726][T25112] ? getname_flags+0xb8/0x540 [ 571.426746][T25112] ? __pfx_path_openat+0x10/0x10 [ 571.426769][T25112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.426816][T25112] do_filp_open+0x1fa/0x410 [ 571.426840][T25112] ? __lock_acquire+0xab9/0xd20 [ 571.426866][T25112] ? __pfx_do_filp_open+0x10/0x10 [ 571.426919][T25112] ? _raw_spin_unlock+0x28/0x50 [ 571.426951][T25112] ? alloc_fd+0x64c/0x6c0 [ 571.426997][T25112] do_sys_openat2+0x121/0x1c0 [ 571.427030][T25112] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.427062][T25112] ? ksys_write+0x22a/0x250 [ 571.427093][T25112] ? __pfx_ksys_write+0x10/0x10 [ 571.427119][T25112] ? rcu_is_watching+0x15/0xb0 [ 571.427150][T25112] __x64_sys_openat+0x138/0x170 [ 571.427180][T25112] do_syscall_64+0xfa/0x3b0 [ 571.427203][T25112] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.427225][T25112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.427245][T25112] ? clear_bhb_loop+0x60/0xb0 [ 571.427272][T25112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.427293][T25112] RIP: 0033:0x7efd7578e9a9 [ 571.427312][T25112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.427330][T25112] RSP: 002b:00007efd765b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.427353][T25112] RAX: ffffffffffffffda RBX: 00007efd759b5fa0 RCX: 00007efd7578e9a9 [ 571.427368][T25112] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 571.427383][T25112] RBP: 00007efd765b0090 R08: 0000000000000000 R09: 0000000000000000 [ 571.427396][T25112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.427408][T25112] R13: 0000000000000000 R14: 00007efd759b5fa0 R15: 00007ffffe705cb8 [ 571.427442][T25112] [ 571.890218][T25121] xt_connbytes: Forcing CT accounting to be enabled [ 571.898474][T25121] --map-set only usable from mangle table [ 572.546228][T25152] netlink: 'syz.2.5655': attribute type 5 has an invalid length. [ 572.716024][T25162] __nla_validate_parse: 13 callbacks suppressed [ 572.716046][T25162] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5659'. [ 573.854002][T25217] netlink: 'syz.0.5677': attribute type 1 has an invalid length. [ 573.874775][T25217] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5677'. [ 573.895000][T25221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.951913][T25217] netlink: 'syz.0.5677': attribute type 8 has an invalid length. [ 574.000103][T25217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5677'. [ 574.602246][T25252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5689'. [ 574.852754][T25263] netlink: 'syz.4.5693': attribute type 1 has an invalid length. [ 574.869088][T25263] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5693'. [ 575.011556][T25269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5694'. [ 575.273460][T25289] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5702'. [ 575.319515][T25291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.476703][T25298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5704'. [ 575.491292][T25300] netlink: 'syz.4.5705': attribute type 3 has an invalid length. [ 575.539670][T25302] x_tables: duplicate underflow at hook 1 [ 575.719000][T25310] netlink: 'syz.0.5709': attribute type 4 has an invalid length. [ 575.923193][T25321] openvswitch: netlink: Missing key (keys=40, expected=80) [ 576.582460][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5725'. [ 577.527141][T25391] netlink: 'syz.4.5736': attribute type 4 has an invalid length. [ 577.770271][T25405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5739'. [ 578.180029][T25423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5744'. [ 578.570580][T25436] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 578.687503][T25439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 578.810640][T25442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 578.824811][T25450] netlink: 'syz.3.5751': attribute type 23 has an invalid length. [ 579.227640][T25473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5759'. [ 579.251047][T25471] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 579.281128][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'. [ 579.290554][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5760'. [ 579.306345][T25473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5759'. [ 579.443555][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.475593][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.094143][T25507] team0: Device gtp1 is of different type [ 580.141584][T25510] FAULT_INJECTION: forcing a failure. [ 580.141584][T25510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.219624][T25510] CPU: 1 UID: 0 PID: 25510 Comm: syz.3.5775 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 580.219657][T25510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.219671][T25510] Call Trace: [ 580.219679][T25510] [ 580.219688][T25510] dump_stack_lvl+0x189/0x250 [ 580.219720][T25510] ? __pfx____ratelimit+0x10/0x10 [ 580.219743][T25510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.219769][T25510] ? __pfx__printk+0x10/0x10 [ 580.219799][T25510] ? __might_fault+0xb0/0x130 [ 580.219843][T25510] should_fail_ex+0x414/0x560 [ 580.219871][T25510] _copy_from_user+0x2d/0xb0 [ 580.219902][T25510] ___sys_sendmsg+0x158/0x2a0 [ 580.219940][T25510] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.220027][T25510] ? __might_fault+0xb0/0x130 [ 580.220061][T25510] __sys_sendmmsg+0x227/0x430 [ 580.220101][T25510] ? __pfx___sys_sendmmsg+0x10/0x10 [ 580.220131][T25510] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 580.220189][T25510] ? ksys_write+0x22a/0x250 [ 580.220221][T25510] ? __pfx_ksys_write+0x10/0x10 [ 580.220247][T25510] ? rcu_is_watching+0x15/0xb0 [ 580.220279][T25510] __x64_sys_sendmmsg+0xa0/0xc0 [ 580.220314][T25510] do_syscall_64+0xfa/0x3b0 [ 580.220335][T25510] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.220357][T25510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.220378][T25510] ? clear_bhb_loop+0x60/0xb0 [ 580.220405][T25510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.220426][T25510] RIP: 0033:0x7efd7578e9a9 [ 580.220445][T25510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.220463][T25510] RSP: 002b:00007efd765b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 580.220486][T25510] RAX: ffffffffffffffda RBX: 00007efd759b5fa0 RCX: 00007efd7578e9a9 [ 580.220502][T25510] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004 [ 580.220523][T25510] RBP: 00007efd765b0090 R08: 0000000000000000 R09: 0000000000000000 [ 580.220536][T25510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.220550][T25510] R13: 0000000000000000 R14: 00007efd759b5fa0 R15: 00007ffffe705cb8 [ 580.220585][T25510] [ 580.569116][T25516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5776'. [ 580.578484][T25516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5776'. [ 580.609562][T25516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5776'. [ 580.662765][T25516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5776'. [ 581.473673][T25565] netlink: 'syz.4.5789': attribute type 10 has an invalid length. [ 581.512977][T25565] team0: Device geneve0 is of different type [ 581.531250][T25565] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 581.739242][T25581] veth0: entered promiscuous mode [ 581.787933][T25580] veth0: left promiscuous mode [ 581.919028][T25587] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 581.928022][T25589] netlink: 'syz.3.5797': attribute type 21 has an invalid length. [ 582.023174][T25587] bond7: (slave gretap3): making interface the new active one [ 582.036361][T25587] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 582.091008][T25598] netlink: 'syz.2.5801': attribute type 10 has an invalid length. [ 582.101033][T25596] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 582.178404][T25598] : entered allmulticast mode [ 582.283208][T25598] team0: Device  is already a lower device of the team interface [ 582.554456][T25613] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 582.560449][T25619] netlink: 'syz.1.5809': attribute type 1 has an invalid length. [ 582.897684][T25638] __nla_validate_parse: 12 callbacks suppressed [ 582.897704][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5816'. [ 583.184512][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'. [ 583.290313][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5822'. [ 583.300197][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5822'. [ 583.341183][T25658] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 583.674858][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.991212][T25694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5833'. [ 584.051852][T25698] !€ÿ: renamed from bond_slave_0 (while UP) [ 584.145219][T25694] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.186474][T25694] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.214768][T25694] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.267090][T25694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.320132][T25694] geneve2: entered promiscuous mode [ 584.381562][T25694] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.411234][T25694] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.437542][T25694] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.467771][T25694] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.678493][T25706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.807018][T25719] netlink: 'syz.0.5840': attribute type 1 has an invalid length. [ 584.836899][T25720] netlink: 'syz.0.5840': attribute type 1 has an invalid length. [ 585.037637][T25735] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 585.103794][T25741] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 585.403392][T25754] syzkaller0: entered promiscuous mode [ 585.418328][T25754] syzkaller0: entered allmulticast mode [ 585.752244][T25769] netlink: 'syz.3.5852': attribute type 10 has an invalid length. [ 585.812231][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5852'. [ 586.144495][T25782] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5856'. [ 587.971521][T25770] macsec0: entered promiscuous mode [ 587.977221][T25770] team0: entered promiscuous mode [ 587.982281][T25770] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 587.991607][T25770] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 25770, name: syz.3.5852 [ 588.000764][T25770] preempt_count: 201, expected: 0 [ 588.005828][T25770] RCU nest depth: 0, expected: 0 [ 588.010794][T25770] 3 locks held by syz.3.5852/25770: [ 588.016130][T25770] #0: ffffffff8fa213b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 588.025836][T25770] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 588.034976][T25770] #2: ffff888068e50368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 588.045725][T25770] Preemption disabled at: [ 588.045738][T25770] [] dev_uc_add+0x56/0x120 [ 588.056120][T25770] CPU: 1 UID: 0 PID: 25770 Comm: syz.3.5852 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 588.056142][T25770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.056152][T25770] Call Trace: [ 588.056161][T25770] [ 588.056169][T25770] dump_stack_lvl+0x189/0x250 [ 588.056195][T25770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.056215][T25770] ? __pfx__printk+0x10/0x10 [ 588.056240][T25770] ? print_lock_name+0xde/0x100 [ 588.056260][T25770] ? dev_uc_add+0x56/0x120 [ 588.056288][T25770] __might_resched+0x495/0x610 [ 588.056311][T25770] ? dev_uc_add+0x56/0x120 [ 588.056333][T25770] ? __pfx___might_resched+0x10/0x10 [ 588.056353][T25770] ? is_printk_cpu_sync_owner+0x32/0x40 [ 588.056389][T25770] __mutex_lock+0x106/0xe80 [ 588.056417][T25770] ? team_change_rx_flags+0x38/0x220 [ 588.056441][T25770] ? __pfx___mutex_lock+0x10/0x10 [ 588.056457][T25770] ? netdev_info+0x10a/0x160 [ 588.056480][T25770] ? __sock_sendmsg+0x21c/0x270 [ 588.056501][T25770] ? __pfx_netdev_info+0x10/0x10 [ 588.056533][T25770] team_change_rx_flags+0x38/0x220 [ 588.056559][T25770] ? __pfx_team_change_rx_flags+0x10/0x10 [ 588.056579][T25770] __dev_set_promiscuity+0x531/0x740 [ 588.056604][T25770] ? __pfx_netdev_info+0x10/0x10 [ 588.056638][T25770] netif_set_promiscuity+0x50/0xe0 [ 588.056664][T25770] dev_set_promiscuity+0x126/0x260 [ 588.056690][T25770] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 588.056711][T25770] __dev_set_promiscuity+0x531/0x740 [ 588.056737][T25770] ? __hw_addr_add_ex+0x3c5/0x770 [ 588.056763][T25770] __dev_set_rx_mode+0x17c/0x260 [ 588.056788][T25770] dev_uc_add+0xc8/0x120 [ 588.056814][T25770] macsec_dev_open+0xd9/0x530 [ 588.056835][T25770] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 588.056854][T25770] ? __pfx_macsec_dev_open+0x10/0x10 [ 588.056875][T25770] ? ib_device_get_by_netdev+0x84/0x4d0 [ 588.056891][T25770] ? hsr_netdev_notify+0x29e/0xcf0 [ 588.056912][T25770] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 588.056932][T25770] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 588.056958][T25770] ? ip6_route_dev_notify+0x9a/0x5b0 [ 588.056980][T25770] ? notifier_call_chain+0x3bf/0x3e0 [ 588.057007][T25770] __dev_open+0x46d/0x880 [ 588.057031][T25770] ? __pfx___dev_open+0x10/0x10 [ 588.057060][T25770] __dev_change_flags+0x1ea/0x6d0 [ 588.057085][T25770] ? validate_linkmsg+0x765/0x950 [ 588.057104][T25770] ? __pfx___dev_change_flags+0x10/0x10 [ 588.057137][T25770] rtnl_newlink_create+0x555/0xb00 [ 588.057171][T25770] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 588.057192][T25770] ? rtnl_newlink+0x8db/0x1c70 [ 588.057215][T25770] ? __pfx___mutex_lock+0x10/0x10 [ 588.057241][T25770] ? ns_capable+0x8a/0xf0 [ 588.057262][T25770] rtnl_newlink+0x16d6/0x1c70 [ 588.057284][T25770] ? netlink_sendmsg+0x805/0xb30 [ 588.057316][T25770] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.057357][T25770] ? kasan_quarantine_put+0xdd/0x220 [ 588.057378][T25770] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.057399][T25770] ? nlmon_xmit+0xb0/0x100 [ 588.057417][T25770] ? kmem_cache_free+0x18f/0x400 [ 588.057447][T25770] ? __local_bh_enable_ip+0x12d/0x1c0 [ 588.057466][T25770] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.057483][T25770] ? __local_bh_enable_ip+0x12d/0x1c0 [ 588.057501][T25770] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 588.057522][T25770] ? __dev_queue_xmit+0x27e/0x3a70 [ 588.057549][T25770] ? __lock_acquire+0xab9/0xd20 [ 588.057587][T25770] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.057612][T25770] rtnetlink_rcv_msg+0x7cf/0xb70 [ 588.057641][T25770] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 588.057662][T25770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.057680][T25770] ? ref_tracker_free+0x63a/0x7d0 [ 588.057696][T25770] ? __copy_skb_header+0xa7/0x550 [ 588.057723][T25770] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.057750][T25770] netlink_rcv_skb+0x208/0x470 [ 588.057773][T25770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.057795][T25770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.057829][T25770] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.057850][T25770] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.057877][T25770] netlink_unicast+0x75c/0x8e0 [ 588.057906][T25770] netlink_sendmsg+0x805/0xb30 [ 588.057936][T25770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.057962][T25770] ? aa_sock_msg_perm+0x94/0x160 [ 588.057980][T25770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.057996][T25770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.058020][T25770] __sock_sendmsg+0x21c/0x270 [ 588.058040][T25770] ____sys_sendmsg+0x505/0x830 [ 588.058070][T25770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.058102][T25770] ? import_iovec+0x74/0xa0 [ 588.058127][T25770] ___sys_sendmsg+0x21f/0x2a0 [ 588.058158][T25770] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.058214][T25770] ? __fget_files+0x2a/0x420 [ 588.058227][T25770] ? __fget_files+0x3a0/0x420 [ 588.058251][T25770] __x64_sys_sendmsg+0x19b/0x260 [ 588.058280][T25770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.058314][T25770] ? rcu_is_watching+0x15/0xb0 [ 588.058337][T25770] ? do_syscall_64+0xbe/0x3b0 [ 588.058358][T25770] do_syscall_64+0xfa/0x3b0 [ 588.058375][T25770] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.058390][T25770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.058406][T25770] ? clear_bhb_loop+0x60/0xb0 [ 588.058425][T25770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.058441][T25770] RIP: 0033:0x7efd7578e9a9 [ 588.058455][T25770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.058469][T25770] RSP: 002b:00007efd7658f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.058486][T25770] RAX: ffffffffffffffda RBX: 00007efd759b6080 RCX: 00007efd7578e9a9 [ 588.058497][T25770] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000004 [ 588.058507][T25770] RBP: 00007efd75810d69 R08: 0000000000000000 R09: 0000000000000000 [ 588.058517][T25770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.058526][T25770] R13: 0000000000000000 R14: 00007efd759b6080 R15: 00007ffffe705cb8 [ 588.058551][T25770] [ 588.058571][T25770] [ 588.635663][T25770] ============================= [ 588.640525][T25770] [ BUG: Invalid wait context ] [ 588.645384][T25770] 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 Tainted: G W [ 588.654068][T25770] ----------------------------- [ 588.658923][T25770] syz.3.5852/25770 is trying to lock: [ 588.664300][T25770] ffff88805c618e00 (team->team_lock_key#9){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 588.674430][T25770] other info that might help us debug this: [ 588.680328][T25770] context-{5:5} [ 588.683803][T25770] 3 locks held by syz.3.5852/25770: [ 588.689017][T25770] #0: ffffffff8fa213b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 588.698550][T25770] #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 588.707676][T25770] #2: ffff888068e50368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 588.718357][T25770] stack backtrace: [ 588.722090][T25770] CPU: 1 UID: 0 PID: 25770 Comm: syz.3.5852 Tainted: G W 6.16.0-rc6-syzkaller-00128-g81e0db8e8398 #0 PREEMPT(full) [ 588.722117][T25770] Tainted: [W]=WARN [ 588.722124][T25770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.722135][T25770] Call Trace: [ 588.722142][T25770] [ 588.722149][T25770] dump_stack_lvl+0x189/0x250 [ 588.722176][T25770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.722198][T25770] ? __pfx__printk+0x10/0x10 [ 588.722224][T25770] ? print_lock_name+0xde/0x100 [ 588.722250][T25770] __lock_acquire+0xbcb/0xd20 [ 588.722272][T25770] ? team_change_rx_flags+0x38/0x220 [ 588.722295][T25770] lock_acquire+0x120/0x360 [ 588.722312][T25770] ? team_change_rx_flags+0x38/0x220 [ 588.722342][T25770] __mutex_lock+0x182/0xe80 [ 588.722362][T25770] ? team_change_rx_flags+0x38/0x220 [ 588.722390][T25770] ? team_change_rx_flags+0x38/0x220 [ 588.722414][T25770] ? __pfx___mutex_lock+0x10/0x10 [ 588.722433][T25770] ? netdev_info+0x10a/0x160 [ 588.722462][T25770] ? __sock_sendmsg+0x21c/0x270 [ 588.722483][T25770] ? __pfx_netdev_info+0x10/0x10 [ 588.722520][T25770] team_change_rx_flags+0x38/0x220 [ 588.722547][T25770] ? __pfx_team_change_rx_flags+0x10/0x10 [ 588.722570][T25770] __dev_set_promiscuity+0x531/0x740 [ 588.722597][T25770] ? __pfx_netdev_info+0x10/0x10 [ 588.722626][T25770] netif_set_promiscuity+0x50/0xe0 [ 588.722654][T25770] dev_set_promiscuity+0x126/0x260 [ 588.722681][T25770] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 588.722706][T25770] __dev_set_promiscuity+0x531/0x740 [ 588.722733][T25770] ? __hw_addr_add_ex+0x3c5/0x770 [ 588.722762][T25770] __dev_set_rx_mode+0x17c/0x260 [ 588.722790][T25770] dev_uc_add+0xc8/0x120 [ 588.722818][T25770] macsec_dev_open+0xd9/0x530 [ 588.722841][T25770] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 588.722862][T25770] ? __pfx_macsec_dev_open+0x10/0x10 [ 588.722884][T25770] ? ib_device_get_by_netdev+0x84/0x4d0 [ 588.722903][T25770] ? hsr_netdev_notify+0x29e/0xcf0 [ 588.722927][T25770] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 588.722950][T25770] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 588.722976][T25770] ? ip6_route_dev_notify+0x9a/0x5b0 [ 588.723000][T25770] ? notifier_call_chain+0x3bf/0x3e0 [ 588.723025][T25770] __dev_open+0x46d/0x880 [ 588.723050][T25770] ? __pfx___dev_open+0x10/0x10 [ 588.723077][T25770] __dev_change_flags+0x1ea/0x6d0 [ 588.723104][T25770] ? validate_linkmsg+0x765/0x950 [ 588.723123][T25770] ? __pfx___dev_change_flags+0x10/0x10 [ 588.723155][T25770] rtnl_newlink_create+0x555/0xb00 [ 588.723188][T25770] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 588.723212][T25770] ? rtnl_newlink+0x8db/0x1c70 [ 588.723236][T25770] ? __pfx___mutex_lock+0x10/0x10 [ 588.723260][T25770] ? ns_capable+0x8a/0xf0 [ 588.723282][T25770] rtnl_newlink+0x16d6/0x1c70 [ 588.723305][T25770] ? netlink_sendmsg+0x805/0xb30 [ 588.723337][T25770] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.723370][T25770] ? kasan_quarantine_put+0xdd/0x220 [ 588.723394][T25770] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.723415][T25770] ? nlmon_xmit+0xb0/0x100 [ 588.723436][T25770] ? kmem_cache_free+0x18f/0x400 [ 588.723465][T25770] ? __local_bh_enable_ip+0x12d/0x1c0 [ 588.723485][T25770] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.723502][T25770] ? __local_bh_enable_ip+0x12d/0x1c0 [ 588.723528][T25770] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 588.723550][T25770] ? __dev_queue_xmit+0x27e/0x3a70 [ 588.723574][T25770] ? __lock_acquire+0xab9/0xd20 [ 588.723603][T25770] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.723625][T25770] rtnetlink_rcv_msg+0x7cf/0xb70 [ 588.723650][T25770] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 588.723672][T25770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.723694][T25770] ? ref_tracker_free+0x63a/0x7d0 [ 588.723712][T25770] ? __copy_skb_header+0xa7/0x550 [ 588.723741][T25770] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.723767][T25770] netlink_rcv_skb+0x208/0x470 [ 588.723792][T25770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.723816][T25770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.723846][T25770] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.723870][T25770] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.723897][T25770] netlink_unicast+0x75c/0x8e0 [ 588.723924][T25770] netlink_sendmsg+0x805/0xb30 [ 588.723954][T25770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.723981][T25770] ? aa_sock_msg_perm+0x94/0x160 [ 588.724000][T25770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.724020][T25770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.724045][T25770] __sock_sendmsg+0x21c/0x270 [ 588.724067][T25770] ____sys_sendmsg+0x505/0x830 [ 588.724097][T25770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.724129][T25770] ? import_iovec+0x74/0xa0 [ 588.724155][T25770] ___sys_sendmsg+0x21f/0x2a0 [ 588.724184][T25770] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.724229][T25770] ? __fget_files+0x2a/0x420 [ 588.724244][T25770] ? __fget_files+0x3a0/0x420 [ 588.724264][T25770] __x64_sys_sendmsg+0x19b/0x260 [ 588.724293][T25770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.724326][T25770] ? rcu_is_watching+0x15/0xb0 [ 588.724350][T25770] ? do_syscall_64+0xbe/0x3b0 [ 588.724372][T25770] do_syscall_64+0xfa/0x3b0 [ 588.724390][T25770] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.724408][T25770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.724426][T25770] ? clear_bhb_loop+0x60/0xb0 [ 588.724446][T25770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.724464][T25770] RIP: 0033:0x7efd7578e9a9 [ 588.724480][T25770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.724496][T25770] RSP: 002b:00007efd7658f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.724522][T25770] RAX: ffffffffffffffda RBX: 00007efd759b6080 RCX: 00007efd7578e9a9 [ 588.724536][T25770] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000004 [ 588.724549][T25770] RBP: 00007efd75810d69 R08: 0000000000000000 R09: 0000000000000000 [ 588.724562][T25770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.724575][T25770] R13: 0000000000000000 R14: 00007efd759b6080 R15: 00007ffffe705cb8 [ 588.724597][T25770] [ 589.307864][T25770] team_slave_0: entered promiscuous mode [ 589.313726][T25770] team_slave_1: entered promiscuous mode [ 589.491185][T25782] bond0 (unregistering): Released all slaves [ 593.915033][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!